
$ rpki-client -vvf rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft
File: GW-SdzKT5JVLTZel03rIIKdFwuA.mft (raw, json)
Hash identifier: n0gUZwkLQ+UkbPpdXbb6oQrhimK1tCMvEAJFTnGD6bQ=
Subject key identifier: DC:66:58:21:38:36:98:8D:10:1D:82:18:9A:44:45:7E:43:44:41:1F
Authority key identifier: 19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0
Certificate issuer: /CN=A917315B/serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
Certificate serial: 03BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft
Manifest number: 0390
Signing time: Sun 01 Mar 2026 01:46:20 +0000
Manifest this update: Sun 01 Mar 2026 01:46:20 +0000
Manifest next update: Sun 08 Mar 2026 01:46:20 +0000
Files and hashes: 1: GW-SdzKT5JVLTZel03rIIKdFwuA.crl (hash: zcgEj/zVmKRj0zlx4rXcM1RufxrAA0HXBa1CMhAa+f0=)
2: EC6F91D234E111F0AC656B38C4F9AE02.roa (hash: E1WKt1YaZn8IuZR2WkpfcwtdDLc+dHKZAfiwmmiESyg=)
3: AEF7F896B23511EF99CCD73DC4F9AE02.roa (hash: zyZNP96AkvyazKN+7Z9uXIl84GYsJy6FhTmGH2JNTf4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl
rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:46:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 955 (0x3bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917315B, serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
Validity
Not Before: Mar 1 01:46:20 2026 GMT
Not After : Mar 8 01:46:20 2026 GMT
Subject: CN=69a39a6c-c255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c5:fb:18:f2:97:1b:98:3f:f8:a1:87:f7:ca:
1a:f2:be:e0:ed:b6:47:9c:48:a7:c2:14:3c:5b:0e:
6d:e2:18:96:13:11:d7:44:36:77:b9:0e:49:c0:b6:
d7:00:89:cb:d0:72:12:9c:0d:ec:68:33:9b:b6:80:
85:e9:26:5b:14:32:23:98:4e:8a:e9:c0:2f:23:a6:
5c:bc:14:89:17:e6:c2:e5:0e:42:dc:57:55:0d:f5:
29:28:fa:5a:20:e8:ff:a5:bb:5a:9f:2e:eb:7b:a7:
c0:f6:b0:65:1c:f4:b1:c7:27:98:43:1a:da:b5:19:
3d:78:15:e2:9b:5f:6d:87:db:f8:cb:43:7f:ea:03:
d2:fd:3a:58:72:25:03:37:bd:c8:24:d3:2b:66:97:
60:75:e0:a2:9e:b3:1e:a1:b7:d2:b0:69:f8:4f:f1:
a6:00:92:3e:97:85:c3:10:80:5c:f7:04:c5:61:33:
2a:97:6c:96:bf:6b:3c:55:c5:fe:09:49:21:f7:75:
52:c6:1d:5c:bb:fd:ad:b3:72:59:4f:2e:63:4d:9d:
23:3a:1c:fa:18:fd:eb:b6:7a:f6:ae:77:0c:e3:04:
84:1b:e4:a0:c9:f1:e0:53:ea:b5:38:13:c5:31:d7:
70:b5:ff:4c:d2:8f:6d:e1:20:5b:87:c4:9c:ab:7c:
d1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:66:58:21:38:36:98:8D:10:1D:82:18:9A:44:45:7E:43:44:41:1F
X509v3 Authority Key Identifier:
keyid:19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:89:47:51:c9:f7:d5:de:06:8d:15:71:27:cc:9e:3d:d7:ce:
6c:e9:31:49:e3:8f:ba:b5:e5:fa:4f:ed:70:da:af:e5:76:47:
41:f6:ec:19:1b:da:2d:03:0c:f0:db:d1:1b:7d:42:d3:52:ae:
65:79:2a:d6:b0:22:10:3a:0f:2b:f2:cd:43:df:65:3b:9d:ec:
76:53:57:ae:ea:fe:2d:79:df:ec:3c:6c:56:46:9d:c4:35:89:
9e:93:f4:a3:18:c3:12:79:f4:1a:be:4b:a5:ae:6b:12:9a:e3:
23:ef:fd:2f:b5:f9:49:f6:4c:08:b9:a8:07:fc:02:1f:7c:1c:
5a:a3:eb:2e:f0:88:2a:34:9a:73:e0:e8:bc:ff:40:8f:63:c4:
92:2c:8e:32:ed:e9:6f:85:be:0a:16:fc:6d:3e:a7:ba:d3:65:
f3:07:ce:f0:30:09:91:f1:44:e3:ed:54:15:ae:2c:f0:f7:56:
5a:67:f9:a4:22:c8:f1:c0:eb:d4:5b:f4:b0:dc:9b:e2:8d:de:
18:90:af:49:5f:d2:74:68:e2:5d:27:20:6c:de:17:bb:cf:58:
6f:f1:4b:4f:8b:a3:10:c3:12:75:56:2c:a5:db:8b:b4:86:bf:
71:c9:ed:ee:42:e1:6e:d7:ff:cc:f0:d3:96:d7:42:72:20:8c:
eb:a5:d4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:29:49 2026 by rpki-client