
$ rpki-client -vvf rpki.apnic.net/member_repository/A917960F/BA35E0A8976B11F0AEE7A584C4F9AE02/gSWwbgdMKML4IQXEMQAEnt9uAPg.mft
File: gSWwbgdMKML4IQXEMQAEnt9uAPg.mft (raw, json)
Hash identifier: ItVFNAoSLncBTTko/wN+qN6s0SNpgYbhLCeKQMb1mr4=
Subject key identifier: DF:A4:DF:A8:E3:02:9F:60:F2:D2:3D:E5:E4:C5:18:7F:05:AB:4B:9B
Authority key identifier: 81:25:B0:6E:07:4C:28:C2:F8:21:05:C4:31:00:04:9E:DF:6E:00:F8
Certificate issuer: /CN=A917960F/serialNumber=8125B06E074C28C2F82105C43100049EDF6E00F8
Certificate serial: 58
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSWwbgdMKML4IQXEMQAEnt9uAPg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917960F/BA35E0A8976B11F0AEE7A584C4F9AE02/gSWwbgdMKML4IQXEMQAEnt9uAPg.mft
Manifest number: 55
Signing time: Sun 01 Mar 2026 09:35:31 +0000
Manifest this update: Sun 01 Mar 2026 09:35:30 +0000
Manifest next update: Sun 08 Mar 2026 09:35:30 +0000
Files and hashes: 1: gSWwbgdMKML4IQXEMQAEnt9uAPg.crl (hash: 8X3TphFM25hlp0vmzVG3E/HqlGVYGDUC5ruLGdaYMK8=)
2: 84BE275E976C11F0867B3309C4F9AE02.roa (hash: CpP4/hcnXIR7veugCMThSACinZW+qkZzHANhaqtAI3U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917960F/BA35E0A8976B11F0AEE7A584C4F9AE02/gSWwbgdMKML4IQXEMQAEnt9uAPg.crl
rsync://rpki.apnic.net/member_repository/A917960F/BA35E0A8976B11F0AEE7A584C4F9AE02/gSWwbgdMKML4IQXEMQAEnt9uAPg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSWwbgdMKML4IQXEMQAEnt9uAPg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:35:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88 (0x58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917960F, serialNumber=8125B06E074C28C2F82105C43100049EDF6E00F8
Validity
Not Before: Mar 1 09:35:30 2026 GMT
Not After : Mar 8 09:35:30 2026 GMT
Subject: CN=69a40863-7009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:15:3f:8d:71:59:ed:37:70:ec:c2:41:3f:b7:
14:c4:6a:79:c9:78:56:90:b2:31:30:3e:6d:65:c4:
d4:3b:47:1e:86:5b:46:99:db:dd:81:e8:0a:8f:89:
7b:55:92:8a:41:21:30:b4:b7:51:a5:99:4f:98:91:
db:12:f3:87:ad:c4:1c:6f:73:1b:58:c6:73:7d:a0:
3d:00:30:9b:96:4c:11:19:26:b2:32:0f:5f:80:da:
5a:72:0b:fd:f5:71:1d:8c:a2:27:0b:ce:71:05:12:
d5:ec:3a:02:e4:13:4a:ff:d3:47:cc:f7:c6:13:a7:
5c:f6:16:59:f0:51:82:c5:32:74:c3:16:bd:fa:ee:
07:09:f8:5a:8c:80:20:97:51:5f:6b:e8:c8:a9:2a:
74:3f:00:e2:80:ea:ad:55:0f:d1:4c:30:d0:7d:b5:
99:b6:aa:ae:2d:30:db:00:7b:02:f2:72:52:d4:e3:
b3:7c:bf:fd:06:a2:7c:0f:e0:d4:f6:b4:af:f3:8d:
0e:f8:22:9b:a9:ba:d3:64:6e:aa:da:34:a3:1b:a9:
cc:36:f0:e5:c4:c5:da:25:96:74:13:db:6d:6c:c5:
bd:e4:09:03:55:a2:4a:f4:75:4b:31:3f:4e:98:c9:
ed:86:f9:f2:f2:2d:5a:6a:0c:e5:33:61:00:71:c7:
79:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A4:DF:A8:E3:02:9F:60:F2:D2:3D:E5:E4:C5:18:7F:05:AB:4B:9B
X509v3 Authority Key Identifier:
keyid:81:25:B0:6E:07:4C:28:C2:F8:21:05:C4:31:00:04:9E:DF:6E:00:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917960F/BA35E0A8976B11F0AEE7A584C4F9AE02/gSWwbgdMKML4IQXEMQAEnt9uAPg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSWwbgdMKML4IQXEMQAEnt9uAPg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917960F/BA35E0A8976B11F0AEE7A584C4F9AE02/gSWwbgdMKML4IQXEMQAEnt9uAPg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:ce:0b:4b:8e:a4:84:ad:f0:19:ba:7b:4e:d4:a0:38:08:87:
97:0c:1a:01:c0:2f:2a:89:3f:4a:43:b2:15:10:37:3f:7b:49:
c6:32:82:25:08:0e:fb:91:d2:a2:93:21:f9:94:11:dc:89:8d:
53:8c:0e:4b:d2:2a:8d:01:3c:a7:64:4d:a0:a0:cb:f1:ee:2c:
90:d5:f2:7e:8d:0c:75:4d:d1:ce:6a:44:30:88:0d:15:b8:03:
ba:2f:06:b0:63:84:62:60:91:a8:c1:fc:87:dc:6f:d5:4e:03:
9c:4d:99:bd:48:65:7e:4a:81:c8:0f:30:8a:11:59:f0:52:67:
ea:87:b4:1d:d0:6e:03:4d:fd:7e:af:c1:62:07:f8:d1:d7:c1:
62:5f:b2:f5:c0:65:1c:ba:60:60:4a:cf:c9:ac:79:51:45:36:
0c:c6:51:60:bf:17:ac:e0:69:da:f5:33:d1:f9:e2:36:83:96:
87:ca:89:c2:b7:c9:81:fa:90:7a:25:97:d9:42:5d:55:b5:87:
9b:fc:07:81:7d:7f:eb:84:49:04:67:b6:02:74:e8:b8:1c:33:
00:60:84:cd:11:1c:1e:17:bf:80:e1:cf:f4:7e:5c:8e:c0:65:
e4:16:a5:75:87:76:ad:4e:1b:53:b6:e5:2c:d6:8b:f4:98:d5:
cb:6f:a2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:27:18 2026 by rpki-client