
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.mft
File: Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.mft (raw, json)
Hash identifier: NInG1fc/Qt8detRDMKFsDtPs7m9oiIg3fBKXxC+DzAI=
Subject key identifier: 6B:4B:42:C1:40:CB:82:3F:14:CA:4F:C0:62:2A:BD:7B:03:92:53:10
Authority key identifier: 1A:4D:31:4C:1F:D0:10:62:2E:87:49:1C:E4:82:7B:62:39:66:70:9C
Certificate issuer: /CN=A917B4EE/serialNumber=1A4D314C1FD010622E87491CE4827B623966709C
Certificate serial: 06BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.mft
Manifest number: 06B9
Signing time: Sun 01 Mar 2026 22:49:56 +0000
Manifest this update: Sun 01 Mar 2026 22:49:55 +0000
Manifest next update: Sun 08 Mar 2026 22:49:55 +0000
Files and hashes: 1: Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.crl (hash: IX6yQP1ZbKm0AzVJ9MWoHd3TMLC422C651lUFmT4jO8=)
2: 851D827C977511EBA99DCE72C4F9AE02.roa (hash: l03CMNRDrfsVu/nqV6YLkSX63V5bCBBVUQMYv2mybxo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.crl
rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:49:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1727 (0x6bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B4EE, serialNumber=1A4D314C1FD010622E87491CE4827B623966709C
Validity
Not Before: Mar 1 22:49:55 2026 GMT
Not After : Mar 8 22:49:55 2026 GMT
Subject: CN=69a4c294-0b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:35:e6:2e:3c:d7:bc:df:c1:aa:e1:8f:6a:49:
40:0a:89:47:ff:19:5a:57:30:c4:3f:c8:61:ed:92:
c0:73:9a:5f:02:ae:f7:68:0f:21:36:8e:f1:57:cf:
50:ca:98:94:94:58:c3:ed:20:45:03:df:ff:45:cf:
1c:6b:cf:7d:66:c4:78:ad:b1:28:b1:0c:50:7f:8b:
3c:46:79:b5:09:13:0d:bf:b6:12:1a:6b:3c:a3:6b:
9e:92:3e:14:6b:0a:5a:05:b3:c0:4d:56:4c:85:af:
05:06:2f:c8:7a:15:c4:64:33:fe:82:f6:a1:b8:0b:
0a:73:73:c5:74:e3:4c:d3:c2:e9:dc:86:f5:59:76:
ba:25:bb:03:93:6a:50:1c:10:d3:90:b6:e8:43:47:
51:dd:8a:25:d3:de:4a:52:9f:fb:90:5e:cb:5a:8a:
e6:c4:03:12:38:97:8d:04:75:8b:66:e0:4f:99:90:
4c:2d:53:6a:0d:ce:47:2b:c2:d5:e5:0a:8a:bc:f7:
db:31:0d:54:ae:ca:e8:7f:93:08:e3:9d:d2:de:ea:
4b:56:56:8b:37:24:8d:7b:8e:c5:3f:45:d0:6d:49:
22:ad:b2:66:9e:c8:dc:1a:24:7a:c2:76:d1:bc:ea:
6f:f6:1c:91:7d:7d:d0:bd:aa:97:7f:0b:4c:ed:1f:
21:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:4B:42:C1:40:CB:82:3F:14:CA:4F:C0:62:2A:BD:7B:03:92:53:10
X509v3 Authority Key Identifier:
keyid:1A:4D:31:4C:1F:D0:10:62:2E:87:49:1C:E4:82:7B:62:39:66:70:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:9d:35:4f:c0:de:e9:62:01:59:0a:5a:1e:21:c6:09:25:4c:
e0:cd:45:48:69:55:38:44:0a:ab:c6:b0:32:4c:77:6e:c4:49:
f4:d4:42:3e:8e:9b:81:3c:5d:05:25:6f:27:24:61:e3:ca:3a:
01:43:bd:f3:1a:77:c0:53:c4:86:fa:c2:be:52:24:f5:7f:60:
2a:28:40:d1:0d:b5:70:bf:20:b3:3e:2f:4d:5a:e2:84:21:23:
be:86:3d:80:2e:c6:34:1b:75:e8:82:aa:4c:2a:a5:c1:59:a8:
57:64:ce:76:37:d6:17:a7:c8:36:6f:22:df:05:c0:31:36:ba:
8e:16:a1:fa:7f:73:a2:6e:2b:49:a7:59:4b:5e:5b:33:df:83:
4c:66:47:c2:8c:4b:72:00:31:58:80:21:3f:5a:6f:1d:9b:da:
75:33:06:b3:d6:83:69:85:72:eb:45:f0:9e:d0:3f:db:1d:aa:
7c:24:74:da:e0:61:56:5e:1f:d1:b9:8d:1a:41:ed:c3:b3:f0:
2a:97:1a:4c:51:9b:34:3f:08:2e:89:ee:b7:0c:d3:e9:61:f0:
ff:d4:9e:d8:e2:4d:76:86:d8:d4:e6:73:4f:df:61:9c:01:70:
6c:31:7a:80:ff:a6:cb:c9:70:92:b9:68:55:1d:21:24:03:99:
ca:32:70:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:19:08 2026 by rpki-client