
$ rpki-client -vvf rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft
File: gaZX6qx1VMq3oaKI9bP-7dilzEs.mft (raw, json)
Hash identifier: W+QzJW3MvPxuLYwm0LbQYrXa+A0uW5RbjjFEhJz4VnE=
Subject key identifier: 62:AB:05:30:2A:AE:23:A3:16:88:14:74:A0:4E:8D:47:7D:4A:D0:0C
Authority key identifier: 81:A6:57:EA:AC:75:54:CA:B7:A1:A2:88:F5:B3:FE:ED:D8:A5:CC:4B
Certificate issuer: /CN=A917DFDA/serialNumber=81A657EAAC7554CAB7A1A288F5B3FEEDD8A5CC4B
Certificate serial: 9E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft
Manifest number: 9A
Signing time: Fri 17 Apr 2026 04:37:41 +0000
Manifest this update: Fri 17 Apr 2026 04:37:40 +0000
Manifest next update: Fri 24 Apr 2026 04:37:40 +0000
Files and hashes: 1: gaZX6qx1VMq3oaKI9bP-7dilzEs.crl (hash: XnIeRSM5BMe3lcCncsXxNoeHb6tQ55oeKvKYAfLcYJQ=)
2: A78653B2561F11F09624D128C4F9AE02.roa (hash: U+SMdhKcC6YZLVwx7CjvcktHCkK7+pBrjdw40Tvbfas=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.crl
rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158 (0x9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917DFDA, serialNumber=81A657EAAC7554CAB7A1A288F5B3FEEDD8A5CC4B
Validity
Not Before: Apr 17 04:37:40 2026 GMT
Not After : Apr 24 04:37:40 2026 GMT
Subject: CN=69e1b914-9c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c9:ae:c4:d0:19:11:03:9b:84:86:d1:6e:71:
8c:80:80:81:7b:5e:d7:74:2c:b7:b2:d4:86:5f:4a:
df:64:94:1a:fe:8b:11:92:46:46:48:89:bf:3d:c1:
8d:ee:08:f3:dd:60:2b:f2:d9:31:5c:55:8d:0b:17:
fa:83:39:ea:92:b8:a8:5e:2e:a2:c1:96:f5:b3:f9:
75:78:5a:2f:02:a1:df:71:ab:e0:7f:c9:83:6b:49:
e4:4b:f5:a7:7e:43:8d:82:2b:a9:d7:ca:64:c2:bf:
f4:9a:8a:6b:27:b6:7f:c9:eb:87:81:53:fe:fd:b6:
b6:79:d3:f3:d1:ac:6e:a2:d9:04:cc:e4:44:c0:9e:
e2:df:63:73:a2:37:06:28:a6:b7:dd:75:2b:1a:9f:
60:8e:1a:88:f1:bb:f1:db:9d:e3:16:c1:e1:ba:70:
8a:8d:8c:82:15:1b:55:f9:38:1b:8f:80:ce:be:f2:
9b:37:c5:9b:0b:5d:c1:d1:a9:72:2c:5e:67:22:c4:
89:cd:01:f3:51:c7:f0:ee:74:5c:39:62:8b:14:47:
ef:9c:39:88:11:de:2a:f0:53:fe:42:ed:d6:ae:ee:
83:87:a7:59:85:07:6e:d8:82:bf:1f:f2:1b:0d:b0:
9d:e9:92:0e:45:17:20:90:0a:39:72:50:30:29:d3:
43:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:AB:05:30:2A:AE:23:A3:16:88:14:74:A0:4E:8D:47:7D:4A:D0:0C
X509v3 Authority Key Identifier:
keyid:81:A6:57:EA:AC:75:54:CA:B7:A1:A2:88:F5:B3:FE:ED:D8:A5:CC:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d7:19:5b:be:bc:2d:b5:0e:50:10:f7:57:47:52:57:59:00:b0:
d2:f4:d0:f7:63:32:74:a8:d6:63:9b:1d:eb:d0:07:d7:27:05:
cd:25:48:f1:ea:69:1f:d7:b0:b6:13:a7:99:8a:c4:d2:a4:e8:
78:97:93:0f:98:01:50:75:3f:8e:1e:23:1d:9a:a4:4e:39:b1:
da:2f:19:b4:23:66:d4:60:49:2d:0d:c3:d1:03:d1:f9:f3:ed:
46:9c:9e:06:c7:81:e8:a3:b9:66:80:cd:a3:08:da:2e:d8:6f:
ac:93:32:b3:9a:ea:a7:85:1d:9c:69:3c:f5:22:3f:fd:18:a7:
1c:a4:f7:38:40:4b:a8:02:f2:04:79:ea:2c:8d:88:2c:91:d3:
82:ef:82:c8:2a:8b:8f:7e:99:c5:45:60:f9:6b:00:a2:2b:10:
9d:dc:40:bd:e1:e7:8f:f4:d4:21:0e:23:68:76:17:d2:eb:d0:
e5:b3:c7:f0:64:c2:f7:93:da:3c:27:6d:53:eb:4c:8d:b3:46:
8c:c9:c1:61:ae:a0:4c:6d:4a:a8:6b:4f:6b:50:41:dc:30:0d:
f9:00:e5:53:da:0a:26:5f:6c:34:5e:bb:f7:93:f8:74:a5:e8:
9b:c9:df:d2:39:b1:c7:0e:d9:91:c0:ee:59:d5:37:05:76:66:
c5:55:78:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:07:55 2026 by rpki-client