
$ rpki-client -vvf rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.mft
File: gJt-bd3kLwYnhD21n6Qa-n87fDs.mft (raw, json)
Hash identifier: 0cucTDdN0eDZtTC5xsUh6Yu8cP+GtNKDnqPdosIZRtY=
Subject key identifier: A9:FD:68:C4:3A:54:33:27:3A:A4:EF:97:E5:5A:79:CB:CC:E9:F8:9C
Authority key identifier: 80:9B:7E:6D:DD:E4:2F:06:27:84:3D:B5:9F:A4:1A:FA:7F:3B:7C:3B
Certificate issuer: /CN=A917EF96/serialNumber=809B7E6DDDE42F0627843DB59FA41AFA7F3B7C3B
Certificate serial: 084A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJt-bd3kLwYnhD21n6Qa-n87fDs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.mft
Manifest number: 0842
Signing time: Thu 16 Apr 2026 20:46:56 +0000
Manifest this update: Thu 16 Apr 2026 20:46:55 +0000
Manifest next update: Thu 23 Apr 2026 20:46:55 +0000
Files and hashes: 1: gJt-bd3kLwYnhD21n6Qa-n87fDs.crl (hash: daNwp8p0WjzBKwYD5hHI3s99VFSSFhsdZHbIQNI7t1Y=)
2: E331E83206CD11EBA6A91612C4F9AE02.roa (hash: RF8k/3negR21/g9b9yA9JjL4Ez0vyNRYqOU/AL80r3c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.crl
rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJt-bd3kLwYnhD21n6Qa-n87fDs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:46:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2122 (0x84a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917EF96, serialNumber=809B7E6DDDE42F0627843DB59FA41AFA7F3B7C3B
Validity
Not Before: Apr 16 20:46:55 2026 GMT
Not After : Apr 23 20:46:55 2026 GMT
Subject: CN=69e14abf-a628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:76:d7:64:1b:f1:d2:92:02:a0:46:b7:14:09:
ce:97:76:38:ad:98:bb:31:a8:b0:0a:ee:e1:be:27:
b1:d1:96:19:5e:9f:78:7f:f6:82:ae:29:71:17:3b:
2d:73:7a:f7:3f:40:0b:47:2b:fb:ec:57:f8:c2:4a:
e8:6d:ea:71:3c:ed:a8:af:d3:c1:ae:01:61:2e:4b:
49:97:d4:c6:2a:30:c0:76:07:0f:29:8f:f3:71:2c:
2c:81:15:fe:69:47:5d:36:c4:57:aa:2b:85:87:00:
7a:1c:2e:14:31:1f:b2:2f:df:15:03:33:0b:5c:9d:
c5:29:0e:92:7f:d2:de:da:d1:1a:5c:46:43:53:29:
9b:18:53:a0:b6:18:75:19:58:fc:e9:a8:fd:98:f9:
16:de:68:c4:d7:20:36:e1:f8:67:46:0d:84:cf:f5:
cf:a1:44:c4:90:7f:28:71:b1:c1:0b:8b:03:aa:1f:
02:7c:46:40:84:f9:42:3a:aa:2a:4a:53:91:1b:39:
f6:d0:f4:b2:a4:fe:75:d1:d4:6d:66:04:04:06:17:
07:36:d7:84:0e:06:9d:47:8e:7a:8d:e2:36:8d:66:
16:17:9c:f5:03:13:df:84:73:7c:0d:15:82:dc:cc:
e8:1c:bc:a2:47:a3:67:7f:dd:59:1c:71:1a:75:4b:
bc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FD:68:C4:3A:54:33:27:3A:A4:EF:97:E5:5A:79:CB:CC:E9:F8:9C
X509v3 Authority Key Identifier:
keyid:80:9B:7E:6D:DD:E4:2F:06:27:84:3D:B5:9F:A4:1A:FA:7F:3B:7C:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJt-bd3kLwYnhD21n6Qa-n87fDs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cf:40:48:dc:17:03:e9:b1:95:3a:eb:70:54:e2:9f:e2:20:29:
cf:66:66:80:83:5d:eb:29:83:12:3d:6b:3f:00:a7:3e:26:e6:
15:96:35:23:2a:bd:1b:d5:d4:f3:2b:15:92:da:0a:76:fa:48:
77:2e:21:0e:53:2c:34:31:59:40:a0:c8:31:c0:49:52:e9:82:
f4:94:c0:3b:dd:e0:93:5a:b4:b8:71:7c:62:06:7c:7c:0b:0e:
2d:a6:70:51:d4:21:65:fe:fb:ba:e4:2c:78:d1:4c:cc:92:19:
63:83:35:a8:6e:f4:3b:f2:00:31:e2:66:07:d3:4e:7d:e0:c3:
48:bb:a3:84:b0:12:a8:91:e3:e5:af:ed:9b:30:99:b5:f5:2e:
4f:f7:fd:6b:5c:e9:a9:3a:b0:11:40:69:8c:09:82:5a:9c:98:
00:53:13:bf:82:fc:ec:fb:5a:0d:7f:7f:31:7f:f2:2f:5c:dc:
d8:67:c5:1e:b5:1f:c7:c8:5e:31:25:95:f9:d8:dd:41:16:d7:
7c:41:ea:68:ed:c4:9b:60:f9:8e:b0:46:fe:21:82:d0:7e:80:
4c:69:b5:26:ed:bc:5b:ad:0a:8d:fd:ba:d3:a5:9f:1b:ba:92:
d3:4a:c1:90:ab:b4:e3:35:2b:1d:43:0e:eb:93:36:1f:09:d8:
a3:a6:b1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:01:28 2026 by rpki-client