
$ rpki-client -vvf rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft
File: Gm63WytHE2DtWpJcNRzEDBlBaCc.mft (raw, json)
Hash identifier: dHHhS3Vt/B2aRqV5MS5XyywI9fzhYfMffwQ1hAS0D+E=
Subject key identifier: 65:68:14:26:FF:B3:A5:90:91:7D:A2:E1:1D:1B:6D:FD:C5:01:AB:2B
Authority key identifier: 1A:6E:B7:5B:2B:47:13:60:ED:5A:92:5C:35:1C:C4:0C:19:41:68:27
Certificate issuer: /CN=A9184AB8/serialNumber=1A6EB75B2B471360ED5A925C351CC40C19416827
Certificate serial: DB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gm63WytHE2DtWpJcNRzEDBlBaCc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft
Manifest number: D8
Signing time: Sun 01 Mar 2026 07:52:02 +0000
Manifest this update: Sun 01 Mar 2026 07:52:02 +0000
Manifest next update: Sun 08 Mar 2026 07:52:02 +0000
Files and hashes: 1: Gm63WytHE2DtWpJcNRzEDBlBaCc.crl (hash: elD95Sz8FHs32OMus6RNpC7wvLN7SHTVZ2YD7AlN1Cs=)
2: 6156245AD26F11EFB6D7116EC4F9AE02.roa (hash: ItkaXldx6gtahTIjrAXDCkQay4mCRAu8VzlcwRatTFM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.crl
rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gm63WytHE2DtWpJcNRzEDBlBaCc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:52:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 219 (0xdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9184AB8, serialNumber=1A6EB75B2B471360ED5A925C351CC40C19416827
Validity
Not Before: Mar 1 07:52:02 2026 GMT
Not After : Mar 8 07:52:02 2026 GMT
Subject: CN=69a3f022-9096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:33:f3:64:85:94:94:0c:44:44:14:91:70:2d:
3a:26:bf:62:a5:0e:fc:c6:1c:a3:75:fc:b9:6f:3e:
60:9c:07:b1:f8:d3:ce:d2:2d:f9:91:e3:79:7e:53:
b4:ba:a1:4c:c0:4f:a2:df:c5:f1:df:60:8c:f8:4f:
93:ce:a1:ae:25:5c:1f:f6:d9:5e:f8:9d:da:a8:b0:
de:1d:cc:ae:e5:b9:6f:ca:50:2c:71:1e:c2:0d:67:
d3:5a:45:ab:bc:71:39:6f:51:3f:43:45:a6:96:af:
be:f7:ca:39:4e:23:17:73:d7:56:e3:c7:ba:59:c4:
de:02:17:58:bc:97:78:38:c3:a1:1a:86:2d:00:d7:
47:2b:14:a9:ee:95:71:d2:73:66:77:4e:de:3e:8d:
5b:3e:7d:86:90:aa:15:1b:c8:18:ff:93:b6:c0:63:
13:d4:22:01:8f:b0:19:00:dd:93:e5:e0:ae:04:79:
c7:52:ec:00:49:05:b2:6b:8a:13:85:47:b8:fd:ef:
f2:f6:03:6e:56:b2:34:4d:6a:a6:ac:aa:50:b4:fb:
18:4b:95:a7:60:c9:cc:0f:cf:f9:22:fb:bf:86:23:
ab:42:4d:e5:12:65:9e:ab:41:6d:f1:e0:90:1f:7a:
85:0c:d1:5d:98:19:ba:4e:d4:19:6f:71:67:bd:5d:
0b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:68:14:26:FF:B3:A5:90:91:7D:A2:E1:1D:1B:6D:FD:C5:01:AB:2B
X509v3 Authority Key Identifier:
keyid:1A:6E:B7:5B:2B:47:13:60:ED:5A:92:5C:35:1C:C4:0C:19:41:68:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gm63WytHE2DtWpJcNRzEDBlBaCc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e6:cb:0d:e2:92:54:dc:4c:90:8a:9e:76:9a:60:bd:a8:97:67:
07:93:cc:12:f3:33:a1:07:55:eb:e7:43:e9:62:8d:9d:ad:b4:
3e:a0:bf:82:0d:b4:8e:82:1d:ed:0d:0a:c4:bd:05:dc:62:b7:
4b:eb:a6:4f:85:f9:c5:d2:bb:5d:66:37:fe:fd:9b:31:a6:8e:
5b:86:c9:74:43:4d:a3:ea:c5:fb:48:bd:33:45:44:89:df:a0:
63:0e:2f:8f:e8:37:9d:7a:3f:1c:0c:6d:8a:1b:38:34:34:5f:
eb:73:43:5f:8c:58:23:99:f1:12:bb:cb:72:86:f6:d0:54:76:
5a:15:36:55:07:8f:42:76:de:9d:d3:42:8e:f2:8a:6a:66:7d:
37:70:64:7f:76:0b:93:88:d5:67:5c:29:bc:24:a4:49:22:d6:
6b:81:aa:8b:a7:34:53:7f:f2:7b:c3:25:0c:ff:3a:9f:8b:69:
4b:70:e4:d5:68:d4:9a:ab:35:f0:69:b8:a6:26:4a:01:dc:62:
3f:71:fe:94:5b:62:c8:df:8d:ff:96:80:c6:9d:43:82:f0:0d:
ea:13:22:9e:dc:ac:ad:89:93:b4:6d:7a:bb:5a:f8:07:eb:13:
2a:fc:60:40:90:72:8e:78:20:4a:d0:08:6c:c9:a1:62:14:4a:
ef:a6:b5:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:57:25 2026 by rpki-client