
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft
File: GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft (raw, json)
Hash identifier: l0ePDKcR27WIO+xI7oOtQr3wzUqhGb2TYORWUcmbaHY=
Subject key identifier: 26:AA:72:C6:5C:9E:08:9B:49:72:A9:4B:83:D0:54:53:1F:FC:4C:F0
Authority key identifier: 1A:68:29:41:F8:78:9C:4C:EA:3C:C3:3B:63:73:E4:94:76:30:BC:84
Certificate issuer: /CN=A9187F7E/serialNumber=1A682941F8789C4CEA3CC33B6373E4947630BC84
Certificate serial: 0323
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft
Manifest number: 030F
Signing time: Mon 02 Mar 2026 00:44:25 +0000
Manifest this update: Mon 02 Mar 2026 00:44:23 +0000
Manifest next update: Mon 09 Mar 2026 00:44:23 +0000
Files and hashes: 1: GmgpQfh4nEzqPMM7Y3PklHYwvIQ.crl (hash: GW5bUwMy7bFjFcIN1Uu/lCryr4GBFvND6a3kOvN/hJw=)
2: CF0D85CEFE5211EFA5AB8F82C4F9AE02.roa (hash: zK5tz0TQBIN2LOFrK1BLN+syvhwWEXx2GojszSpoCIY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.crl
rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:44:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 803 (0x323)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187F7E, serialNumber=1A682941F8789C4CEA3CC33B6373E4947630BC84
Validity
Not Before: Mar 2 00:44:23 2026 GMT
Not After : Mar 9 00:44:23 2026 GMT
Subject: CN=69a4dd68-bd51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a3:50:53:8c:40:f5:88:52:e7:a7:63:f4:b6:
7a:77:bc:d0:7d:f8:fc:62:76:88:64:b4:87:03:95:
f3:a9:bc:d7:d1:a9:d5:b4:d4:37:88:52:e7:83:b9:
fc:37:3e:04:69:68:8b:97:24:2e:36:83:16:a2:04:
c6:07:8e:6d:44:9b:29:39:b4:e5:6e:fc:22:56:62:
97:91:78:dc:96:cb:4c:aa:75:21:75:3b:1d:9a:56:
9f:05:b1:9f:d7:b3:0a:a3:2d:19:bd:c8:57:99:34:
19:55:74:2b:21:09:8d:17:ef:98:76:a0:63:9e:53:
9d:f5:fa:e6:de:b7:94:17:a4:ee:fb:7f:8a:c2:5f:
60:c5:c1:19:fb:a1:89:a3:19:be:e2:59:4d:53:8f:
76:34:25:95:e0:ff:2f:0a:ea:85:cf:03:d3:50:79:
f5:a7:b5:60:51:0b:80:ca:a9:43:d1:54:7e:32:4b:
0e:d3:b0:0f:6b:ed:87:73:98:ba:de:8b:05:72:6b:
51:1b:bc:b7:08:d4:3d:35:73:4f:fb:d2:2c:f5:94:
f3:40:4e:f4:9b:95:30:16:00:23:67:f1:99:13:8d:
ed:51:32:f8:9f:e8:ab:b6:d4:af:4b:2c:6a:c6:2e:
20:4b:0e:a4:62:bc:81:a5:31:6c:a9:ae:35:5e:87:
b6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:AA:72:C6:5C:9E:08:9B:49:72:A9:4B:83:D0:54:53:1F:FC:4C:F0
X509v3 Authority Key Identifier:
keyid:1A:68:29:41:F8:78:9C:4C:EA:3C:C3:3B:63:73:E4:94:76:30:BC:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:87:b6:12:b3:48:21:17:40:c8:53:cf:ac:28:78:f0:fa:39:
9d:bd:f7:d3:60:e0:9e:2f:d9:a2:f9:32:68:b1:e7:25:27:53:
5b:2e:1a:f1:18:4a:4d:cd:59:54:07:70:8c:cc:a5:c0:64:a7:
03:c9:81:20:67:7a:84:dd:08:1b:1c:6f:0e:4a:f6:a4:1e:ea:
cf:19:f2:ab:df:58:44:2a:35:35:61:7f:9a:7e:45:b5:1b:50:
14:1b:a1:5c:e2:c8:b7:73:bc:fc:32:82:ed:e0:68:12:bd:78:
eb:38:00:e8:e5:73:71:cc:7d:15:43:84:2c:ed:46:1b:0b:0c:
e7:04:f9:ea:84:bc:83:94:24:ad:9a:c3:00:2d:a1:3b:2d:85:
8c:cb:1f:47:e7:5f:df:e5:3b:3e:48:2c:21:a8:7b:86:8b:ab:
fd:e1:cc:bd:fd:26:6f:a7:4b:aa:45:ae:3e:bd:06:e1:36:46:
ff:f8:72:3a:83:22:a6:62:2a:04:aa:b4:19:d5:80:38:f9:5b:
d5:e4:40:14:aa:2a:d9:2c:38:cb:14:b0:7f:02:cc:00:35:9c:
44:00:e6:f3:0f:8e:b6:8f:37:a4:5d:8a:d1:bc:7b:72:79:90:
6b:27:3c:fb:48:b4:32:82:5c:fd:68:f2:26:76:1f:a7:30:f8:
dc:75:c4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:25:13 2026 by rpki-client