
$ rpki-client -vvf rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft
File: GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft (raw, json)
Hash identifier: 4AM6uK75PMv7OAPE/X6rPJ8W0/10MxrBm1Fp6BD3o+k=
Subject key identifier: 3C:2F:65:77:22:1F:53:18:E4:1F:84:25:E6:FE:AF:94:81:1E:FB:F5
Authority key identifier: 19:A0:43:81:99:FD:FE:24:DC:F8:56:62:A4:8B:DB:57:51:E1:B5:D9
Certificate issuer: /CN=A918842E/serialNumber=19A0438199FDFE24DCF85662A48BDB5751E1B5D9
Certificate serial: 99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaBDgZn9_iTc-FZipIvbV1Hhtdk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft
Manifest number: 95
Signing time: Fri 17 Apr 2026 07:11:50 +0000
Manifest this update: Fri 17 Apr 2026 07:11:50 +0000
Manifest next update: Fri 24 Apr 2026 07:11:50 +0000
Files and hashes: 1: GaBDgZn9_iTc-FZipIvbV1Hhtdk.crl (hash: KlnV7MIaZkp1DLFoQp5m8wLBoMCLxv7hsXqWlWQ1qIM=)
2: 51D222025DEF11F08A4EA06FC4F9AE02.roa (hash: Ht+AYFRYgTia5PfBCXy1G2MKk6pS05Kn+q7rQOjqmks=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.crl
rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaBDgZn9_iTc-FZipIvbV1Hhtdk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:11:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153 (0x99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918842E, serialNumber=19A0438199FDFE24DCF85662A48BDB5751E1B5D9
Validity
Not Before: Apr 17 07:11:50 2026 GMT
Not After : Apr 24 07:11:50 2026 GMT
Subject: CN=69e1dd36-f4e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0c:87:5c:32:6c:39:fe:87:be:95:3e:d7:c1:
cd:c0:88:98:04:65:d9:c3:79:0a:89:e7:2d:06:91:
70:cb:b5:a2:5c:fe:27:9a:02:b6:0b:25:97:e7:9b:
09:7d:22:09:bf:30:34:e4:8d:51:b7:e0:1b:ce:0a:
24:21:84:b7:24:2c:89:4e:9c:7b:5c:4e:0b:04:fb:
77:0f:16:39:ed:20:f6:01:5e:e3:e2:83:9c:c6:e1:
2b:b8:73:1b:4c:2c:f6:94:a2:ca:53:a8:63:0f:b0:
40:d1:93:55:74:b5:84:83:2e:08:74:f3:ae:81:1f:
43:c8:b7:62:08:ba:c1:98:90:f2:0b:f6:ca:b6:62:
bc:8c:c2:b9:b1:65:c9:24:b3:bb:64:bf:fd:c9:ba:
03:f7:32:46:b2:a3:5e:d3:e0:2f:f9:37:27:b6:85:
b4:77:28:6a:63:f6:a0:50:3d:97:6d:f7:7b:f0:e8:
37:48:1a:0a:29:7a:6c:d9:d0:3b:e3:a1:18:8f:6e:
54:67:11:e1:68:8f:f9:99:79:f3:50:1b:17:6a:25:
f8:76:33:7f:6e:c4:8f:2f:04:b8:ff:ce:54:26:30:
1e:10:02:ba:f2:2f:12:03:e4:3d:44:63:91:e1:94:
3e:e7:2a:77:e2:aa:c8:17:aa:dc:84:83:d5:29:94:
1b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:2F:65:77:22:1F:53:18:E4:1F:84:25:E6:FE:AF:94:81:1E:FB:F5
X509v3 Authority Key Identifier:
keyid:19:A0:43:81:99:FD:FE:24:DC:F8:56:62:A4:8B:DB:57:51:E1:B5:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaBDgZn9_iTc-FZipIvbV1Hhtdk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:32:a7:d3:ee:d4:e5:b4:7f:e8:a9:38:92:4b:48:35:ba:e7:
92:90:25:52:dc:21:5c:8f:35:15:19:3b:fc:5a:ac:b9:07:b7:
a4:96:95:b9:80:86:90:0e:68:d5:29:51:fa:55:93:3b:bc:38:
79:c2:d1:4a:a3:5d:5c:f1:8d:4d:9d:c8:62:ee:13:a1:44:1e:
d3:e2:d0:bb:c0:ae:86:fc:70:2c:63:86:11:04:7b:e7:4a:ee:
3d:11:bc:b2:79:3f:0a:47:32:aa:d1:b8:a6:36:7f:81:d0:f4:
28:14:d2:8a:91:35:0c:38:28:92:51:67:8b:f4:20:32:a8:8f:
ef:f8:79:96:e8:01:57:3e:b6:89:6e:65:b2:bd:4e:45:3e:2b:
b7:9f:29:ee:0c:58:b7:34:2f:8c:6b:25:5e:e6:8b:0b:fa:46:
f6:4d:9d:f0:64:1c:33:c8:99:85:cf:8d:86:30:2c:ab:d2:54:
5f:4b:d1:55:5c:db:20:9c:3f:e0:c0:b0:64:8a:0d:e4:7a:98:
ab:6b:b1:4e:96:ab:02:48:b7:eb:c9:4e:69:2a:65:78:ec:01:
90:54:a5:d5:30:76:2f:ac:e1:1e:03:ed:26:13:2c:45:14:ca:
e1:9c:d5:87:b7:1f:c3:07:82:77:fe:81:20:87:1f:cb:a7:fb:
7c:bc:ba:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:41:28 2026 by rpki-client