
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft
File: GWhCPtbSSViApWptsCvGcpjF5oY.mft (raw, json)
Hash identifier: mcheBYBQSE2FAep9GfvjzSXZXWoMoVj6hnxinAmQq30=
Subject key identifier: 7B:A9:36:74:7A:E6:BD:0A:06:DB:47:A9:16:97:18:F3:3F:A7:82:AE
Authority key identifier: 19:68:42:3E:D6:D2:49:58:80:A5:6A:6D:B0:2B:C6:72:98:C5:E6:86
Certificate issuer: /CN=A918D3A9/serialNumber=1968423ED6D2495880A56A6DB02BC67298C5E686
Certificate serial: 1125
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft
Manifest number: 1105
Signing time: Thu 16 Apr 2026 17:13:44 +0000
Manifest this update: Thu 16 Apr 2026 17:13:43 +0000
Manifest next update: Thu 23 Apr 2026 17:13:43 +0000
Files and hashes: 1: GWhCPtbSSViApWptsCvGcpjF5oY.crl (hash: TfdqcmRp0gEas4kBOCcg1dwcnmOcNTmiGfenNlT29WQ=)
2: D4F3A2B4DBCD11EE9B6F4669C4F9AE02.roa (hash: adNVp+jeKpiI/DZRqFAXkjDO248rnrJta6jKv+gGFM0=)
3: 2884888A717011E99BA2FB3DC4F9AE02.roa (hash: PaYa3XqCNqlKALsec1HMQNqlcAxMErVMEmTN74jVBUA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.crl
rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 17:13:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4389 (0x1125)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D3A9, serialNumber=1968423ED6D2495880A56A6DB02BC67298C5E686
Validity
Not Before: Apr 16 17:13:43 2026 GMT
Not After : Apr 23 17:13:43 2026 GMT
Subject: CN=69e118c8-982b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:59:dd:66:eb:85:af:e7:b5:0d:6a:f5:25:82:
ca:2e:6f:ec:e3:d5:7f:9c:66:58:f5:84:94:e1:95:
98:d9:cb:02:30:a6:59:d3:5c:26:f3:6e:22:a7:ce:
b6:59:66:a4:f1:bd:2e:51:4e:89:56:90:8b:70:e6:
7b:50:79:b1:99:ab:07:cc:70:73:9a:b2:a6:c5:d1:
3e:c7:98:12:21:d9:d3:56:75:01:10:05:e5:b8:9d:
44:ac:5f:58:8c:d6:a7:a6:1f:f0:0e:6a:03:82:3d:
43:95:68:90:aa:22:bb:20:5b:27:7b:ad:62:04:4c:
2a:60:c6:59:5c:33:bd:a0:98:a8:cb:50:7d:03:c2:
71:98:b0:8b:d1:37:7e:51:6c:0b:64:ec:41:56:1d:
21:e5:69:56:dd:db:f3:3e:a5:46:55:2a:88:4f:90:
40:ca:e1:65:bf:65:2f:a7:d3:ca:75:0b:45:07:d9:
e6:f5:0b:7b:4e:42:5f:10:6f:d9:86:72:fd:d6:87:
d0:3e:6a:65:71:67:c7:e8:5a:88:3c:59:a7:5e:c9:
83:1b:d2:3d:ba:4b:d3:ba:72:97:59:74:2a:53:ff:
49:f3:b1:50:80:ca:eb:fd:89:c8:7f:d4:6c:1a:6e:
44:ae:c2:db:93:50:a9:3a:53:10:93:e1:0f:1e:76:
3d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A9:36:74:7A:E6:BD:0A:06:DB:47:A9:16:97:18:F3:3F:A7:82:AE
X509v3 Authority Key Identifier:
keyid:19:68:42:3E:D6:D2:49:58:80:A5:6A:6D:B0:2B:C6:72:98:C5:E6:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:26:b6:b7:6c:e5:87:59:a3:53:9a:67:b7:88:2d:69:8c:3a:
78:dd:43:70:83:26:bc:8b:31:c0:c1:82:b5:12:24:2e:2f:5e:
66:89:22:7a:11:61:8b:4b:90:2b:82:e6:83:dc:85:b8:26:c1:
55:77:81:04:f5:80:54:db:3d:88:ed:4c:8a:d9:59:8c:29:79:
99:b8:fa:90:83:6d:38:31:94:45:a3:0d:7b:cc:9b:4d:28:2f:
7d:88:10:2f:a7:92:5c:94:45:47:e8:9b:02:aa:40:75:16:82:
bd:5e:09:25:7c:0a:81:16:0c:28:03:f4:3d:c1:3a:a3:e3:d5:
14:91:42:f0:c5:03:2a:a6:5d:41:f5:08:28:99:fb:04:75:f8:
24:e8:19:dc:95:4d:83:31:f6:6f:a4:21:95:79:43:bd:56:df:
28:b4:70:ee:fa:24:a4:8f:76:79:23:c3:31:d3:e5:10:29:b6:
a5:63:85:ca:89:07:1c:3a:1d:d6:3c:bb:3d:b7:15:99:3f:ac:
08:57:b4:e7:97:3e:c9:7d:3d:3b:a3:f6:81:99:21:05:e6:2f:
18:d1:7e:d1:ac:14:a4:2d:d8:c5:4d:27:dd:c5:73:98:52:bd:
37:8a:1f:c4:18:5c:c5:9b:86:f3:43:83:a8:b0:bd:9e:51:09:
39:3e:0f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:11:45 2026 by rpki-client