
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft
File: gH5oiqUL0-OL4xtdTE4GCATrFdw.mft (raw, json)
Hash identifier: F2UHRDAK88iGXDBwU3CP0ur/1HnvKjhKSxZSvY8j4xA=
Subject key identifier: 3A:59:E0:15:E7:73:8E:0B:D3:1A:85:CA:CF:FC:7A:94:33:D0:BD:66
Authority key identifier: 80:7E:68:8A:A5:0B:D3:E3:8B:E3:1B:5D:4C:4E:06:08:04:EB:15:DC
Certificate issuer: /CN=A918F0E2/serialNumber=807E688AA50BD3E38BE31B5D4C4E060804EB15DC
Certificate serial: F8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gH5oiqUL0-OL4xtdTE4GCATrFdw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft
Manifest number: F5
Signing time: Sun 01 Mar 2026 07:23:34 +0000
Manifest this update: Sun 01 Mar 2026 07:23:33 +0000
Manifest next update: Sun 08 Mar 2026 07:23:33 +0000
Files and hashes: 1: gH5oiqUL0-OL4xtdTE4GCATrFdw.crl (hash: HXvLXTX4NSgYZ/qoDEMew7FTvpdoB6hLjIceR7eQhdI=)
2: EF63DB0EA26B11EF8F077C3FC4F9AE02.roa (hash: iLpw/uJbge7uZ/WmLMuhiuh6b3ClTayyECZNu36JGVw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.crl
rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gH5oiqUL0-OL4xtdTE4GCATrFdw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:23:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 248 (0xf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F0E2, serialNumber=807E688AA50BD3E38BE31B5D4C4E060804EB15DC
Validity
Not Before: Mar 1 07:23:33 2026 GMT
Not After : Mar 8 07:23:33 2026 GMT
Subject: CN=69a3e976-df0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:88:d3:de:68:c3:f9:d4:62:8b:9a:c4:43:54:
22:bb:0a:d2:1d:a3:b0:7e:78:b7:df:79:eb:62:1b:
72:d2:8a:42:6c:53:f8:a2:34:06:65:08:6e:72:b7:
b0:e5:25:26:40:cd:80:78:da:86:1b:71:58:2f:03:
bd:18:8e:b2:2b:3e:b8:b8:78:54:01:02:20:3a:46:
39:c4:6f:2f:9a:22:97:35:82:f9:d6:66:a0:d6:f7:
11:de:e7:d4:9d:1b:89:ee:be:42:49:80:f8:b2:ff:
e3:05:3a:ab:f6:7d:9f:ef:20:85:43:97:cf:eb:c7:
54:46:d9:df:f9:03:79:d5:71:a6:2f:51:c5:9a:37:
23:cc:81:f9:60:57:31:ca:9e:cd:08:6c:64:84:b1:
11:32:1a:45:76:7d:19:4f:e0:21:1e:cf:84:0b:c4:
0a:7b:be:61:72:50:fe:43:cc:ba:fa:f1:f3:bc:71:
a6:87:eb:79:cb:0d:36:3c:73:f7:e3:91:1f:80:e6:
0f:43:48:80:d2:34:30:53:03:80:aa:1d:bc:27:a6:
71:61:eb:1b:da:82:41:30:4c:14:54:0f:79:30:e2:
ba:cc:95:42:f4:38:24:b2:5b:ae:9a:d5:3f:1c:5c:
3d:c7:57:bd:b5:b2:be:30:dd:66:75:20:ee:e1:c9:
af:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:59:E0:15:E7:73:8E:0B:D3:1A:85:CA:CF:FC:7A:94:33:D0:BD:66
X509v3 Authority Key Identifier:
keyid:80:7E:68:8A:A5:0B:D3:E3:8B:E3:1B:5D:4C:4E:06:08:04:EB:15:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gH5oiqUL0-OL4xtdTE4GCATrFdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:c0:91:b6:19:69:10:e0:b3:94:df:06:58:bb:c7:d0:d8:b9:
ae:cd:10:5f:99:e9:1f:d7:e9:33:4b:f3:b3:6e:5c:28:29:cb:
88:dd:57:0f:97:31:81:ce:ec:ea:95:e8:98:d9:a7:2f:f8:80:
29:2d:13:19:6e:b4:46:5c:5b:6a:21:85:21:aa:14:5b:0c:81:
a4:b3:cf:57:3a:6a:7d:91:70:44:be:5f:c4:7f:64:f4:29:f9:
9b:8a:57:76:fb:5e:7f:f9:dd:fd:00:27:c2:ae:2d:fc:87:4f:
70:10:b4:71:61:ac:83:b4:e2:ce:30:0e:ea:95:d5:48:4d:ad:
4e:e0:0c:49:00:7a:2b:4d:03:17:c6:00:0f:38:de:90:34:e8:
e3:00:d3:70:cd:ac:a0:fe:8d:63:96:1a:fb:92:f9:8a:18:13:
85:aa:28:27:a9:3a:11:31:07:c7:d0:29:d0:aa:96:24:89:0c:
f2:55:b8:1b:5b:c1:fd:3f:b7:70:8e:e6:62:9e:90:ee:41:fd:
66:91:36:12:88:46:46:83:4f:27:9f:c0:c0:a8:29:9a:cb:ad:
37:40:bf:9d:c1:7f:34:4d:c8:e6:57:29:c1:18:53:a9:c5:3b:
6e:38:c2:3b:0b:d0:09:5c:a6:1a:1d:6f:7c:0c:c5:dd:b8:d4:
67:17:e4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:51:14 2026 by rpki-client