
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.mft
File: GWgoqCH0FqupzswxqnGjA_QhR3g.mft (raw, json)
Hash identifier: GDj761lNaU30bNyoCH7W+GvxyAyLCMf6QOhDCrLetdE=
Subject key identifier: AE:BF:84:1D:98:91:DB:E3:73:4D:F7:3D:D9:31:F9:25:26:71:1A:54
Authority key identifier: 19:68:28:A8:21:F4:16:AB:A9:CE:CC:31:AA:71:A3:03:F4:21:47:78
Certificate issuer: /CN=A9197724/serialNumber=196828A821F416ABA9CECC31AA71A303F4214778
Certificate serial: 0122
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWgoqCH0FqupzswxqnGjA_QhR3g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.mft
Manifest number: 011A
Signing time: Fri 17 Apr 2026 05:32:21 +0000
Manifest this update: Fri 17 Apr 2026 05:32:20 +0000
Manifest next update: Fri 24 Apr 2026 05:32:20 +0000
Files and hashes: 1: GWgoqCH0FqupzswxqnGjA_QhR3g.crl (hash: TeuS3+AE0ZYPqIWpPGELktT788LONnYsOR2Zrh2ZrQs=)
2: B5907D4E904E11EFA704CB22C4F9AE02.roa (hash: cDLrt4v1Ze1CHd7PH3aTcbAB48+XEiHFCNx9Tl/70Is=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.crl
rsync://rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWgoqCH0FqupzswxqnGjA_QhR3g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:32:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 290 (0x122)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197724, serialNumber=196828A821F416ABA9CECC31AA71A303F4214778
Validity
Not Before: Apr 17 05:32:20 2026 GMT
Not After : Apr 24 05:32:20 2026 GMT
Subject: CN=69e1c5e5-f209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bc:5a:9b:63:67:9e:f5:62:a8:16:7b:02:bb:
3b:1c:c0:99:68:b8:b1:c2:36:74:c6:e9:90:78:c4:
fa:e1:c6:12:9f:a2:cf:9f:5f:36:15:9b:4b:22:98:
18:0b:7e:ef:dc:8f:40:49:4d:9f:7b:53:4b:ca:b8:
cb:13:f7:dd:5f:57:a7:7a:a8:73:27:23:cc:72:85:
aa:c6:06:ef:9b:46:3e:20:19:40:4c:a9:27:1d:37:
e5:a4:19:bc:a7:b2:17:ba:7e:07:05:6a:d3:b5:c1:
fc:82:be:fd:b3:3c:b7:4b:04:fd:89:19:10:01:54:
67:9a:c1:74:90:56:23:ff:31:fb:48:3e:8e:9f:04:
44:cd:c7:4c:ee:a6:61:da:4a:ba:11:73:01:3f:8b:
62:fd:ea:2b:76:9f:e7:31:d1:0b:08:b7:bb:a8:df:
5a:a3:38:a0:64:e0:6b:b1:88:15:b8:bf:93:17:60:
c9:82:41:33:ec:14:12:d4:85:22:ab:2b:2d:fe:3d:
65:4e:b5:ff:de:fc:1f:fe:34:5c:9c:22:28:c1:9d:
a7:95:2e:17:3a:6b:5d:2a:a5:58:f8:7a:01:ab:b2:
4a:8c:1e:23:9d:71:e4:cc:8d:cb:b0:94:9e:0b:6d:
81:28:d7:36:f5:ed:ed:02:05:28:5f:ee:df:03:6e:
06:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:BF:84:1D:98:91:DB:E3:73:4D:F7:3D:D9:31:F9:25:26:71:1A:54
X509v3 Authority Key Identifier:
keyid:19:68:28:A8:21:F4:16:AB:A9:CE:CC:31:AA:71:A3:03:F4:21:47:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWgoqCH0FqupzswxqnGjA_QhR3g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:7b:82:cf:75:6a:7a:09:93:9b:c5:34:f1:ad:5d:ef:b8:4b:
43:2f:ec:16:93:ae:d6:aa:49:02:f3:17:b5:ae:bc:2f:a9:ba:
38:8d:55:37:2e:05:30:5a:fb:70:60:25:05:5a:dc:16:d5:f9:
2f:58:91:bd:36:dc:41:67:da:42:77:b1:8b:0b:53:40:da:6a:
54:b2:8a:09:49:2b:44:65:a3:6f:b9:0a:a5:46:fd:41:30:cf:
61:de:dc:f6:40:21:da:a6:da:52:25:8f:6c:8c:c8:13:85:2f:
63:ad:5a:f6:6b:fb:66:db:02:f0:3b:28:b3:93:30:ea:42:f4:
37:f4:7a:de:ea:bb:a8:8c:d4:62:45:cb:6d:fc:b3:e1:4a:c0:
15:cb:a4:88:eb:28:5f:a7:5e:72:51:08:32:d3:a9:27:1c:c5:
0f:87:e4:91:d5:1b:f1:1d:0b:42:97:72:a9:c3:27:a5:44:45:
8d:42:b7:df:05:c9:d9:ac:e6:40:ea:a8:b3:a4:d6:4f:fe:3e:
7b:3a:ce:12:00:f3:e5:84:64:38:b7:6c:60:20:a3:c7:78:f3:
17:e7:a6:b2:48:0d:65:a4:71:61:25:ae:0f:a8:de:04:5f:bf:
63:0d:26:82:53:48:a3:29:2f:87:45:5b:87:9c:80:18:16:2a:
15:df:a6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:06:50 2026 by rpki-client