
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft
File: GiOYaENWXf_IAPgP8pa6sa03FOw.mft (raw, json)
Hash identifier: iEyeHzI5ZAlkAfwsMAA3zej4NG/Zc/YSaPF44MbwKTc=
Subject key identifier: C9:B9:93:AC:63:FA:44:33:23:FA:51:8D:2C:C3:CB:1B:25:D1:5C:34
Authority key identifier: 1A:23:98:68:43:56:5D:FF:C8:00:F8:0F:F2:96:BA:B1:AD:37:14:EC
Certificate issuer: /CN=A911F55D/serialNumber=1A23986843565DFFC800F80FF296BAB1AD3714EC
Certificate serial: 0400
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GiOYaENWXf_IAPgP8pa6sa03FOw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft
Manifest number: 03F2
Signing time: Sun 05 Apr 2026 00:15:29 +0000
Manifest this update: Sun 05 Apr 2026 00:15:28 +0000
Manifest next update: Sun 12 Apr 2026 00:15:28 +0000
Files and hashes: 1: GiOYaENWXf_IAPgP8pa6sa03FOw.crl (hash: vmEShDbqjJoCToObvzu9M4mcROWpfoulYVgVbEJLbuY=)
2: 96C26F3EB7AD11ECA2E94A7EC4F9AE02.roa (hash: IasGAzFc+l1gsAHfpGxVMa7FoIjlAPF1GzUpALF/028=)
3: 977ED926B7AD11ECA2E94A7EC4F9AE02.roa (hash: OdmIKnh99XTg8Hh9/TQirH8XV5FGfwwJr9IPq/Zw7no=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.crl
rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GiOYaENWXf_IAPgP8pa6sa03FOw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 00:15:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1024 (0x400)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F55D, serialNumber=1A23986843565DFFC800F80FF296BAB1AD3714EC
Validity
Not Before: Apr 5 00:15:28 2026 GMT
Not After : Apr 12 00:15:28 2026 GMT
Subject: CN=69d1a9a1-0bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:44:e7:e5:1a:72:7b:de:04:f3:ee:83:04:67:
4a:8d:57:53:3c:ee:f7:32:d1:08:c6:cb:72:56:d2:
53:d5:dd:c8:a1:d0:9c:d0:d3:d8:96:ff:50:42:63:
4d:ef:83:52:21:7b:bf:08:8f:47:aa:84:d1:d9:eb:
6a:aa:91:b9:1d:bb:18:66:5b:0c:d2:2e:02:3f:dc:
51:20:15:40:8c:a4:a6:b4:3c:92:2b:2b:8e:a5:89:
b7:01:ba:99:60:dd:23:7b:24:e5:af:c4:9a:39:c9:
da:5d:7b:e8:cc:c5:0a:06:a7:2e:8b:01:d6:66:2e:
62:1f:fb:8c:21:59:f2:d5:82:bc:ae:cc:33:ed:6f:
7d:d3:71:ae:19:f6:2c:6c:d4:ec:a9:fd:01:9f:73:
96:4b:b5:1c:d8:65:ed:9f:0a:26:db:6f:c0:98:63:
95:a0:17:31:c9:0a:41:3f:75:01:e3:d5:77:a2:14:
fb:56:df:2e:dd:d2:f6:45:36:aa:f5:a4:e6:bf:58:
c5:70:f8:ba:f4:3f:7d:67:8f:ea:5b:bf:3e:a3:d2:
dc:a2:53:8e:b3:a5:8b:fc:f5:1c:88:5a:3c:bf:ff:
25:47:5f:2d:e8:7b:ea:f4:e2:ba:9e:4f:75:96:e4:
72:a1:31:f2:c6:61:fd:a8:96:2d:e3:00:0c:31:9a:
77:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B9:93:AC:63:FA:44:33:23:FA:51:8D:2C:C3:CB:1B:25:D1:5C:34
X509v3 Authority Key Identifier:
keyid:1A:23:98:68:43:56:5D:FF:C8:00:F8:0F:F2:96:BA:B1:AD:37:14:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GiOYaENWXf_IAPgP8pa6sa03FOw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:39:0c:b9:56:da:ec:c0:af:f5:12:ec:09:fd:df:0d:c3:f6:
8f:82:7f:a5:23:d5:90:f8:fe:9e:b1:f5:c7:bb:8b:7d:18:8a:
2a:56:79:d8:d2:f1:1b:8f:d7:6c:4b:88:da:df:ce:a1:f6:dd:
d2:21:50:e2:7c:03:bb:e4:7b:42:df:58:5c:b4:73:99:6a:e6:
1c:03:c2:9c:78:46:25:ac:9d:5e:37:22:98:bc:02:48:9c:89:
fe:1a:48:fc:d4:8e:f8:22:00:9f:27:55:8b:99:ce:cb:60:21:
4a:45:33:60:c3:03:07:4e:54:14:96:7d:48:bb:e8:03:66:35:
95:cd:93:45:de:fe:fb:6c:a1:d5:aa:d9:cd:a7:e6:2a:42:11:
60:bd:1f:5b:72:0b:7b:67:73:2c:66:e2:39:59:85:57:87:9f:
2e:da:96:ec:33:9d:a2:c2:43:e4:30:8f:b1:b0:4d:ed:6f:33:
65:db:0b:0c:88:96:a7:fd:19:c8:0f:05:8a:50:fe:5a:0d:ca:
ec:ab:a9:ce:03:a1:34:bc:86:35:c2:58:b8:34:68:c7:cf:15:
10:16:13:c8:cc:2c:6c:40:68:71:aa:f7:a3:44:a4:49:34:a0:
2f:86:42:37:16:e3:35:ab:35:cd:39:78:c6:a1:dd:2c:8f:19:
55:00:2d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:41:01 2026 by rpki-client