
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft
File: gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft (raw, json)
Hash identifier: h6mJXr/5Ago3TBhmNLoQZVhZgVNyYIqfstHpplE5sEU=
Subject key identifier: 84:A6:45:A1:3E:59:66:D2:FD:D8:C6:A1:AB:67:DC:0C:8D:9F:F4:BF
Authority key identifier: 80:5A:AA:36:C0:17:E9:E8:6C:30:32:A3:DA:AE:8D:26:8B:DD:42:54
Certificate issuer: /CN=A9146EB7/serialNumber=805AAA36C017E9E86C3032A3DAAE8D268BDD4254
Certificate serial: B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFqqNsAX6ehsMDKj2q6NJovdQlQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft
Manifest number: B1
Signing time: Sun 05 Apr 2026 06:28:42 +0000
Manifest this update: Sun 05 Apr 2026 06:28:42 +0000
Manifest next update: Sun 12 Apr 2026 06:28:42 +0000
Files and hashes: 1: gFqqNsAX6ehsMDKj2q6NJovdQlQ.crl (hash: at7UP6HbT5cGeAE6oYToosgUZAtxskq2V0f1t6BvxtU=)
2: 04FD874E1FDF11F094B3136AC4F9AE02.roa (hash: FnYin0UiwJQP6hi7lM7gz0Ixigka5o2aszBJSr3nCik=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.crl
rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFqqNsAX6ehsMDKj2q6NJovdQlQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:28:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179 (0xb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146EB7, serialNumber=805AAA36C017E9E86C3032A3DAAE8D268BDD4254
Validity
Not Before: Apr 5 06:28:42 2026 GMT
Not After : Apr 12 06:28:42 2026 GMT
Subject: CN=69d2011a-2c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:98:28:a4:3c:16:05:f0:96:e4:95:64:53:21:
54:90:f6:99:b7:34:0a:5a:18:c7:6f:cf:8b:40:70:
9c:e1:58:14:a6:80:ce:d9:a8:cc:ad:18:ed:91:aa:
bf:98:fd:62:8c:a2:3c:1d:52:ca:d4:e0:53:76:b8:
56:7b:88:f9:27:62:08:cd:5b:55:8f:16:d6:e3:79:
dc:94:b7:0f:61:ee:25:bb:3c:e4:84:85:72:f1:dd:
af:b9:f8:f2:4f:ee:f5:46:0e:b1:64:a6:50:f5:97:
26:3b:8c:db:0a:30:a6:b0:8f:71:6b:05:e8:b3:46:
cd:54:a7:17:5b:bd:b7:7d:6c:0a:6b:93:a2:f4:8e:
8d:d3:3f:35:5e:e1:25:c6:85:53:94:d8:e7:1d:e9:
c8:5c:c1:20:9c:73:0c:6f:f1:d9:f5:d7:dc:43:bf:
1e:24:9b:a3:fb:6c:bf:37:6e:1b:ff:66:61:83:8a:
71:ba:1f:ab:4d:f2:6a:15:6f:48:74:7f:59:78:9a:
3f:28:ad:19:1f:6f:d5:30:4f:0a:71:5e:e2:6d:39:
cc:af:90:97:f8:36:be:d9:4f:72:fc:a2:81:27:90:
4e:67:52:4f:c0:4c:36:18:b9:16:3a:d7:8c:b8:91:
1f:45:06:36:4f:a8:a7:5a:a2:dc:8e:d9:2b:4e:71:
3e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A6:45:A1:3E:59:66:D2:FD:D8:C6:A1:AB:67:DC:0C:8D:9F:F4:BF
X509v3 Authority Key Identifier:
keyid:80:5A:AA:36:C0:17:E9:E8:6C:30:32:A3:DA:AE:8D:26:8B:DD:42:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFqqNsAX6ehsMDKj2q6NJovdQlQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:b8:40:44:4e:b6:83:2b:ca:24:c9:17:05:5e:78:cb:a9:1b:
76:ae:93:e0:d2:0a:59:c7:cd:9b:dd:d4:6e:dc:a0:a5:02:85:
0a:78:d3:7f:f4:4e:d2:40:8a:1d:84:7f:ea:90:c5:e9:6c:a0:
21:93:4a:51:07:ef:99:4a:cc:03:f8:85:41:44:a2:49:6d:c7:
b9:8a:43:9b:58:0b:2c:6c:d4:d6:f9:88:4d:bf:48:2f:fc:20:
5a:17:97:9f:63:4e:8a:33:03:92:3c:b7:5b:1f:64:43:91:c4:
b8:b5:8c:28:81:fb:09:02:8a:25:3b:81:50:5d:0a:4e:44:df:
0f:0e:a0:3a:e9:bb:25:34:9a:b4:cd:78:b3:98:03:51:0b:72:
1c:64:47:89:83:e7:ed:9c:8d:6b:36:63:e0:53:e1:2e:20:2c:
71:f6:8e:1c:4d:f2:76:88:8c:0c:f9:5a:1a:25:35:ef:5c:f8:
06:2f:9b:c2:c7:6d:3c:3a:aa:f3:3d:4d:e1:5c:8a:34:43:b1:
21:86:61:08:52:e5:01:51:83:82:7a:0f:df:30:37:09:ef:f5:
29:24:fd:b2:50:25:29:7c:5a:f1:60:4f:63:d6:f0:39:08:f3:
56:de:51:1e:a0:98:07:d8:88:60:e4:a4:92:5a:ab:5d:f8:31:
cc:ab:a6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:42:59 2026 by rpki-client