
$ rpki-client -vvf rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.mft
File: gBcCvJze9z33Ob-31L0ve4iF4Hc.mft (raw, json)
Hash identifier: V7XNTo8DHIbcHgeB16jQwDqSUWIKDvz9mPhK3W/eMI0=
Subject key identifier: 84:70:52:B8:42:4A:53:21:70:28:00:9B:DD:40:F8:A7:CC:60:AE:45
Authority key identifier: 80:17:02:BC:9C:DE:F7:3D:F7:39:BF:B7:D4:BD:2F:7B:88:85:E0:77
Certificate issuer: /CN=A9124731/serialNumber=801702BC9CDEF73DF739BFB7D4BD2F7B8885E077
Certificate serial: 04F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBcCvJze9z33Ob-31L0ve4iF4Hc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.mft
Manifest number: 04D9
Signing time: Thu 12 Mar 2026 23:25:09 +0000
Manifest this update: Thu 12 Mar 2026 23:25:09 +0000
Manifest next update: Thu 19 Mar 2026 23:25:09 +0000
Files and hashes: 1: gBcCvJze9z33Ob-31L0ve4iF4Hc.crl (hash: XgKf1H3HCZQI56d6khxUQNJRMzD5Qju3p+HtxV1Ua3c=)
2: 86BADBF8013511EE81A9F21FC4F9AE02.roa (hash: H5Kg0WWi2ArQlY3F4MuVxADOQ4KYkHou5PZkoZEWfh0=)
3: 271F3E9CFFE011EDA35F8946C4F9AE02.roa (hash: +pV8MUFMD6DhuSiuoXuPicHZS5pTjm70rSYAIUz1WWk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.crl
rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBcCvJze9z33Ob-31L0ve4iF4Hc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 23:25:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1264 (0x4f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9124731, serialNumber=801702BC9CDEF73DF739BFB7D4BD2F7B8885E077
Validity
Not Before: Mar 12 23:25:09 2026 GMT
Not After : Mar 19 23:25:09 2026 GMT
Subject: CN=69b34b55-a868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e5:01:5d:43:e3:2c:e1:6a:62:e8:39:9e:92:
e5:6d:c4:6e:ec:d8:e1:67:64:09:e2:58:78:84:c7:
82:d6:8e:82:10:9f:78:f8:3f:2e:76:52:10:fa:c4:
c6:0d:f5:b5:d5:13:a3:73:6c:aa:f2:d9:30:2e:ca:
38:8b:0a:af:69:8e:ed:e0:89:8d:85:82:98:09:23:
33:d0:bf:74:e3:fd:5c:ae:c2:78:c4:19:23:fe:75:
a5:f0:c4:b7:ae:c9:18:b6:cc:e2:c4:f2:b2:5a:8e:
74:dd:81:a1:92:ed:b0:e8:3e:0e:a7:40:1a:df:7f:
01:08:c7:46:0f:27:88:be:30:1d:85:47:c8:d0:68:
db:a4:8b:8f:e7:85:5a:21:ec:6c:bb:30:5e:95:f4:
bd:91:d8:ba:c7:df:9c:18:94:c6:a1:e3:68:a3:dc:
94:ef:04:b5:95:d1:b1:76:94:d6:49:7d:f8:ef:66:
20:9d:0d:1c:35:2b:dc:8b:80:86:c9:ab:81:66:21:
02:07:aa:91:38:8a:cf:39:b6:bd:57:2e:fe:aa:a3:
ad:0e:fa:87:43:38:bd:bb:29:76:e7:58:69:9e:19:
32:93:a3:c7:cc:9e:c8:5e:ff:54:79:5c:0e:e2:c6:
54:5a:03:ee:32:1e:11:62:4c:7d:5a:4e:31:de:2f:
a5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:70:52:B8:42:4A:53:21:70:28:00:9B:DD:40:F8:A7:CC:60:AE:45
X509v3 Authority Key Identifier:
keyid:80:17:02:BC:9C:DE:F7:3D:F7:39:BF:B7:D4:BD:2F:7B:88:85:E0:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBcCvJze9z33Ob-31L0ve4iF4Hc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:16:a2:ae:01:29:b9:fa:58:0b:aa:5e:65:e8:11:fc:2c:c0:
9c:9b:97:84:70:fb:4b:7c:82:01:67:46:18:bb:b5:02:db:bf:
38:5c:10:e4:f9:50:2a:bc:5f:ff:20:d3:5d:00:dc:da:8f:53:
ac:ff:a1:78:8f:8a:7c:9f:01:54:5d:91:41:a9:16:52:df:b4:
3a:27:f2:1d:7e:6b:10:39:c7:a9:ba:9f:c1:30:18:10:0c:fe:
e4:95:f8:81:20:b1:73:4c:f9:f2:92:75:ab:63:73:60:10:95:
f1:31:53:99:ff:10:de:18:7d:02:c6:e9:8a:69:7d:e1:18:cc:
69:85:b2:9d:7c:ec:eb:81:da:06:03:91:24:96:54:ce:35:15:
35:9a:11:bd:46:09:ed:9d:a9:6d:2a:ea:ba:0b:fd:7b:d5:7f:
bf:4a:ee:79:26:78:4d:9e:7c:ef:9e:f3:de:4e:9d:cc:f7:ef:
8b:22:f6:60:c5:0f:ab:5d:24:d8:50:e2:76:2e:32:8e:ac:2c:
40:6a:51:36:58:c7:40:55:f0:00:fc:b2:0f:62:88:ba:5c:75:
10:c3:e2:2d:56:31:6d:e2:a5:f5:4b:ef:69:ac:39:90:2b:9e:
c2:b1:e9:0d:79:9f:3a:74:23:19:f4:af:2c:c1:24:91:dc:de:
43:07:ae:95
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjQ3MzExMTAvBgNVBAUTKDgwMTcwMkJDOUNERUY3M0RGNzM5QkZCN0Q0QkQyRjdC
ODg4NUUwNzcwHhcNMjYwMzEyMjMyNTA5WhcNMjYwMzE5MjMyNTA5WjAYMRYwFAYD
VQQDEw02OWIzNGI1NS1hODY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0uUBXUPjLOFqYug5npLlbcRu7NjhZ2QJ4lh4hMeC1o6CEJ94+D8udlIQ+sTG
DfW11ROjc2yq8tkwLso4iwqvaY7t4ImNhYKYCSMz0L904/1crsJ4xBkj/nWl8MS3
rskYtszixPKyWo503YGhku2w6D4Op0Aa338BCMdGDyeIvjAdhUfI0GjbpIuP54Va
IexsuzBelfS9kdi6x9+cGJTGoeNoo9yU7wS1ldGxdpTWSX3472YgnQ0cNSvci4CG
yauBZiECB6qROIrPOba9Vy7+qqOtDvqHQzi9uyl251hpnhkyk6PHzJ7IXv9UeVwO
4sZUWgPuMh4RYkx9Wk4x3i+lzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIRwUrhC
SlMhcCgAm91A+KfMYK5FMB8GA1UdIwQYMBaAFIAXAryc3vc99zm/t9S9L3uIheB3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDczMS9CNkIwMTRCMjVE
NkQxMUVDOEZGNjEzMUVDNEY5QUUwMi9nQmNDdkp6ZTl6MzNPYi0zMUwwdmU0aUY0
SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dCY0N2SnplOXozM09iLTMxTDB2ZTRpRjRIYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NDczMS9CNkIwMTRCMjVENkQxMUVDOEZGNjEzMUVDNEY5QUUwMi9nQmNDdkp6ZTl6
MzNPYi0zMUwwdmU0aUY0SGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYRairgEpufpYC6peZegR/CzAnJuXhHD7S3yCAWdGGLu1Atu/OFwQ5PlQKrxf
/yDTXQDc2o9TrP+heI+KfJ8BVF2RQakWUt+0OifyHX5rEDnHqbqfwTAYEAz+5JX4
gSCxc0z58pJ1q2NzYBCV8TFTmf8Q3hh9Asbpiml94RjMaYWynXzs64HaBgORJJZU
zjUVNZoRvUYJ7Z2pbSrqugv9e9V/v0rueSZ4TZ58757z3k6dzPfviyL2YMUPq10k
2FDidi4yjqwsQGpRNljHQFXwAPyyD2KIulx1EMPiLVYxbeKl9Uvvaaw5kCuewrHp
DXmfOnQjGfSvLMEkkdzeQweulQ==
-----END CERTIFICATE-----
Generated at Sat Mar 14 02:20:20 2026 by rpki-client