
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft
File: ggn985rwLDua5QPyJddH5nqjzfM.mft (raw, json)
Hash identifier: 0hNJ8VapU28gKW0/WXMI8i+vKcjGBEHsymJZILLD+1g=
Subject key identifier: 66:55:5B:CB:66:A9:63:27:9B:2F:7E:15:C3:49:0F:90:55:4E:B9:AF
Authority key identifier: 82:09:FD:F3:9A:F0:2C:3B:9A:E5:03:F2:25:D7:47:E6:7A:A3:CD:F3
Certificate issuer: /CN=A9144788/serialNumber=8209FDF39AF02C3B9AE503F225D747E67AA3CDF3
Certificate serial: 0205
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft
Manifest number: 01EF
Signing time: Thu 21 May 2026 03:25:42 +0000
Manifest this update: Thu 21 May 2026 03:25:42 +0000
Manifest next update: Thu 28 May 2026 03:25:42 +0000
Files and hashes: 1: ggn985rwLDua5QPyJddH5nqjzfM.crl (hash: jF9PfCBTJWlMsiSFtmBPyuYOt78shYbuI/G95Jo1rBc=)
2: 007AE4426C9311EEBEA0EB63C4F9AE02.roa (hash: /wkatpVrkS2oqc5vbQzFdNG4qk7SuNWJ/ByIrBY+v+s=)
3: 4E87E6766C9311EEA3DF6E7FC4F9AE02.roa (hash: dYjOKoFq07vgQeItv9OVgz3KsqWlrs+XcRm7MKKAaMM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.crl
rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 03:25:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 517 (0x205)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144788, serialNumber=8209FDF39AF02C3B9AE503F225D747E67AA3CDF3
Validity
Not Before: May 21 03:25:42 2026 GMT
Not After : May 28 03:25:42 2026 GMT
Subject: CN=6a0e7b36-9360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:87:c6:e6:65:79:41:1a:a7:25:dd:2a:91:fb:
44:73:50:46:06:96:56:7b:a7:ec:c9:06:4d:fe:7b:
29:d3:3c:4e:4a:b7:99:21:cd:81:54:cf:16:f4:40:
4f:72:28:24:cf:d9:87:6e:28:a4:7a:a9:2e:64:a2:
47:65:50:e9:b0:3c:f5:a2:a1:6d:81:6d:59:4f:85:
ad:5d:f2:55:c3:e7:10:2e:3e:f6:84:0f:06:a6:c4:
74:da:ca:2c:8b:80:fb:90:6c:f4:32:80:1d:33:90:
e5:17:ea:4b:e8:d0:20:65:52:15:78:e8:20:60:6f:
9f:48:40:9d:66:29:a5:36:c8:4c:88:8f:ee:a1:31:
84:df:67:64:a9:30:b5:ce:07:f4:85:95:21:f9:05:
46:09:21:ce:60:04:2a:38:65:85:69:e6:0e:a0:c4:
91:04:00:bb:31:d3:48:95:7b:ea:43:88:a9:64:7e:
e7:91:39:ac:cf:84:5a:36:d6:df:ca:c8:c5:63:55:
8f:0c:6a:8c:77:20:b7:d2:42:10:03:4d:81:4d:98:
e9:37:21:3d:ba:8e:c0:08:db:63:a3:51:98:e1:09:
96:1d:34:2a:45:18:5c:3e:12:b7:6b:d9:27:73:67:
e5:29:b1:d6:7c:6a:e4:d1:67:7f:e1:8d:cd:71:23:
d1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:55:5B:CB:66:A9:63:27:9B:2F:7E:15:C3:49:0F:90:55:4E:B9:AF
X509v3 Authority Key Identifier:
keyid:82:09:FD:F3:9A:F0:2C:3B:9A:E5:03:F2:25:D7:47:E6:7A:A3:CD:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:15:cf:78:ab:79:a8:20:70:f6:c4:41:1c:cf:12:51:e3:58:
b1:2a:4c:ad:72:b6:8d:e5:ac:57:85:35:41:e7:b6:c9:4e:4c:
ae:28:65:6b:10:e5:9c:6b:89:3d:10:2c:4c:49:12:90:6d:9a:
55:87:c5:17:0a:06:62:26:ec:c2:07:fc:39:3f:49:ce:86:53:
80:03:7c:9e:78:ef:c6:93:9f:f0:20:d9:15:df:a0:fb:0f:f8:
39:89:c0:1f:be:03:f4:ee:20:e5:53:30:08:76:19:34:fe:30:
96:5c:18:e0:61:2b:ac:1c:ed:74:6a:d3:03:a0:70:57:67:a0:
40:aa:3e:09:06:f2:82:e9:1b:1f:82:55:a0:27:71:af:90:70:
5d:68:19:5d:4c:eb:ad:e2:cb:14:9b:2f:13:7a:10:08:59:17:
bb:e6:47:05:af:50:45:69:69:2e:6c:9f:18:98:89:47:d9:24:
9f:ab:d4:83:08:3b:ec:94:a1:25:af:bd:55:ed:24:cd:19:62:
81:80:a7:06:f8:c5:9e:01:b8:66:3f:81:36:f1:e8:16:fd:e8:
f5:c8:99:89:b7:77:74:f8:62:56:44:27:fd:40:11:eb:b0:fd:
f0:56:d2:7c:68:61:d4:1e:de:bc:fc:15:a2:0a:9e:23:65:1d:
96:c9:62:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:01 2026 by rpki-client