
$ rpki-client -vvf rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft
File: Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft (raw, json)
Hash identifier: 2XtaM1gpAFYJWlWe7j96g7aoaM0MUYUnMT1hcplLHGI=
Subject key identifier: 4E:A4:F5:06:20:21:DC:14:9B:4C:F8:AC:CA:AB:DB:9B:F4:34:A5:43
Authority key identifier: 1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99
Certificate issuer: /CN=A914FC2C/serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99
Certificate serial: 03E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft
Manifest number: 03D0
Signing time: Sat 21 Mar 2026 00:05:51 +0000
Manifest this update: Sat 21 Mar 2026 00:05:50 +0000
Manifest next update: Sat 28 Mar 2026 00:05:50 +0000
Files and hashes: 1: Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl (hash: JP9rP8ZJJ2sOgNEZ9YUM4RSPeQ1sW9iJQ6s6SpzYJyk=)
2: F6542C72C53511ECA64F3010C4F9AE02.roa (hash: tIlegLOK6K2gzpC3EMxXzCQPQ5ijkvaOZu7GF+ennV8=)
3: F6D63384C53511ECA64F3010C4F9AE02.roa (hash: Olp3ZD+KVecOlfGoX1LPX5Wca4ynuugi2374UO2D6d4=)
4: 6E32028AD48511EF8239D526C4F9AE02.roa (hash: +jMfdrNgrz1Nzrt0QgBnBGHQwacuV0bREddxSJbErg4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl
rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 998 (0x3e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914FC2C, serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99
Validity
Not Before: Mar 21 00:05:50 2026 GMT
Not After : Mar 28 00:05:50 2026 GMT
Subject: CN=69bde0df-3e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b0:aa:9d:f3:2e:7f:b7:19:82:a9:05:1c:49:
b9:25:f6:fa:53:07:f4:6b:9a:26:e6:0f:db:64:f9:
36:b4:af:e8:3e:60:6f:ad:b3:79:72:27:de:9a:26:
71:3a:2a:1f:83:08:8a:d6:18:95:90:7e:6e:f6:2a:
67:eb:b4:a4:97:e3:4d:7f:4a:73:87:3b:71:98:a5:
09:47:fd:f9:f8:5a:d4:80:8f:c9:f1:e5:18:e1:56:
37:ef:6a:fd:08:97:65:b7:ec:9b:c0:a2:6b:cb:ca:
db:d3:6d:bf:fc:a4:b7:9d:48:ec:b6:2a:e6:5f:24:
f4:22:57:b8:10:85:41:8c:84:e7:9d:d6:6c:91:75:
cf:f8:ec:08:e7:10:8d:5f:b7:c0:10:09:d0:bf:4b:
aa:80:90:67:87:fa:dd:11:ea:63:a6:5a:7d:ee:27:
77:cd:e0:ff:19:34:a3:c9:37:b9:34:f2:b1:76:8d:
eb:25:6c:ef:44:c4:e9:73:69:60:8a:78:c6:22:37:
a1:23:24:43:9b:d6:8b:6d:d8:82:e8:fa:3b:1d:79:
ad:66:29:f8:cb:1d:7e:13:c1:11:12:8e:16:4f:2e:
27:0b:59:88:db:a4:ae:ba:7f:34:93:0e:77:8e:7e:
96:b5:32:09:79:8a:09:7e:d0:ea:cb:8e:35:17:ce:
a7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A4:F5:06:20:21:DC:14:9B:4C:F8:AC:CA:AB:DB:9B:F4:34:A5:43
X509v3 Authority Key Identifier:
keyid:1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:fd:85:93:b7:e7:bf:94:56:13:0b:ed:77:1f:a1:3c:ea:ba:
32:6d:c5:e2:32:49:68:80:b2:53:53:8c:f6:32:25:54:cf:5b:
40:d5:49:4c:44:83:85:65:06:d2:e9:75:b0:79:dc:11:25:06:
66:85:de:df:59:c9:ed:e7:e4:82:42:7a:f7:d9:4e:9c:2a:3f:
46:79:81:00:da:24:51:5d:d2:1b:30:e1:3e:e1:ff:ee:e4:87:
15:78:83:6d:f5:68:ca:72:f6:c8:f3:ed:5f:1b:57:58:1d:29:
68:2e:6f:d4:e7:cd:1f:cd:b7:df:ab:80:34:f1:59:83:f1:09:
5a:a1:da:3c:50:d0:18:f6:7f:72:69:dc:3f:26:3e:52:1e:c8:
b2:6c:ad:8f:ac:c2:96:68:fa:f2:14:ad:50:c5:e0:6f:79:d5:
9b:c9:17:5d:20:0d:5d:f5:54:3f:f8:46:a4:bf:2d:b0:12:d2:
36:ae:86:57:cd:c7:b9:27:71:fc:ca:4a:40:ec:4a:71:61:75:
42:15:81:a6:18:c4:0b:17:d3:cf:cb:8d:78:cc:64:c3:69:9e:
78:56:67:ae:41:65:d6:3d:f5:b4:a9:37:b5:4c:a1:0d:26:cb:
17:0f:c3:73:7b:2d:dd:33:81:71:11:e8:93:47:0c:36:78:c8:
83:56:0e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 23:43:29 2026 by rpki-client