
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A511/2DCFF6125B9E11EF9484635AC4F9AE02/gprYV1claHsfCkxV-UIq8zsA_LE.mft
File: gprYV1claHsfCkxV-UIq8zsA_LE.mft (raw, json)
Hash identifier: ku5AsqWv4BKiA9Krht5qxHbpOWk0hj52dsJPvwwU4jc=
Subject key identifier: 20:00:EF:FC:8F:18:1F:70:F0:69:FB:5C:CB:9F:A2:C9:59:38:45:D1
Authority key identifier: 82:9A:D8:57:57:25:68:7B:1F:0A:4C:55:F9:42:2A:F3:3B:00:FC:B1
Certificate issuer: /CN=A916A511/serialNumber=829AD8575725687B1F0A4C55F9422AF33B00FCB1
Certificate serial: 0135
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gprYV1claHsfCkxV-UIq8zsA_LE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A511/2DCFF6125B9E11EF9484635AC4F9AE02/gprYV1claHsfCkxV-UIq8zsA_LE.mft
Manifest number: 0130
Signing time: Sat 21 Mar 2026 04:33:40 +0000
Manifest this update: Sat 21 Mar 2026 04:33:40 +0000
Manifest next update: Sat 28 Mar 2026 04:33:40 +0000
Files and hashes: 1: gprYV1claHsfCkxV-UIq8zsA_LE.crl (hash: nzm0b04OXheYudhb6uJIeRTs9c590NZ0JG2RflMoN+8=)
2: C95F7472ABD411F08661983DC4F9AE02.roa (hash: u3sLByGXaGUBr0SdEHrmeNuejm1Zhc33YlSyTWdy4Dw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A511/2DCFF6125B9E11EF9484635AC4F9AE02/gprYV1claHsfCkxV-UIq8zsA_LE.crl
rsync://rpki.apnic.net/member_repository/A916A511/2DCFF6125B9E11EF9484635AC4F9AE02/gprYV1claHsfCkxV-UIq8zsA_LE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gprYV1claHsfCkxV-UIq8zsA_LE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 04:33:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 309 (0x135)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A511, serialNumber=829AD8575725687B1F0A4C55F9422AF33B00FCB1
Validity
Not Before: Mar 21 04:33:40 2026 GMT
Not After : Mar 28 04:33:40 2026 GMT
Subject: CN=69be1fa4-81a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:67:76:08:ad:e7:41:54:e5:ab:09:60:d0:93:
1c:94:7b:b3:c1:bd:5a:0e:85:b1:48:b3:97:af:b0:
ac:f5:6d:a2:7c:3b:e0:8d:61:da:8b:5b:cc:96:4b:
7f:53:56:03:56:71:ac:77:35:2b:31:44:d9:d6:8f:
67:49:63:e4:37:ec:66:cd:00:0b:81:e1:21:89:fc:
4f:23:94:90:36:5a:fc:99:57:54:e2:11:ad:fa:27:
a8:25:19:31:b2:3c:28:9f:bb:52:b8:8a:fd:50:4b:
d9:71:cf:9d:8a:bc:7b:c1:06:be:e0:d2:97:09:35:
db:9a:33:4b:62:df:8e:7a:55:6d:19:ad:a2:5e:38:
f8:cc:b0:6b:a6:cd:08:85:33:f9:e5:e1:4c:3e:be:
1c:bf:75:49:07:34:34:6f:b1:a1:6f:0e:10:6b:55:
3d:aa:c6:65:8a:d3:b7:b6:1b:ad:54:6f:b1:2e:1d:
c6:ef:ab:81:9b:60:33:2e:f6:49:03:b8:86:28:d0:
00:74:52:ac:fa:41:1f:93:3c:53:07:2f:36:46:a6:
fe:1a:c1:95:0e:43:c6:e0:80:74:6e:1a:fa:2a:74:
fe:19:ac:de:3f:a5:c2:fd:14:b5:39:6a:20:5a:1d:
84:6c:0b:47:12:3e:ee:58:ce:c4:a3:d1:52:28:59:
af:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:00:EF:FC:8F:18:1F:70:F0:69:FB:5C:CB:9F:A2:C9:59:38:45:D1
X509v3 Authority Key Identifier:
keyid:82:9A:D8:57:57:25:68:7B:1F:0A:4C:55:F9:42:2A:F3:3B:00:FC:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A511/2DCFF6125B9E11EF9484635AC4F9AE02/gprYV1claHsfCkxV-UIq8zsA_LE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gprYV1claHsfCkxV-UIq8zsA_LE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A511/2DCFF6125B9E11EF9484635AC4F9AE02/gprYV1claHsfCkxV-UIq8zsA_LE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:df:e9:23:05:5d:cd:c7:21:cc:0a:c7:7a:9f:8f:0c:98:7a:
18:06:ee:ca:5d:c0:38:b6:9f:94:d5:5f:3e:7b:3e:65:42:4e:
05:a4:23:b8:38:30:09:b5:7f:c9:7a:f5:31:7b:0d:b4:d8:4d:
bd:64:5b:60:98:85:75:7d:0c:d3:c9:2f:77:03:c7:cf:9c:30:
9e:74:dd:c9:9d:00:5c:1b:25:55:66:83:38:de:72:67:b1:ba:
0a:fc:df:f1:dc:ef:98:e1:a8:0b:41:eb:74:38:e4:ed:9f:1a:
c5:bd:02:ba:2c:75:34:53:67:13:e2:5b:f2:a7:65:bf:64:31:
63:5f:fa:1e:dd:b0:4e:96:5b:d0:e0:b8:06:10:29:bb:93:51:
ae:6b:44:bc:57:99:11:37:3b:e1:17:0d:c6:39:74:5a:dd:cb:
df:f0:6a:98:27:d8:e4:45:93:5c:8b:a0:22:bc:72:86:e6:25:
de:67:1c:08:22:45:81:07:43:00:29:80:9e:5d:91:72:fd:06:
72:a5:3c:9b:89:8f:eb:df:51:b9:78:1e:18:2e:9a:8d:1f:ab:
f2:94:a4:15:3b:f8:9d:f7:cf:02:00:d2:c6:cb:29:72:70:fc:
e2:b6:5b:12:69:25:79:a2:2e:38:e0:0b:68:bd:19:18:15:c4:
a0:51:8e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 23:42:52 2026 by rpki-client