
$ rpki-client -vvf rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft
File: Gm63WytHE2DtWpJcNRzEDBlBaCc.mft (raw, json)
Hash identifier: YHOKquKEUe2dkD7qp818vW6D5lvXHGyV264Oyn3a05E=
Subject key identifier: D7:AB:7E:02:E3:10:82:5E:36:C4:7D:E1:B6:41:6C:36:30:20:7C:75
Authority key identifier: 1A:6E:B7:5B:2B:47:13:60:ED:5A:92:5C:35:1C:C4:0C:19:41:68:27
Certificate issuer: /CN=A9184AB8/serialNumber=1A6EB75B2B471360ED5A925C351CC40C19416827
Certificate serial: E1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gm63WytHE2DtWpJcNRzEDBlBaCc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft
Manifest number: DB
Signing time: Tue 03 Mar 2026 06:14:48 +0000
Manifest this update: Tue 03 Mar 2026 06:14:47 +0000
Manifest next update: Tue 10 Mar 2026 06:14:47 +0000
Files and hashes: 1: Gm63WytHE2DtWpJcNRzEDBlBaCc.crl (hash: Ap6/YUxVy7JeLUYFmDknfRMnGRMDd09mz+eKE2ZAq6s=)
2: 6156245AD26F11EFB6D7116EC4F9AE02.roa (hash: a+z8gU2dcHNDUL1gCY0yav+6Ucjo7RhblDm9DMgQ1BA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.crl
rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gm63WytHE2DtWpJcNRzEDBlBaCc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 06:14:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 225 (0xe1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9184AB8, serialNumber=1A6EB75B2B471360ED5A925C351CC40C19416827
Validity
Not Before: Mar 3 06:14:47 2026 GMT
Not After : Mar 10 06:14:47 2026 GMT
Subject: CN=69a67c58-cbb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:cf:1f:d4:2a:68:0f:86:e4:bb:96:56:84:25:
04:2e:69:01:27:85:67:b2:72:7a:2f:1e:a2:29:55:
02:83:fc:7f:21:ec:05:c9:3e:c8:51:ce:8f:74:c8:
bf:06:96:5f:56:d9:f4:cc:59:53:7b:2a:43:39:23:
bd:d3:eb:05:18:2f:a5:95:d3:f4:89:eb:ed:1f:38:
62:f2:f2:0a:ff:6d:27:67:d9:6a:1c:58:f9:a4:31:
65:32:6c:9a:45:6c:61:cd:dc:fb:33:ee:26:c3:bf:
9a:e8:6d:86:c8:33:be:84:2c:e6:42:e8:de:9d:85:
82:ad:48:6f:d3:9e:77:5e:25:24:6a:cd:4f:1a:de:
55:f9:39:d2:76:ed:5a:4a:4b:17:91:da:34:08:4c:
3d:a6:19:00:96:e1:4d:91:d6:18:84:cd:d9:0f:c4:
9d:f2:d7:84:74:97:69:a1:f1:f7:6c:ff:69:ac:42:
3b:81:60:61:fd:58:67:1f:d7:74:2e:76:2f:ae:e3:
63:d7:70:e7:7c:75:1c:4b:35:8c:64:e1:d6:e3:06:
03:da:03:cf:35:d6:91:2a:ac:ec:4a:46:74:6c:28:
8c:36:80:76:a6:5d:2a:43:5a:5c:4d:6d:f6:79:92:
55:b3:65:28:39:50:91:49:b5:85:2e:35:66:5e:07:
bc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:AB:7E:02:E3:10:82:5E:36:C4:7D:E1:B6:41:6C:36:30:20:7C:75
X509v3 Authority Key Identifier:
keyid:1A:6E:B7:5B:2B:47:13:60:ED:5A:92:5C:35:1C:C4:0C:19:41:68:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gm63WytHE2DtWpJcNRzEDBlBaCc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:d7:86:e1:b0:68:33:b3:e8:ce:4d:0f:b1:ad:56:13:b1:21:
7f:98:a2:7f:16:2d:33:8a:ce:31:ca:9c:02:e6:bc:12:64:ea:
9c:7a:ba:b9:22:67:a6:d8:e2:0d:19:2a:d1:b5:23:3b:d9:bf:
57:2e:c0:98:1f:03:b7:99:88:b7:d9:24:0c:95:b3:b9:54:44:
02:31:c8:b8:d2:ad:cb:af:57:8b:a9:bd:8a:45:f9:87:ca:4d:
20:a4:5e:46:cb:fd:c1:e0:15:d9:28:e9:4f:c9:66:fb:8d:19:
1c:61:ca:2f:0f:3e:1f:48:4a:22:09:35:f5:0b:fe:c1:8e:bb:
ec:c5:37:df:82:47:15:b6:83:ca:67:7b:80:f4:e5:3b:ae:64:
d2:cb:1a:bd:6a:e0:c7:36:f7:a0:60:52:8d:fe:4f:f9:2c:40:
b2:8a:1f:b0:06:25:fc:7e:7a:bb:b4:53:44:42:cb:67:e6:05:
6c:a9:19:a1:e5:06:7e:9f:ad:2e:7b:54:bf:8b:1b:ea:14:4f:
64:e6:5e:19:10:bf:85:3c:8c:ec:9b:9b:36:98:42:1a:7b:4e:
37:c7:e2:90:21:91:3c:ca:2a:a0:07:fa:d9:56:85:60:e7:4b:
c0:0f:4a:3d:76:4d:7e:64:40:52:67:7f:c0:84:6b:11:38:d2:
2d:10:d3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:38:31 2026 by rpki-client