
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft
File: gH5oiqUL0-OL4xtdTE4GCATrFdw.mft (raw, json)
Hash identifier: GbxubXcfjc5LjPCyhHhwSbb33fVCtN3vyER1crZAhgg=
Subject key identifier: 80:4E:2F:07:CF:B5:77:38:08:F3:D7:9A:5B:B2:F1:1C:7C:C4:71:30
Authority key identifier: 80:7E:68:8A:A5:0B:D3:E3:8B:E3:1B:5D:4C:4E:06:08:04:EB:15:DC
Certificate issuer: /CN=A918F0E2/serialNumber=807E688AA50BD3E38BE31B5D4C4E060804EB15DC
Certificate serial: FC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gH5oiqUL0-OL4xtdTE4GCATrFdw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft
Manifest number: F7
Signing time: Tue 03 Mar 2026 05:52:11 +0000
Manifest this update: Tue 03 Mar 2026 05:52:11 +0000
Manifest next update: Tue 10 Mar 2026 05:52:11 +0000
Files and hashes: 1: gH5oiqUL0-OL4xtdTE4GCATrFdw.crl (hash: cItvghlDotojyoveV4p8Al8OZdhmaC5DZrHUgLWuP/U=)
2: EF63DB0EA26B11EF8F077C3FC4F9AE02.roa (hash: faGM7P04DgY9+kePEKWNSWyG4kwQPN9Aqs15IpEWkN8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.crl
rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gH5oiqUL0-OL4xtdTE4GCATrFdw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 05:52:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 252 (0xfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F0E2, serialNumber=807E688AA50BD3E38BE31B5D4C4E060804EB15DC
Validity
Not Before: Mar 3 05:52:11 2026 GMT
Not After : Mar 10 05:52:11 2026 GMT
Subject: CN=69a6770b-c64b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f1:19:fe:d4:73:e8:a5:26:cd:3e:7a:c1:37:
09:78:b4:17:bd:d8:d1:7c:1c:b8:56:64:90:80:ab:
50:c8:c3:08:5c:11:25:45:72:f5:95:ee:ed:34:7d:
0c:45:96:99:2a:d6:b7:ec:f7:8a:db:42:47:26:11:
c3:6d:0b:20:ff:ec:a9:d4:0a:0f:ae:42:c3:8e:22:
e4:b2:09:7d:29:cc:14:02:40:84:4a:9f:9f:56:1a:
e2:ff:5e:b6:fb:3f:01:79:a0:7c:c2:b5:5b:c3:cb:
80:d3:c2:b8:bd:15:af:46:b7:d8:b6:9d:66:8d:f9:
b6:ab:a0:8a:c0:69:28:4e:05:e7:3a:44:5f:2a:5e:
08:55:70:de:b9:7b:10:92:50:56:31:a4:0f:1a:37:
19:33:fe:3c:82:12:01:2f:6e:e5:01:2c:ea:b2:6a:
13:51:32:4f:01:46:11:6d:f9:17:8d:0f:49:0b:a6:
18:d3:40:6c:53:4b:3f:41:1d:46:99:f8:a8:5e:85:
e7:44:3d:22:8d:f4:3a:f6:05:bb:7a:49:40:67:2c:
36:dd:7c:d8:a3:03:b2:82:90:cc:3f:15:a4:76:e1:
9c:4c:e0:5d:f5:28:f0:9e:b5:c5:1e:aa:bf:e9:94:
ba:d1:49:b0:77:2d:cc:27:99:0c:e3:be:95:92:d5:
08:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:4E:2F:07:CF:B5:77:38:08:F3:D7:9A:5B:B2:F1:1C:7C:C4:71:30
X509v3 Authority Key Identifier:
keyid:80:7E:68:8A:A5:0B:D3:E3:8B:E3:1B:5D:4C:4E:06:08:04:EB:15:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gH5oiqUL0-OL4xtdTE4GCATrFdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:ae:fa:22:50:36:e6:df:cf:c1:5a:0a:14:94:5a:c3:62:7d:
58:3c:74:bb:89:c2:1b:a4:c4:1b:d1:09:91:c7:73:36:9f:76:
55:5a:17:85:d3:7a:65:67:ee:b4:27:4a:4f:71:2d:f2:3d:c8:
7c:39:48:f4:60:17:8c:d4:4b:41:1a:33:8c:4c:44:6f:05:da:
e9:75:38:50:b0:52:86:be:86:6f:04:6a:1f:33:62:ae:9f:0b:
13:58:00:a2:91:32:a4:1f:1e:33:0a:c3:85:29:cf:0b:ea:5e:
98:5f:4b:00:a2:9e:cf:09:eb:49:7a:27:8f:92:7a:1c:7d:b3:
b9:a2:b0:80:32:66:9b:24:79:12:b7:76:6c:b9:93:8d:3a:66:
1d:c2:ea:18:3f:88:8e:72:35:d7:e5:33:26:24:99:be:09:93:
bc:33:3d:8a:53:2f:74:8c:e8:65:f8:2c:19:be:a6:60:d7:67:
c9:f0:3c:f8:1b:57:98:4c:cf:2d:1c:ee:28:5f:eb:62:80:79:
ba:12:80:82:23:d8:54:d3:03:9f:b3:36:a7:b7:55:5b:68:8c:
fa:c8:f4:2f:15:43:3b:30:07:d8:11:aa:96:0b:ae:08:fd:73:
df:fa:11:12:ec:9f:be:4b:17:c3:87:e9:c4:d5:12:a0:50:f8:
08:bc:77:76
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEYwRTIxMTAvBgNVBAUTKDgwN0U2ODhBQTUwQkQzRTM4QkUzMUI1RDRDNEUwNjA4
MDRFQjE1REMwHhcNMjYwMzAzMDU1MjExWhcNMjYwMzEwMDU1MjExWjAYMRYwFAYD
VQQDEw02OWE2NzcwYi1jNjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwfEZ/tRz6KUmzT56wTcJeLQXvdjRfBy4VmSQgKtQyMMIXBElRXL1le7tNH0M
RZaZKta37PeK20JHJhHDbQsg/+yp1AoPrkLDjiLksgl9KcwUAkCESp+fVhri/162
+z8BeaB8wrVbw8uA08K4vRWvRrfYtp1mjfm2q6CKwGkoTgXnOkRfKl4IVXDeuXsQ
klBWMaQPGjcZM/48ghIBL27lASzqsmoTUTJPAUYRbfkXjQ9JC6YY00BsU0s/QR1G
mfioXoXnRD0ijfQ69gW7eklAZyw23XzYowOygpDMPxWkduGcTOBd9SjwnrXFHqq/
6ZS60Umwdy3MJ5kM476VktUIXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIBOLwfP
tXc4CPPXmluy8Rx8xHEwMB8GA1UdIwQYMBaAFIB+aIqlC9Pji+MbXUxOBggE6xXc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjBFMi8yQjRCQjQyRUEy
NUUxMUVGQTM4RDkzNzVDNEY5QUUwMi9nSDVvaXFVTDAtT0w0eHRkVEU0R0NBVHJG
ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2dINW9pcVVMMC1PTDR4dGRURTRHQ0FUckZkdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RjBFMi8yQjRCQjQyRUEyNUUxMUVGQTM4RDkzNzVDNEY5QUUwMi9nSDVvaXFVTDAt
T0w0eHRkVEU0R0NBVHJGZHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFK76IlA25t/PwVoKFJRaw2J9WDx0u4nCG6TEG9EJkcdzNp92VVoXhdN6ZWfu
tCdKT3Et8j3IfDlI9GAXjNRLQRozjExEbwXa6XU4ULBShr6GbwRqHzNirp8LE1gA
opEypB8eMwrDhSnPC+pemF9LAKKezwnrSXonj5J6HH2zuaKwgDJmmyR5Erd2bLmT
jTpmHcLqGD+IjnI11+UzJiSZvgmTvDM9ilMvdIzoZfgsGb6mYNdnyfA8+BtXmEzP
LRzuKF/rYoB5uhKAgiPYVNMDn7M2p7dVW2iM+sj0LxVDOzAH2BGqlguuCP1z3/oR
EuyfvksXw4fpxNUSoFD4CLx3dg==
-----END CERTIFICATE-----
Generated at Wed Mar 4 08:38:31 2026 by rpki-client