
$ rpki-client -vvf rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft
File: ggZKEDz1DwHRlFMAajhs04c5G-Y.mft (raw, json)
Hash identifier: yiIR08kqwgvJejFuNsP4qRfl6xl/eN+qpJxr85gd4Tk=
Subject key identifier: 01:16:07:74:BB:21:94:B8:12:7A:55:52:CB:AE:83:38:07:46:3D:F4
Authority key identifier: 82:06:4A:10:3C:F5:0F:01:D1:94:53:00:6A:38:6C:D3:87:39:1B:E6
Certificate issuer: /CN=A919CA1B/serialNumber=82064A103CF50F01D19453006A386CD387391BE6
Certificate serial: 0291
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft
Manifest number: 027D
Signing time: Mon 27 Apr 2026 01:46:39 +0000
Manifest this update: Mon 27 Apr 2026 01:46:39 +0000
Manifest next update: Mon 04 May 2026 01:46:39 +0000
Files and hashes: 1: ggZKEDz1DwHRlFMAajhs04c5G-Y.crl (hash: K6SjpNFN/2bjQQ+SNEgThvy9u7fr9tdBGX6cvA5ros0=)
2: D3B49A1676CA11EDAA4FE042C4F9AE02.roa (hash: feVu+a8lF5HfZtn0mtMt+vLIfU2xl9dTaoTUFZoVD6I=)
3: D318E67076CA11EDAA4FE042C4F9AE02.roa (hash: 4BA5NqaVokjWFwQzUDF6z/aNu276DFdfvc22Mig/Z84=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.crl
rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 01:46:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 657 (0x291)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919CA1B, serialNumber=82064A103CF50F01D19453006A386CD387391BE6
Validity
Not Before: Apr 27 01:46:39 2026 GMT
Not After : May 4 01:46:39 2026 GMT
Subject: CN=69eebfff-4d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b4:56:eb:6b:b9:9b:5c:d0:64:99:75:a3:e6:
76:e1:75:67:44:18:89:48:c3:1f:02:4d:a2:84:f4:
d5:1a:1e:6b:e9:d7:1b:30:87:27:42:ee:cc:3d:f4:
e9:33:8f:ef:1e:f0:ab:18:3a:52:3a:95:5a:68:cd:
b0:56:b8:d4:e5:5e:2b:c8:90:b6:f4:48:2f:05:91:
12:ef:c8:ab:f7:8d:03:ea:7f:fc:6a:d3:9b:05:e6:
70:88:5c:f0:1f:f0:63:99:25:45:af:a6:1b:77:90:
0a:3c:19:d1:59:9d:59:a9:73:56:c5:76:f0:84:32:
c7:3d:14:13:a5:c1:35:8f:0d:5f:d2:55:d8:6e:22:
83:87:b4:bc:6d:35:c5:b4:57:49:d4:a5:80:4c:4a:
9a:70:a2:4b:3d:75:29:38:61:ba:97:14:aa:3e:6a:
33:e4:08:20:e9:f6:97:88:e5:bc:20:86:24:38:ce:
3e:0e:88:4c:78:b0:13:88:45:67:2a:40:aa:e4:24:
64:51:3f:f3:60:c3:19:a1:23:ce:fa:6b:91:b3:9b:
7e:72:ed:91:4a:06:97:f2:bb:1c:9f:4c:02:95:2d:
fd:40:69:b6:6b:e9:fc:9f:2b:c3:85:e4:01:58:13:
5d:fb:3a:cb:03:16:a8:a9:7d:3d:fb:14:97:36:83:
a6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:16:07:74:BB:21:94:B8:12:7A:55:52:CB:AE:83:38:07:46:3D:F4
X509v3 Authority Key Identifier:
keyid:82:06:4A:10:3C:F5:0F:01:D1:94:53:00:6A:38:6C:D3:87:39:1B:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:f0:10:0b:41:3e:de:95:18:7e:cb:a3:79:41:af:70:f8:20:
92:c4:8c:6d:9c:47:8c:19:ad:bb:fd:48:8d:71:f9:d5:84:e1:
d9:37:9c:6c:b0:62:9d:6d:d5:27:24:34:58:d5:d6:bd:31:02:
3a:08:7b:8a:9d:97:d2:c5:c1:1e:c9:10:b3:30:90:18:0a:88:
d0:7e:41:2f:50:56:9f:97:0b:1d:68:d5:47:1b:de:35:95:e3:
2a:16:7e:5c:93:66:c9:12:71:6c:e9:b3:99:c3:d8:ef:66:8e:
12:42:31:19:12:34:a4:e2:3b:c4:ac:59:53:d7:5c:72:8c:89:
25:18:0e:61:fc:ea:0f:39:2c:3e:ea:1e:d2:60:bf:69:44:2f:
d2:b0:0d:eb:53:29:ef:a3:81:19:93:6e:5a:24:36:98:10:3d:
c0:83:f7:2f:ff:3b:58:af:5f:cb:9e:d3:89:3d:51:23:13:ab:
34:79:2d:e9:c5:54:dc:18:1d:fd:42:85:b8:b1:54:4c:72:3c:
11:bb:73:f5:24:c4:74:e7:25:0c:17:93:cf:30:3e:a2:cd:88:
ae:54:b3:ee:de:ea:75:89:8d:c9:68:10:1d:87:6d:42:bb:99:
40:b1:59:5c:8c:e3:25:5d:29:45:1a:f5:cc:72:43:dc:78:c6:
ed:af:82:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 22:16:41 2026 by rpki-client