
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft
File: ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft (raw, json)
Hash identifier: amGV66lrYKYYl26vrtfEA+r/UBeP4OClYoBCK5+upBM=
Subject key identifier: CF:96:E5:3B:F7:E7:30:EB:F8:6E:D2:59:0D:C7:80:E0:2C:C1:98:A1
Authority key identifier: 82:05:E9:79:6E:C6:9A:0C:73:DC:3B:5B:3C:E1:2C:48:19:2B:45:77
Certificate issuer: /CN=A919D222/serialNumber=8205E9796EC69A0C73DC3B5B3CE12C48192B4577
Certificate serial: FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft
Manifest number: EB
Signing time: Sun 05 Apr 2026 05:48:31 +0000
Manifest this update: Sun 05 Apr 2026 05:48:31 +0000
Manifest next update: Sun 12 Apr 2026 05:48:31 +0000
Files and hashes: 1: ggXpeW7Gmgxz3DtbPOEsSBkrRXc.crl (hash: MuJXDMO4FJUbeIDsJlQ0Yeg449C8FnA1eWtAHU4dXoQ=)
2: 18B90242CD8011EF8728D139C4F9AE02.roa (hash: VPm4SknJQLz4jStnPVeOHdN+rR2StpfDf8Lhwbu1ITk=)
3: 1852A5B0CD8011EF8728D139C4F9AE02.roa (hash: GcZaKKkUm4eJadng809d875dfAtSrkk2RvfSOSlgS2k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.crl
rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 05:48:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 251 (0xfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D222, serialNumber=8205E9796EC69A0C73DC3B5B3CE12C48192B4577
Validity
Not Before: Apr 5 05:48:31 2026 GMT
Not After : Apr 12 05:48:31 2026 GMT
Subject: CN=69d1f7af-5996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:43:e6:2e:0e:c4:9b:c3:ee:5d:16:b2:b4:9b:
29:1d:b0:cb:d3:cc:13:24:49:53:3e:bd:b1:b0:37:
1a:0e:25:a7:11:a7:fb:fd:08:30:72:38:6f:55:d9:
97:d5:9c:17:d9:e7:65:b1:14:df:cd:f8:c3:4e:0e:
46:13:cc:a6:cc:d8:1e:40:1b:31:ee:d5:28:ff:66:
ef:dd:d7:2d:1c:e2:57:32:e4:14:f0:40:07:2c:a4:
5c:d2:79:91:84:a0:27:f1:6d:2c:68:96:d0:f6:c6:
1d:50:b9:d1:68:4e:75:a3:19:85:7f:fe:b1:ea:58:
8f:db:94:d3:63:06:c9:70:e0:7c:34:66:96:84:87:
2c:78:bd:d7:ea:ab:89:2b:82:9b:64:4a:c8:de:6f:
4e:c9:8f:6f:f9:c6:72:a7:a7:2c:f1:2d:9c:cb:a8:
0a:8c:9d:31:3e:00:21:14:31:12:cf:9d:43:08:a0:
cc:c3:98:a4:5f:95:d4:f5:e9:47:d9:b7:10:10:2e:
c9:83:02:01:4d:ac:28:fc:40:46:d9:54:41:1f:1b:
a6:a7:fa:f1:97:5b:2c:2a:6f:ff:0f:41:b9:06:05:
59:af:b2:23:d9:fc:cb:45:1b:94:10:07:d9:03:d5:
94:a4:82:b2:ff:6f:dd:16:2e:be:af:35:a6:71:1b:
46:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:96:E5:3B:F7:E7:30:EB:F8:6E:D2:59:0D:C7:80:E0:2C:C1:98:A1
X509v3 Authority Key Identifier:
keyid:82:05:E9:79:6E:C6:9A:0C:73:DC:3B:5B:3C:E1:2C:48:19:2B:45:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:a4:c9:83:1b:21:53:2c:62:a7:c7:cc:e3:32:dc:91:b4:a4:
8c:f9:b6:4b:b7:6b:7f:2d:a1:93:1a:ba:88:e7:d3:da:b3:5e:
6f:d8:c9:db:69:05:9a:2c:03:2b:c1:89:3e:7a:d8:ae:1c:b1:
cc:6e:20:79:fe:b6:f1:8b:eb:5b:dd:70:6a:21:59:40:34:3f:
6c:70:58:77:f3:f4:1c:c2:ef:4b:fb:90:0d:96:dd:b2:05:f0:
ce:b6:04:92:3a:7c:36:28:48:1f:0f:fe:10:dc:dd:b8:45:98:
2c:ba:f0:6a:8a:fb:67:65:ba:74:17:72:0f:35:59:9b:01:0b:
1a:57:af:12:64:b0:15:9f:47:41:66:aa:de:21:79:84:d8:ae:
6f:6f:ea:2b:1d:c5:c7:f6:63:2c:c2:7e:5f:45:8d:65:f6:de:
9c:e2:06:4e:39:53:4d:2a:bb:0d:1b:34:7d:e6:39:9c:82:95:
8b:4d:c8:65:65:46:c7:48:99:0e:a6:76:76:84:df:d4:bf:57:
e1:c7:fa:93:e0:1e:1d:2b:c4:1c:b3:ae:e3:76:a5:fa:9f:50:
c6:e3:ff:de:19:d0:e1:bc:22:1a:03:a5:a6:bd:0d:43:22:91:
07:ca:6b:a2:e7:49:2c:73:82:c9:f5:13:36:91:1d:88:22:73:
2d:55:99:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:53:47 2026 by rpki-client