
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft
File: gja7zXAtSCL93VuwVmDPEDjsjH4.mft (raw, json)
Hash identifier: B7CpO2008UR2IjlenLXspRHSBmfuwLfGVnOJ6hEXcH4=
Subject key identifier: 47:16:66:11:B8:D0:13:01:A0:F9:0F:3C:86:8C:94:52:BD:00:26:B5
Authority key identifier: 82:36:BB:CD:70:2D:48:22:FD:DD:5B:B0:56:60:CF:10:38:EC:8C:7E
Certificate issuer: /CN=A911AE4B/serialNumber=8236BBCD702D4822FDDD5BB05660CF1038EC8C7E
Certificate serial: 0934
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft
Manifest number: 0927
Signing time: Tue 22 Sep 2026 20:01:23 +0000
Manifest this update: Tue 22 Sep 2026 20:01:23 +0000
Manifest next update: Tue 29 Sep 2026 20:01:23 +0000
Files and hashes: 1: gja7zXAtSCL93VuwVmDPEDjsjH4.crl (hash: euQUWNPR9qPEsrob0uguS+XDrqXGJClO73NlFwbiVsM=)
2: 63B7CB76D0E511EA9916E053C4F9AE02.roa (hash: pYGKIqod1ITslZbHR5crvWsrKnNCLAjIRuDb4Q/IMAk=)
3: 3ABFAC2231E211EFA341983CC4F9AE02.roa (hash: ujHcZXNwuVg9oYIrnnoAIw1UkI7YOZ3N1z9618MB7Nk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.crl
rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 20:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2356 (0x934)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AE4B, serialNumber=8236BBCD702D4822FDDD5BB05660CF1038EC8C7E
Validity
Not Before: Sep 22 20:01:23 2026 GMT
Not After : Sep 29 20:01:23 2026 GMT
Subject: CN=6ab2de93-3ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ad:e5:f5:87:16:0c:1a:ca:96:5e:6b:2e:5c:
bf:01:a6:29:94:46:12:02:36:c2:94:8e:06:d9:81:
f8:91:30:bc:2a:95:f1:9f:e5:e3:3d:c0:a5:ab:e0:
4a:f8:c9:23:32:c0:41:ce:6c:8b:03:f0:a4:f0:58:
8f:f7:43:68:5f:0f:b8:73:4b:3d:07:48:92:69:a6:
d2:4f:04:74:e9:67:c3:5f:df:f9:07:cf:33:0d:65:
f2:ba:9c:cc:89:c8:d7:f0:75:b1:c5:0d:6c:b4:50:
b0:f9:c3:e5:b6:e7:09:91:1a:84:50:a2:9e:6b:f9:
fa:e4:52:00:d2:2f:bb:0b:de:84:e3:2e:a1:f1:86:
c2:96:2d:e4:ba:38:cd:44:de:a7:8c:dd:78:d5:c5:
f6:e7:55:af:92:90:00:65:fe:32:bf:32:e4:07:88:
c0:d6:da:79:aa:e1:83:7f:43:49:c2:cf:b0:6b:fb:
5c:1f:2e:98:d5:93:11:7b:d9:5d:02:77:21:8e:1f:
ca:4e:b7:78:e0:b6:34:44:4a:3b:d3:7f:c7:67:1a:
66:7a:ac:67:eb:2a:e7:c2:78:a6:c8:55:3a:85:f3:
1c:1b:c4:02:dc:24:48:94:30:9f:a7:39:da:37:82:
72:1d:dd:ec:46:ce:7b:1c:26:45:46:a3:cf:81:81:
fe:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:16:66:11:B8:D0:13:01:A0:F9:0F:3C:86:8C:94:52:BD:00:26:B5
X509v3 Authority Key Identifier:
keyid:82:36:BB:CD:70:2D:48:22:FD:DD:5B:B0:56:60:CF:10:38:EC:8C:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:83:bb:77:f5:8c:a6:40:86:ba:44:d7:50:04:c2:eb:5f:df:
98:40:88:ac:bb:aa:b0:de:73:db:0a:10:55:ff:31:4a:0c:70:
ae:0f:5a:4c:6f:e1:d9:e4:d1:e4:05:0a:98:8e:c0:3f:6f:d5:
91:2f:bb:f3:70:d0:bb:a7:16:48:24:ab:9d:32:b6:01:46:ad:
cc:33:06:2d:a3:89:4c:4d:d4:53:10:d6:b5:06:01:69:76:5e:
4d:62:01:15:18:52:07:01:3a:20:d3:43:52:fd:87:fe:f0:25:
78:ca:11:14:ab:63:35:e4:71:ec:b2:f3:ae:bf:c7:72:3d:43:
2d:01:b3:1c:95:1d:78:c7:ac:ec:c1:dc:1d:bb:ae:25:6f:9c:
fd:1d:26:c6:b5:ca:b4:4c:c0:5c:47:37:45:33:53:7a:86:78:
75:e2:3f:25:44:53:51:ab:e0:a5:81:96:b7:a3:e0:40:bc:cf:
de:82:b2:82:47:b3:23:9f:56:6a:c9:7c:e9:dd:af:b4:e4:39:
20:d3:15:8d:ae:48:34:70:d0:75:c0:35:49:13:7b:19:35:19:
64:bf:9c:8f:8b:af:5a:5e:f4:c9:44:d1:2f:1b:7c:dd:09:0b:
c8:ee:5e:1d:0c:9a:9b:27:d0:0c:ac:96:f2:0c:58:d6:f6:74:
36:9a:82:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:07:06 2026 by rpki-client