
$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft
File: gja7zXAtSCL93VuwVmDPEDjsjH4.mft (raw, json)
Hash identifier: Em+NOPaCCZNeUno49DRZAxntsFC3DBV3JFqoYehad18=
Subject key identifier: E9:16:0B:72:9A:AA:46:43:2E:97:18:A5:F5:3D:70:F2:7A:45:E9:49
Authority key identifier: 82:36:BB:CD:70:2D:48:22:FD:DD:5B:B0:56:60:CF:10:38:EC:8C:7E
Certificate issuer: /CN=A911AE4B/serialNumber=8236BBCD702D4822FDDD5BB05660CF1038EC8C7E
Certificate serial: 0914
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft
Manifest number: 0907
Signing time: Wed 22 Jul 2026 20:45:19 +0000
Manifest this update: Wed 22 Jul 2026 20:45:18 +0000
Manifest next update: Wed 29 Jul 2026 20:45:18 +0000
Files and hashes: 1: gja7zXAtSCL93VuwVmDPEDjsjH4.crl (hash: G2m25U2aaaRFz9tDoFGO06vEe60xraMt48WrXo1k0+A=)
2: 63B7CB76D0E511EA9916E053C4F9AE02.roa (hash: pYGKIqod1ITslZbHR5crvWsrKnNCLAjIRuDb4Q/IMAk=)
3: 3ABFAC2231E211EFA341983CC4F9AE02.roa (hash: ujHcZXNwuVg9oYIrnnoAIw1UkI7YOZ3N1z9618MB7Nk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.crl
rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:45:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2324 (0x914)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AE4B, serialNumber=8236BBCD702D4822FDDD5BB05660CF1038EC8C7E
Validity
Not Before: Jul 22 20:45:18 2026 GMT
Not After : Jul 29 20:45:18 2026 GMT
Subject: CN=6a612bdf-b8f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:31:c9:ec:7a:3f:60:20:dd:ee:f8:aa:11:76:
ae:cf:e4:04:fa:98:12:43:69:a6:da:d7:ce:de:bb:
1a:d9:55:e2:2f:98:c8:27:38:d7:a3:01:f3:04:68:
e5:d2:52:60:85:2e:2e:45:a4:9b:d3:69:ab:b2:b7:
44:71:39:1d:e2:7d:ca:32:54:6d:c2:10:87:8b:81:
e7:bf:2b:54:69:eb:6e:c6:17:9a:fb:f9:27:76:ec:
c2:eb:91:2a:42:3d:5e:ca:94:a1:d4:e0:9d:8b:48:
87:00:51:21:42:63:a1:95:8d:59:5a:df:cc:3a:1a:
41:24:a0:fe:9f:b3:02:de:1b:6b:2d:24:53:53:a6:
1a:85:4f:04:15:83:46:5c:b7:31:39:3c:28:8b:a2:
d3:43:fa:5b:2c:6f:35:c5:9b:65:e0:95:3f:2e:a6:
16:2f:14:c6:95:b3:14:11:ed:ae:78:ac:16:80:53:
97:22:08:72:31:41:cd:68:96:cf:2d:87:9c:80:85:
34:eb:18:53:7d:59:3d:49:49:2a:55:e5:43:60:44:
53:5e:76:6c:4d:d7:42:e8:05:15:84:a3:41:e5:08:
b8:79:cf:a4:2d:54:4f:e4:8c:bd:cb:a5:24:2c:ee:
73:56:51:0a:10:e5:f8:69:bc:00:2a:04:b3:28:8e:
10:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:16:0B:72:9A:AA:46:43:2E:97:18:A5:F5:3D:70:F2:7A:45:E9:49
X509v3 Authority Key Identifier:
keyid:82:36:BB:CD:70:2D:48:22:FD:DD:5B:B0:56:60:CF:10:38:EC:8C:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:1a:46:fe:5a:cf:1b:0a:e8:d2:f9:09:37:47:24:8a:5e:19:
ab:ea:15:a0:16:22:8f:51:78:8d:ee:8e:60:dc:a8:0e:f5:e4:
4f:3a:d3:57:a3:1f:10:17:5f:54:f1:36:86:62:52:18:b6:6a:
13:ca:98:f0:2c:a4:fa:da:5c:56:4d:88:75:8f:ea:a4:b9:19:
d7:13:1e:0c:26:9a:69:9b:25:6c:ec:74:38:29:e8:0d:b5:a9:
28:74:c5:b7:ab:84:72:fb:e6:e1:2d:dc:c5:38:17:cc:55:4b:
b7:b5:18:31:4a:a4:fd:23:b5:ca:77:f8:19:37:ca:45:bb:35:
09:7f:37:0a:fd:a5:a2:9d:be:a5:75:6a:f6:81:f1:ea:65:a9:
68:bb:4d:91:5f:b2:38:8d:2e:d6:b9:92:e7:73:1d:50:d5:68:
68:c3:86:9e:fd:b7:73:0f:15:08:50:64:34:20:ba:4f:a5:87:
87:36:02:a5:51:b1:4a:fd:60:5c:d9:e1:32:b6:8c:ad:70:21:
27:b3:cc:5a:5d:16:f7:22:f6:d5:ea:90:17:46:58:19:d2:dc:
f4:79:7a:da:97:d3:10:06:49:15:2e:c8:5c:66:5d:0d:06:1a:
3f:d1:bc:05:a3:18:9f:e6:23:cf:7a:0d:46:fc:12:c8:ff:9f:
06:56:19:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:19:40 2026 by rpki-client