
$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft
File: gCx1H6mENH35yTztuX7ZUalSgoY.mft (raw, json)
Hash identifier: pUGOM6mkth4wNX6VI0PVycXTgxkxOZMSYOoD5oL89uU=
Subject key identifier: 04:63:9D:6C:8F:9F:81:54:49:AF:50:01:3B:74:20:C6:61:BE:7D:CC
Authority key identifier: 80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86
Certificate issuer: /CN=A911AE8B/serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286
Certificate serial: 0E0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft
Manifest number: 0DE7
Signing time: Wed 22 Jul 2026 18:05:30 +0000
Manifest this update: Wed 22 Jul 2026 18:05:30 +0000
Manifest next update: Wed 29 Jul 2026 18:05:30 +0000
Files and hashes: 1: gCx1H6mENH35yTztuX7ZUalSgoY.crl (hash: bEgwK347WJ/bO+wYvJXcDRRTXEPEM7uks2TRfWuL2m8=)
2: AF2CB5CE101E11ED9FA78415C4F9AE02.roa (hash: c6Bxsf4/9YtF+57E7R8e7VzwUukKAS9p7Ji/ny3xUY8=)
3: AD727D903F8111F1AAE343DCAF833773.roa (hash: 6/Bw7aE+CShp5tga2BPNlQn9ZAcE3QdhOoOj6cEOvU8=)
4: C5C152D2F28211F0B78FCAB4696F56BC.roa (hash: BXi41BPmYbwmPR7CH8efyQzZoCZh4MQESuU5TAzEzUA=)
5: C64AB888F28211F0B78FCAB4696F56BC.roa (hash: 2Wh9GEwPkIT3ersV2cUdA77BiYM2ozOHXH7e19XrJGE=)
6: 9A735F54EBE611EC82C08A11C4F9AE02.roa (hash: B3wAK97jhUd9WZXrgCNdwLjXUkDVCtHuNCOpZHTWsx4=)
7: 677F3316E02711E9AB669750C4F9AE02.roa (hash: Rx39rgdKBA7zdcc962yiNhgXGCpK5LRJSU4D4pU54RA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl
rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:05:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3599 (0xe0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AE8B, serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286
Validity
Not Before: Jul 22 18:05:30 2026 GMT
Not After : Jul 29 18:05:30 2026 GMT
Subject: CN=6a61066a-ab25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:18:eb:49:21:de:78:93:d3:3a:bd:a1:b9:5f:
6f:fe:94:65:4d:e9:e2:d5:82:6d:df:88:7a:d4:51:
19:6b:f0:f2:81:51:1e:c5:03:7d:1d:9a:bf:15:a8:
23:4f:3f:14:0b:85:52:5c:38:7b:03:d9:c8:e4:32:
40:e6:9e:0e:fe:8a:a1:d7:73:54:00:b5:53:89:91:
fb:50:4c:8b:ff:ae:fe:5c:e2:94:cf:bc:dc:23:b1:
e0:c9:f5:60:75:4d:2b:53:75:49:b9:3b:6f:b9:a4:
fb:e3:fe:2f:a9:36:11:c3:bd:b4:34:4a:13:7a:76:
d4:76:1a:65:94:80:af:65:fd:cf:f2:64:d4:95:31:
65:7e:25:05:fe:64:8f:b7:c7:12:e0:9c:63:5b:84:
ee:a7:09:99:f9:ff:43:d5:40:92:2e:3b:00:8f:ec:
3b:eb:61:73:07:cd:5e:d1:c5:d7:13:a7:2b:08:fb:
74:d3:ad:db:14:65:94:85:b3:8e:3c:ae:69:88:fc:
83:24:76:07:07:38:2a:3e:f4:1f:df:7b:75:bd:b5:
03:db:a8:cd:30:82:c2:3c:1d:8b:8c:ad:be:ed:12:
7d:53:4f:41:bb:00:83:af:91:a3:a3:d3:bf:d1:ba:
9c:58:4a:f8:82:9e:8a:b5:8d:18:72:b7:3c:41:5a:
da:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:63:9D:6C:8F:9F:81:54:49:AF:50:01:3B:74:20:C6:61:BE:7D:CC
X509v3 Authority Key Identifier:
keyid:80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c7:09:fd:b8:04:f0:d7:68:e3:90:c4:1b:5d:54:a4:8e:3d:
9d:05:77:80:42:b0:f8:14:b8:65:a9:fc:68:36:79:03:a9:b5:
1d:c1:c0:88:83:0d:9f:8d:55:10:83:ff:97:a3:1b:ae:9e:0e:
88:af:67:9c:7c:70:6b:f6:57:15:87:1a:f2:af:66:09:c5:ef:
23:e2:2b:84:c2:9d:ac:08:82:5a:d7:4f:c1:df:b1:4c:be:a3:
5c:00:33:3e:b8:ec:59:49:b9:b0:e2:79:dc:dd:93:f2:b6:5c:
d8:42:1a:13:b2:16:06:80:23:cb:4f:20:1f:07:2c:35:f0:a2:
57:4a:6c:6f:4b:6a:7f:33:5f:c0:db:b2:12:b4:5c:f8:82:99:
91:03:de:d2:eb:ad:42:2b:9e:07:13:03:23:a6:9c:46:0f:f3:
f9:6f:c8:e8:41:32:1c:d8:02:11:05:62:5a:7b:0c:9e:f9:e7:
be:a5:8a:4f:ee:3e:d7:a1:4a:00:0f:1a:30:d7:f8:d2:30:17:
f3:36:0c:e1:92:11:2c:e7:3f:68:b8:94:33:5b:7e:53:88:50:
85:ed:7b:f2:d6:97:75:c5:8d:73:b6:c6:55:aa:ff:97:b4:73:
ab:6f:04:73:12:45:0b:6a:2e:12:e6:24:df:a5:5a:20:93:cb:
c2:d4:82:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:00:08 2026 by rpki-client