
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft
File: gAcXZemLOWEliNN4VyFDLDJgf-4.mft (raw, json)
Hash identifier: 96H5evq6F99zZRycD0MSgzfwLVFmj3+/USKy4R+1Nao=
Subject key identifier: 5C:9E:9B:5A:04:48:3B:AF:29:79:4B:3A:E2:99:C8:8A:5F:5A:14:6C
Authority key identifier: 80:07:17:65:E9:8B:39:61:25:88:D3:78:57:21:43:2C:32:60:7F:EE
Certificate issuer: /CN=A911F584/serialNumber=80071765E98B39612588D3785721432C32607FEE
Certificate serial: 9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft
Manifest number: 9B
Signing time: Thu 23 Jul 2026 09:13:36 +0000
Manifest this update: Thu 23 Jul 2026 09:13:36 +0000
Manifest next update: Thu 30 Jul 2026 09:13:36 +0000
Files and hashes: 1: gAcXZemLOWEliNN4VyFDLDJgf-4.crl (hash: PoydwP0dIz2yaAmH8I0nqQOge35Phf7aPoDEmQCY7Tk=)
2: D7E9A8C49DAA11F0A24E4963C4F9AE02.roa (hash: axY0t/wfGcS0SqKBr/2f2eZYye9v2/DiDSRsHzKpfyQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.crl
rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:13:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158 (0x9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F584, serialNumber=80071765E98B39612588D3785721432C32607FEE
Validity
Not Before: Jul 23 09:13:36 2026 GMT
Not After : Jul 30 09:13:36 2026 GMT
Subject: CN=6a61db40-ed3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9c:05:f4:bf:ef:56:43:f2:da:81:29:81:13:
2f:15:f3:f3:13:88:7f:db:cb:c9:45:d8:de:6f:a4:
a6:30:ca:1f:be:4f:7d:cf:54:17:dd:db:8c:0d:50:
72:7b:ec:a7:d8:5f:6a:b0:2d:fe:36:cc:df:46:44:
84:e0:5b:ab:92:a5:bc:19:2c:9e:00:b8:38:00:da:
50:b5:1c:ee:a3:53:39:64:6c:d0:40:fb:c8:b7:5a:
6f:82:c6:ef:f7:87:ac:8f:e3:3a:b1:8c:7c:e8:e8:
5a:4a:0a:60:d2:dd:8e:1c:2b:59:5a:14:8f:6c:2c:
80:ba:70:a3:d7:e4:51:b9:ce:ca:f5:92:20:a1:9f:
6f:55:de:87:63:0d:06:d2:1d:3e:56:ad:87:4b:b7:
6e:7f:1c:cf:55:e0:a8:8d:03:1e:eb:92:f4:82:8a:
29:b5:a7:2e:99:35:ee:85:52:ff:16:e3:2e:51:dd:
ac:1e:af:df:0d:33:fe:06:8e:d8:a2:f3:d7:e6:90:
fc:5a:31:83:d3:5c:c7:4a:d6:ea:7f:f5:01:01:82:
01:bb:c1:0f:35:b3:a0:95:c2:f0:0e:99:58:3b:fa:
32:00:d9:98:a2:e8:eb:1a:11:e6:11:1a:cc:84:c7:
a3:f7:cc:f2:c8:cc:95:dd:4e:1a:e4:14:32:21:f4:
c3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:9E:9B:5A:04:48:3B:AF:29:79:4B:3A:E2:99:C8:8A:5F:5A:14:6C
X509v3 Authority Key Identifier:
keyid:80:07:17:65:E9:8B:39:61:25:88:D3:78:57:21:43:2C:32:60:7F:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:6f:6c:a2:f4:63:9a:de:cf:92:36:b5:46:20:b2:39:da:0f:
c3:f5:a4:7b:21:b8:10:3b:92:06:df:8c:c5:fa:c6:78:fd:37:
6f:0e:8e:77:e8:01:42:97:b3:a0:93:8b:1f:f1:a0:b3:84:5c:
d7:09:f5:7a:49:f1:44:94:65:6a:1a:8c:6d:bd:10:af:96:ec:
81:9f:60:7b:c2:ac:6f:f5:01:b1:22:8e:f1:60:d8:cd:dc:28:
a4:45:98:43:d6:2d:77:d9:d2:d2:0b:ba:22:8d:c6:8f:3d:77:
3d:11:78:d1:2a:78:49:97:a3:dc:d1:2e:a4:57:c4:fa:7d:9f:
65:a6:4d:e6:55:96:ef:d7:43:6a:da:42:a4:03:fe:54:3e:a0:
a6:84:63:38:15:04:40:5e:96:c7:55:af:47:cd:63:cb:30:e4:
84:68:a1:e3:79:c5:97:92:8d:a5:2c:d6:50:cd:a2:13:73:37:
f0:25:33:c3:9f:db:27:25:c8:9a:19:f7:b8:88:77:d2:ea:f7:
5d:0f:52:6a:c2:eb:f9:72:2a:26:12:36:ca:49:39:6d:8a:b9:
73:85:ae:d7:53:55:3f:31:fc:e4:d0:89:0f:6f:54:d5:57:85:
c9:c5:52:7c:7d:bb:14:e2:3a:ae:7e:18:49:6d:6a:1d:6a:e3:
3b:85:5b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:35:44 2026 by rpki-client