
$ rpki-client -vvf rpki.apnic.net/member_repository/A91259CA/A9F2722E08A011F0B158565AC4F9AE02/G7ThccrEGeYWe6On1yU8dhYxoo0.mft
File: G7ThccrEGeYWe6On1yU8dhYxoo0.mft (raw, json)
Hash identifier: Es7ldZ3WXHIsGiAfTepj/cBHU/g2uxv4X2TQ84JvHb8=
Subject key identifier: 45:53:F9:A8:F0:BC:69:40:D1:73:44:0C:9C:15:76:51:26:DA:95:BF
Authority key identifier: 1B:B4:E1:71:CA:C4:19:E6:16:7B:A3:A7:D7:25:3C:76:16:31:A2:8D
Certificate issuer: /CN=A91259CA/serialNumber=1BB4E171CAC419E6167BA3A7D7253C761631A28D
Certificate serial: 0101
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G7ThccrEGeYWe6On1yU8dhYxoo0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91259CA/A9F2722E08A011F0B158565AC4F9AE02/G7ThccrEGeYWe6On1yU8dhYxoo0.mft
Manifest number: FD
Signing time: Thu 23 Jul 2026 08:00:11 +0000
Manifest this update: Thu 23 Jul 2026 08:00:10 +0000
Manifest next update: Thu 30 Jul 2026 08:00:10 +0000
Files and hashes: 1: G7ThccrEGeYWe6On1yU8dhYxoo0.crl (hash: 4AFgLj689DzYGw3Y/WzbaDE1tGxFzT7PHOVXGEQt2os=)
2: 2031308808A111F09B131E5BC4F9AE02.roa (hash: bfZHmy0//lzWJ0TH2iq1RiILBXFH7y1Z1TmJFXwbV9c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91259CA/A9F2722E08A011F0B158565AC4F9AE02/G7ThccrEGeYWe6On1yU8dhYxoo0.crl
rsync://rpki.apnic.net/member_repository/A91259CA/A9F2722E08A011F0B158565AC4F9AE02/G7ThccrEGeYWe6On1yU8dhYxoo0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G7ThccrEGeYWe6On1yU8dhYxoo0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 257 (0x101)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91259CA, serialNumber=1BB4E171CAC419E6167BA3A7D7253C761631A28D
Validity
Not Before: Jul 23 08:00:10 2026 GMT
Not After : Jul 30 08:00:10 2026 GMT
Subject: CN=6a61ca0a-67c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:6d:ce:d6:f5:5d:7c:59:44:30:d5:ed:7c:0f:
77:4e:68:28:ec:6f:ca:a9:02:81:b2:d7:44:94:b7:
65:ca:aa:cc:87:3b:9e:f1:bd:3b:f4:54:13:d8:db:
c5:c1:6b:65:37:7a:37:72:2d:8a:78:08:0a:d4:3f:
88:74:e7:df:c7:d3:04:34:65:34:41:fe:8f:59:58:
eb:b4:fc:06:73:b1:52:1f:0f:d1:35:de:dd:27:24:
ac:43:ad:5d:90:0f:81:0b:8e:25:5a:ba:08:e5:dc:
bc:6a:c4:8d:be:bf:eb:d2:86:ae:05:99:b5:af:94:
ac:c1:2d:85:df:77:e3:dd:2a:41:cf:6c:84:98:22:
ca:81:da:0d:47:c0:11:6e:b3:3e:87:74:be:c0:cb:
6b:c2:18:17:9c:42:c6:57:00:d0:bc:24:0b:86:f8:
54:1c:ee:a9:e2:c2:cb:7d:e8:a0:65:84:0d:c9:36:
ba:7d:05:76:e5:3c:d4:bc:83:70:18:34:2d:a0:3f:
1c:63:66:27:9f:6a:25:9b:27:a7:79:de:c9:08:e9:
b4:99:15:c5:f2:f1:ae:7c:44:9b:a0:e5:f8:8e:89:
6a:10:65:45:39:a5:57:ab:24:aa:c4:35:a4:c3:df:
5e:75:e2:c9:d5:39:76:64:2a:a7:db:f0:77:d6:cf:
98:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:53:F9:A8:F0:BC:69:40:D1:73:44:0C:9C:15:76:51:26:DA:95:BF
X509v3 Authority Key Identifier:
keyid:1B:B4:E1:71:CA:C4:19:E6:16:7B:A3:A7:D7:25:3C:76:16:31:A2:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91259CA/A9F2722E08A011F0B158565AC4F9AE02/G7ThccrEGeYWe6On1yU8dhYxoo0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G7ThccrEGeYWe6On1yU8dhYxoo0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91259CA/A9F2722E08A011F0B158565AC4F9AE02/G7ThccrEGeYWe6On1yU8dhYxoo0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c4:37:9b:49:b5:ba:56:f4:4b:2d:bf:70:4b:27:4a:c8:59:e3:
9c:9b:56:4f:b5:9b:e8:8b:cc:97:ba:7a:24:41:76:7e:31:a2:
4e:77:6d:ca:8f:5f:67:a1:ff:ca:7c:05:22:c4:03:64:81:99:
c3:4a:8c:e7:44:98:99:72:70:d0:99:42:55:35:09:c9:7a:bf:
c1:5b:72:d2:51:24:d5:d9:2d:ee:74:72:99:42:1b:1c:79:5d:
03:d1:5a:1d:27:1b:f9:23:0c:86:ab:f6:03:16:be:45:fc:d8:
57:ba:87:92:a5:dc:59:67:9a:ed:72:6e:b6:f9:1e:a1:6a:54:
b2:ac:2a:05:fb:a2:5d:69:a6:7a:5b:31:63:63:16:fa:22:6d:
31:e1:76:c9:09:b1:ef:b6:c2:7f:16:bd:af:a5:e3:7a:94:41:
d5:c3:c9:c2:89:9d:56:4e:20:d1:12:9a:26:d5:b4:1b:8a:ca:
bc:80:a8:29:d6:8a:5c:12:1e:22:4b:32:80:99:b0:6d:9f:3b:
bd:ca:a3:99:67:21:49:24:46:5f:05:cc:cf:04:c8:65:d6:d1:
32:34:ca:d9:44:d8:47:6b:90:21:67:63:4c:f4:be:6d:68:80:
9d:1c:8a:93:55:f9:4f:12:15:e5:d7:e7:f9:a4:0b:43:ff:d9:
02:15:2d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:18:00 2026 by rpki-client