
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft
File: g8xy3n1cH-U_wUH4vBrCex3zA7E.mft (raw, json)
Hash identifier: +RsFMxXEPoPFJd9np766BcGoRw43TKt1ejcF4KE1hik=
Subject key identifier: ED:D0:28:B3:C5:93:F9:A4:BA:87:60:A2:1F:56:19:1D:D6:C1:86:F4
Authority key identifier: 83:CC:72:DE:7D:5C:1F:E5:3F:C1:41:F8:BC:1A:C2:7B:1D:F3:03:B1
Certificate issuer: /CN=A914A594/serialNumber=83CC72DE7D5C1FE53FC141F8BC1AC27B1DF303B1
Certificate serial: 0A64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft
Manifest number: 0A5B
Signing time: Fri 24 Jul 2026 20:05:54 +0000
Manifest this update: Fri 24 Jul 2026 20:05:53 +0000
Manifest next update: Fri 31 Jul 2026 20:05:53 +0000
Files and hashes: 1: g8xy3n1cH-U_wUH4vBrCex3zA7E.crl (hash: nSPlA9GCLFYa+Fkh3MlH7q+IQKvnfD8NKJ8IghOJ9hk=)
2: 88F058948E7E11EA955D1E64C4F9AE02.roa (hash: 12BxNNG4r0fp+ny7K/GCAHiE9UmqCnqwlOwyKQlw0O8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.crl
rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 20:05:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2660 (0xa64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A594, serialNumber=83CC72DE7D5C1FE53FC141F8BC1AC27B1DF303B1
Validity
Not Before: Jul 24 20:05:53 2026 GMT
Not After : Jul 31 20:05:53 2026 GMT
Subject: CN=6a63c5a2-05a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5f:b4:44:86:48:af:28:91:dc:1a:8a:04:b6:
ee:13:5b:48:62:f4:8b:95:f0:75:f6:8d:e3:88:5e:
4a:b1:05:24:95:16:d0:82:31:17:10:af:48:02:5d:
fd:d8:cc:ff:e2:7b:39:a2:13:78:56:09:31:fa:a5:
a7:e2:2e:86:ff:70:ee:d5:5d:26:63:bf:b5:64:d9:
4e:60:71:72:27:0d:36:24:2f:d6:79:cf:f0:01:55:
ec:7c:9e:a6:f8:7f:b4:47:14:d8:c0:85:35:54:1e:
cd:c7:42:61:d6:60:31:74:d8:b3:19:14:40:a9:47:
49:6e:9e:f9:79:3d:6f:6f:fa:4d:23:78:d0:e2:3f:
24:d1:ad:69:ec:6f:84:0d:3f:55:a9:bc:0b:ee:dc:
c5:be:d1:9a:3f:00:23:51:58:74:df:bb:4a:c3:a5:
ac:9a:b1:34:40:29:a9:a4:d3:22:e5:dc:55:e9:a1:
19:d5:59:99:2e:d4:f8:00:2a:90:1a:73:a9:01:93:
10:cd:26:40:22:f7:d3:3b:b5:bf:14:a4:cd:38:1a:
d0:c0:42:86:0b:e1:a0:31:a0:8b:fe:2c:0a:11:8d:
bd:c4:eb:ab:a8:62:6f:df:c3:15:fa:66:44:51:1f:
5a:3a:ce:b0:bd:8f:c0:d9:f1:58:99:30:55:37:c8:
a1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D0:28:B3:C5:93:F9:A4:BA:87:60:A2:1F:56:19:1D:D6:C1:86:F4
X509v3 Authority Key Identifier:
keyid:83:CC:72:DE:7D:5C:1F:E5:3F:C1:41:F8:BC:1A:C2:7B:1D:F3:03:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:86:46:24:b1:e6:42:e9:65:7d:3b:75:08:84:62:5e:83:6b:
0c:61:dd:ff:fb:1b:9e:1f:ee:fc:cf:eb:b8:4b:3a:b5:ca:0a:
0e:ae:d6:cf:1f:38:34:fa:b3:97:fb:0d:94:5e:e9:be:bd:01:
11:de:ea:aa:3d:80:2a:cb:73:d9:1a:6a:eb:f7:54:e7:7a:14:
b4:70:8f:11:ab:fe:0d:44:42:cb:3e:ac:2b:46:cc:ce:09:87:
58:6c:66:8e:38:0c:c8:f1:74:99:dd:32:61:11:26:2d:5d:9e:
72:e7:4f:5e:e7:9d:a6:87:72:a7:65:de:84:60:b1:c5:2d:b5:
ca:82:69:f9:6a:f1:0c:b7:86:01:83:20:b8:89:4b:f8:de:c6:
46:0c:d9:5f:bb:c6:37:84:c7:7b:12:ed:16:fd:7b:d9:f4:7f:
21:6a:b3:16:d5:df:7b:f9:e0:dc:9d:1a:e8:1a:f5:b4:73:04:
bb:87:44:ae:1b:92:03:7f:c3:d1:c9:af:13:bb:97:13:8a:e8:
c8:ca:08:5b:5b:c4:40:7a:da:26:ca:00:d9:be:e2:7b:66:38:
5a:51:d8:7f:90:16:e5:95:3a:ec:1f:04:f8:a2:6a:b4:d8:2f:
b5:5b:2e:7c:d2:f9:bf:88:13:8a:16:98:9c:61:6a:4a:62:52:
4d:5b:0d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 04:17:21 2026 by rpki-client