
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.mft
File: gS_w3hw0QUY8yVyohCO-WhCtsXQ.mft (raw, json)
Hash identifier: qy7WWFiSejmG7AopNxnOhOjskN060VfnSq29upWLO9k=
Subject key identifier: 42:1F:C0:AF:21:91:A3:39:D6:08:A2:2B:C7:59:92:C3:8D:D3:71:81
Authority key identifier: 81:2F:F0:DE:1C:34:41:46:3C:C9:5C:A8:84:23:BE:5A:10:AD:B1:74
Certificate issuer: /CN=A914E4E2/serialNumber=812FF0DE1C3441463CC95CA88423BE5A10ADB174
Certificate serial: 76
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gS_w3hw0QUY8yVyohCO-WhCtsXQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.mft
Manifest number: 74
Signing time: Thu 23 Jul 2026 09:48:46 +0000
Manifest this update: Thu 23 Jul 2026 09:48:46 +0000
Manifest next update: Thu 30 Jul 2026 09:48:46 +0000
Files and hashes: 1: gS_w3hw0QUY8yVyohCO-WhCtsXQ.crl (hash: WgD0Iemt1hmmhw966xPLMTmqizjs1dcCQ4taJjmqMFc=)
2: 6F81A4F8E64811F09CAB54BE376F56BC.roa (hash: kTGqoANe0FuZnU39X94Ie/hbapSgOp3eh2oaDxbXHwE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.crl
rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gS_w3hw0QUY8yVyohCO-WhCtsXQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:48:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118 (0x76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E4E2, serialNumber=812FF0DE1C3441463CC95CA88423BE5A10ADB174
Validity
Not Before: Jul 23 09:48:46 2026 GMT
Not After : Jul 30 09:48:46 2026 GMT
Subject: CN=6a61e37e-eb32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c1:5d:fc:66:85:4f:fd:40:5f:89:2b:06:1f:
a8:70:7a:b0:fb:c0:75:91:81:7c:2e:fa:69:a8:01:
82:1b:e2:78:96:79:93:0e:a7:87:50:41:02:c0:b3:
22:ca:fb:81:f9:4c:f1:bd:5f:f0:ec:8c:07:2b:e9:
25:bb:4a:17:24:24:4b:4e:1a:7e:de:73:77:92:a1:
d8:0d:21:37:89:b0:ed:01:22:27:f8:04:72:ff:09:
a1:f0:28:db:23:75:72:2f:f0:57:5e:f9:dd:49:e8:
7a:b6:ff:67:00:2c:17:c8:bc:2b:f8:fe:7c:b3:56:
21:7c:9f:e3:77:45:e3:67:ef:27:59:6c:94:24:48:
0a:23:88:b9:0e:d0:7d:2c:b9:c4:72:d5:02:22:78:
59:55:3e:54:82:b9:8d:7f:e1:f0:a1:49:f6:ad:09:
f0:c3:b4:25:b5:6c:ac:29:37:88:5d:b0:f9:4a:f2:
d9:29:70:f7:ec:ee:f8:3b:5b:b5:7d:f2:85:34:54:
fe:54:e5:a4:7e:c1:bc:fb:b6:d9:28:34:1e:93:35:
e0:7c:d4:50:c7:e8:9a:e7:35:4b:44:7f:4f:44:36:
11:66:d7:98:da:11:c2:59:34:51:10:cb:70:db:4f:
fe:fa:f0:4d:51:50:f6:ae:52:fd:e5:be:79:84:b8:
b1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1F:C0:AF:21:91:A3:39:D6:08:A2:2B:C7:59:92:C3:8D:D3:71:81
X509v3 Authority Key Identifier:
keyid:81:2F:F0:DE:1C:34:41:46:3C:C9:5C:A8:84:23:BE:5A:10:AD:B1:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gS_w3hw0QUY8yVyohCO-WhCtsXQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:70:81:c4:63:56:8d:cd:36:1f:ad:39:6a:57:fb:c8:0a:c4:
0d:6d:5f:58:91:bb:26:8c:11:ed:87:35:66:93:1a:44:dd:28:
8f:fd:dd:92:be:4a:fd:7b:68:25:3a:df:77:4f:36:9e:67:05:
b4:e8:9c:4f:33:c4:a5:67:b6:a3:01:e0:f1:e6:11:46:f7:55:
8a:d0:3f:32:fa:60:a6:fb:92:d9:75:f3:28:c5:f3:d3:71:8b:
9d:62:b5:fa:5c:58:a3:62:30:48:02:9e:de:45:46:02:4e:6a:
e5:66:b7:eb:fc:5f:10:5f:37:c5:63:af:6c:3e:bd:16:89:dd:
a7:35:07:95:0c:5f:66:b5:3d:8a:98:a1:28:88:82:4d:01:b5:
d0:10:bd:89:eb:82:30:6b:cc:08:55:8d:4d:9a:97:3c:2e:ee:
6b:9b:a8:2b:ec:41:3c:98:78:ab:b3:fa:74:a2:f1:ec:0e:2a:
1c:86:a3:75:06:ef:52:40:d4:ce:d6:9f:bb:55:09:4c:2d:7d:
35:5d:9e:b0:9a:98:5b:a6:f2:d8:8c:f5:58:91:ce:1b:ee:59:
a2:1e:c0:4b:c9:2c:79:92:83:98:db:ae:13:3d:62:42:2b:a9:
64:7e:57:9d:29:53:a4:41:1e:81:b7:88:52:5b:0d:ad:0b:56:
8e:7d:0b:69
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
RTRFMjExMC8GA1UEBRMoODEyRkYwREUxQzM0NDE0NjNDQzk1Q0E4ODQyM0JFNUEx
MEFEQjE3NDAeFw0yNjA3MjMwOTQ4NDZaFw0yNjA3MzAwOTQ4NDZaMBgxFjAUBgNV
BAMTDTZhNjFlMzdlLWViMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCbwV38ZoVP/UBfiSsGH6hwerD7wHWRgXwu+mmoAYIb4niWeZMOp4dQQQLAsyLK
+4H5TPG9X/DsjAcr6SW7ShckJEtOGn7ec3eSodgNITeJsO0BIif4BHL/CaHwKNsj
dXIv8Fde+d1J6Hq2/2cALBfIvCv4/nyzViF8n+N3ReNn7ydZbJQkSAojiLkO0H0s
ucRy1QIieFlVPlSCuY1/4fChSfatCfDDtCW1bKwpN4hdsPlK8tkpcPfs7vg7W7V9
8oU0VP5U5aR+wbz7ttkoNB6TNeB81FDH6JrnNUtEf09ENhFm15jaEcJZNFEQy3Db
T/768E1RUPauUv3lvnmEuLFfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUQh/AryGR
oznWCKIrx1mSw43TcYEwHwYDVR0jBBgwFoAUgS/w3hw0QUY8yVyohCO+WhCtsXQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFNEUyLzQxQ0U5REVFREFG
QTExRjA5QUY2MTYyMDdDRDM2NDFEL2dTX3czaHcwUVVZOHlWeW9oQ08tV2hDdHNY
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvZ1NfdzNodzBRVVk4eVZ5b2hDTy1XaEN0c1hRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRF
NEUyLzQxQ0U5REVFREFGQTExRjA5QUY2MTYyMDdDRDM2NDFEL2dTX3czaHcwUVVZ
OHlWeW9oQ08tV2hDdHNYUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQB2cIHEY1aNzTYfrTlqV/vICsQNbV9YkbsmjBHthzVmkxpE3SiP/d2Svkr9e2gl
Ot93TzaeZwW06JxPM8SlZ7ajAeDx5hFG91WK0D8y+mCm+5LZdfMoxfPTcYudYrX6
XFijYjBIAp7eRUYCTmrlZrfr/F8QXzfFY69sPr0Wid2nNQeVDF9mtT2KmKEoiIJN
AbXQEL2J64Iwa8wIVY1Nmpc8Lu5rm6gr7EE8mHirs/p0ovHsDiochqN1Bu9SQNTO
1p+7VQlMLX01XZ6wmphbpvLYjPVYkc4b7lmiHsBLySx5koOY264TPWJCK6lkfled
KVOkQR6Bt4hSWw2tC1aOfQtp
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:33:36 2026 by rpki-client