
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.mft
File: gmqoO74CQNE5BqurRkMX6eercO8.mft (raw, json)
Hash identifier: 8Lcqz/KE37SAmSeqw+Fk/yCScfAcSWsVrg3LVd98Fo8=
Subject key identifier: 13:4F:78:43:A1:CC:F7:67:FD:6C:01:F4:87:10:3B:F4:38:66:7D:39
Authority key identifier: 82:6A:A8:3B:BE:02:40:D1:39:06:AB:AB:46:43:17:E9:E7:AB:70:EF
Certificate issuer: /CN=A916C473/serialNumber=826AA83BBE0240D13906ABAB464317E9E7AB70EF
Certificate serial: C3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmqoO74CQNE5BqurRkMX6eercO8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.mft
Manifest number: C1
Signing time: Thu 23 Jul 2026 08:44:02 +0000
Manifest this update: Thu 23 Jul 2026 08:44:01 +0000
Manifest next update: Thu 30 Jul 2026 08:44:01 +0000
Files and hashes: 1: gmqoO74CQNE5BqurRkMX6eercO8.crl (hash: UN6JDyJuq7v1w1kYKB/llnkCsCNz4BH7zREC6Cg08BU=)
2: DA98BA4C5DE011F0B1CD4C75C4F9AE02.roa (hash: eC+Ca7N9y7VnPMiNtCOnwDbBNDTPawuOGNwqU/JVjQc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.crl
rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmqoO74CQNE5BqurRkMX6eercO8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195 (0xc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C473, serialNumber=826AA83BBE0240D13906ABAB464317E9E7AB70EF
Validity
Not Before: Jul 23 08:44:01 2026 GMT
Not After : Jul 30 08:44:01 2026 GMT
Subject: CN=6a61d452-1e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9e:b5:99:c0:67:88:9d:46:0b:95:0b:08:4e:
20:be:9a:6b:82:07:ab:30:43:45:f8:87:d5:cc:f5:
ee:d9:6d:cb:aa:89:9f:f4:79:5c:d9:71:6c:15:8c:
7a:c6:77:1b:ef:6b:bf:97:85:ed:24:a8:13:a2:15:
81:bd:74:12:77:c2:d0:af:e9:d5:58:3f:8b:cc:42:
38:0e:da:04:c6:0e:26:59:28:70:cd:23:63:4c:b6:
fe:74:e8:c8:f7:9e:fb:a8:cf:89:e5:82:18:69:f7:
e1:63:c5:ac:af:bc:0e:c9:85:a1:08:0b:51:09:3c:
48:9a:c8:e9:9d:41:15:2b:0a:f3:33:8f:c0:9a:5c:
19:9b:7a:51:b6:27:76:3b:ae:09:66:ca:f6:a0:a7:
f1:63:83:8e:1f:e0:87:5f:56:0c:b3:74:5f:49:4f:
d2:05:9c:fb:d8:b1:37:1c:a8:3c:e0:67:82:58:24:
21:49:51:34:6e:8d:b0:22:56:36:f1:2a:8e:05:4a:
96:fd:b0:4d:64:ee:28:f9:ab:3f:38:c3:b0:53:84:
56:75:85:88:b5:0f:ff:c9:98:56:37:a2:86:85:e4:
d6:db:41:ed:84:d0:8e:d7:6b:77:7a:1c:cd:b4:9d:
b7:59:ad:b0:ce:ca:b6:18:f4:eb:89:ec:ec:cc:1c:
30:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:4F:78:43:A1:CC:F7:67:FD:6C:01:F4:87:10:3B:F4:38:66:7D:39
X509v3 Authority Key Identifier:
keyid:82:6A:A8:3B:BE:02:40:D1:39:06:AB:AB:46:43:17:E9:E7:AB:70:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmqoO74CQNE5BqurRkMX6eercO8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:8b:6d:71:bf:55:a9:b8:4d:ea:4c:fa:74:b1:e8:f5:dd:8d:
8f:3e:cc:6e:b6:da:5a:2f:7a:bd:31:d1:4e:d3:54:b9:16:a7:
0b:fe:c6:26:73:62:10:23:37:9d:49:04:6c:e3:3c:96:72:4a:
20:6f:25:51:c5:4b:14:9e:cd:41:e8:38:2f:03:d6:94:87:03:
6b:96:42:fb:c4:09:ec:41:24:56:4d:c9:42:6b:c2:7f:71:49:
61:bd:1a:36:a2:59:3f:6c:6a:79:82:a3:09:1c:c3:f8:5f:06:
97:bd:85:8c:e3:e6:ec:b9:5b:9a:a5:8f:77:49:3a:a7:47:5c:
35:ff:58:44:1c:55:5c:90:c6:89:47:b7:fb:f0:9e:4e:47:2b:
78:19:88:74:8f:f6:4e:12:73:b8:97:e6:4a:02:c4:cf:79:15:
c4:39:b4:07:f0:c1:97:b9:d9:a1:3e:a7:f5:f5:cd:fa:57:98:
b2:e2:d1:52:a0:90:af:d4:b8:2b:b0:c7:14:c9:00:70:d4:32:
1f:be:a9:63:2c:fa:2a:5b:64:35:44:9d:f5:d4:be:ec:76:2a:
bb:e9:47:64:83:62:82:cc:e1:1e:ba:eb:48:9a:f6:c0:26:da:
a3:82:e2:93:75:67:22:17:31:b5:a1:5e:2b:a0:e7:89:d2:60:
3a:2d:3f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:19:19 2026 by rpki-client