
$ rpki-client -vvf rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft
File: gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft (raw, json)
Hash identifier: KDXvcuvdHnElG2AwGNolsYMilI/eTXWgU2RiKOcGt0g=
Subject key identifier: 91:2A:6A:C1:44:07:1B:74:13:B7:A1:E8:47:55:35:EF:18:0F:49:75
Authority key identifier: 81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4
Certificate issuer: /CN=A917092C/serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4
Certificate serial: 019D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft
Manifest number: 0166
Signing time: Thu 23 Jul 2026 06:37:47 +0000
Manifest this update: Thu 23 Jul 2026 06:37:47 +0000
Manifest next update: Thu 30 Jul 2026 06:37:47 +0000
Files and hashes: 1: gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl (hash: Iz/Q2Qc+LhPT/DRNOhyIHxgb1JE6scNFIsjsx/z7YPY=)
2: 752774D616A111F0B2CDBC72C4F9AE02.roa (hash: suny3D8b6EtNlMBNr60aW4wrzdwyFWYaz0jtIBV7c9Y=)
3: E1F3085E777E11EFB3F75352C4F9AE02.roa (hash: MlWkxf4J765duArgDZ2QKyAt6xI228MKLb5L4iTwob0=)
4: 8E00FBF2777E11EF8D0ECC4EC4F9AE02.roa (hash: 9dQstXImTlCDYkWwNVOE5AaWfqt3N6M6/xI4kYS4UCs=)
5: E27B5862777E11EFB3F75352C4F9AE02.roa (hash: mQtFZnxqBOSE+G0rPNutjCbpOwWmI7n4xbDitTqkJzk=)
6: E3C4A4EE777E11EFB3F75352C4F9AE02.roa (hash: 50bHfxKSpda4xd/0+Y70XiROBlQW8ceJ16h3JpGhCFI=)
7: E3105D04777E11EFB3F75352C4F9AE02.roa (hash: DrKVDvMocLXzLgvXMZCEUVeDoIKw7Tev+2Jtiw1fDsY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl
rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:37:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 413 (0x19d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917092C, serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4
Validity
Not Before: Jul 23 06:37:47 2026 GMT
Not After : Jul 30 06:37:47 2026 GMT
Subject: CN=6a61b6bb-4e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:86:88:57:47:2d:b4:3d:dc:31:19:85:ea:c4:
61:e7:ab:9b:bf:24:f2:48:54:c9:11:78:e2:37:65:
b8:8e:5f:06:b2:ec:f7:7d:22:83:a3:c3:b6:88:f8:
a2:e2:f9:18:36:db:64:fd:a9:0c:f9:ba:5d:18:ca:
5f:06:85:68:4e:c7:fc:5e:2c:5d:9a:cc:6e:ae:64:
39:33:01:55:3d:61:6f:78:7d:4d:33:e4:ff:67:59:
b9:8f:04:7a:e0:24:50:12:4b:df:a6:6e:d8:4f:98:
b8:3c:62:8f:b3:5c:d9:e0:c4:74:4f:85:f5:f7:a3:
6c:84:89:16:df:9d:1e:98:bd:8a:bc:94:01:e9:05:
94:55:56:a2:35:ee:09:1c:85:82:d0:ae:80:e3:8e:
13:53:f7:c5:30:c0:07:73:1e:77:98:bc:18:b0:44:
96:f4:84:e1:05:50:b9:18:6d:8f:74:9a:04:68:93:
c2:7a:a5:9b:fa:e4:2a:a0:23:59:3d:d2:79:43:a9:
99:c1:1e:f8:29:b6:8d:b8:a9:f2:b0:59:02:ee:f8:
71:fd:5a:79:42:e4:1c:c6:2e:d2:09:ac:24:f4:fd:
01:c7:dd:6c:96:26:57:ba:17:55:93:7d:97:76:72:
1c:96:83:8e:63:4f:70:0e:e6:ec:e5:8b:a8:9b:a8:
b3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2A:6A:C1:44:07:1B:74:13:B7:A1:E8:47:55:35:EF:18:0F:49:75
X509v3 Authority Key Identifier:
keyid:81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:da:3f:38:f4:d8:e7:02:73:7d:5b:6b:b2:09:a8:81:d0:e2:
85:1b:c9:a3:7f:bd:22:ed:e2:9f:57:27:0e:49:3c:98:69:9a:
6f:8c:bd:35:ec:1c:d6:dd:72:61:56:ec:27:44:0d:85:68:f2:
66:39:a6:36:1b:70:1a:d6:af:f4:1c:28:34:45:7c:48:98:c8:
1f:8e:64:d0:7d:92:fb:22:37:0b:94:2b:bf:2f:13:a7:35:48:
f5:6e:f6:50:5d:a8:7b:cb:f9:b2:f3:5f:6e:c3:0e:67:05:d0:
15:ec:cf:09:de:dc:7a:f0:86:15:d7:56:27:d3:22:83:70:ef:
11:e3:7f:b3:90:89:c5:fd:35:97:8b:7d:7a:50:2f:28:d0:fe:
1e:4e:3a:71:1f:1a:29:bb:12:fc:32:4b:8e:22:d2:51:d3:cd:
30:51:20:86:be:80:a9:62:94:ba:42:e1:8c:b8:ad:18:be:ca:
7f:7d:43:70:bf:07:75:46:11:5d:c1:42:77:44:f8:19:eb:74:
9e:2a:eb:9a:2f:61:32:17:c0:f5:52:d6:08:ba:e2:7a:92:e3:
74:71:d1:66:41:21:64:a7:8e:98:f0:95:bf:d3:c1:a9:e0:3e:
f0:d3:25:72:09:78:c8:a5:cf:df:53:7d:c9:a8:8a:15:cd:13:
20:46:ae:0e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzA5MkMxMTAvBgNVBAUTKDgxN0REMzgwMkYyNkU1N0VDRTgyNjVDRTg2MjZGQ0JC
OUM2NEU5RDQwHhcNMjYwNzIzMDYzNzQ3WhcNMjYwNzMwMDYzNzQ3WjAYMRYwFAYD
VQQDEw02YTYxYjZiYi00ZTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvYaIV0cttD3cMRmF6sRh56ubvyTySFTJEXjiN2W4jl8Gsuz3fSKDo8O2iPii
4vkYNttk/akM+bpdGMpfBoVoTsf8XixdmsxurmQ5MwFVPWFveH1NM+T/Z1m5jwR6
4CRQEkvfpm7YT5i4PGKPs1zZ4MR0T4X196NshIkW350emL2KvJQB6QWUVVaiNe4J
HIWC0K6A444TU/fFMMAHcx53mLwYsESW9IThBVC5GG2PdJoEaJPCeqWb+uQqoCNZ
PdJ5Q6mZwR74KbaNuKnysFkC7vhx/Vp5QuQcxi7SCawk9P0Bx91sliZXuhdVk32X
dnIcloOOY09wDubs5Yuom6izXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJEqasFE
Bxt0E7eh6EdVNe8YD0l1MB8GA1UdIwQYMBaAFIF904AvJuV+zoJlzoYm/LucZOnU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDkyQy9FMkMwNzdERTc3
NjYxMUVGQjU1RUQyNzlDNEY5QUUwMi9nWDNUZ0M4bTVYN09nbVhPaGliOHU1eGs2
ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dYM1RnQzhtNVg3T2dtWE9oaWI4dTV4azZkUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MDkyQy9FMkMwNzdERTc3NjYxMUVGQjU1RUQyNzlDNEY5QUUwMi9nWDNUZ0M4bTVY
N09nbVhPaGliOHU1eGs2ZFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAc9o/OPTY5wJzfVtrsgmogdDihRvJo3+9Iu3in1cnDkk8mGmab4y9Newc1t1y
YVbsJ0QNhWjyZjmmNhtwGtav9BwoNEV8SJjIH45k0H2S+yI3C5Qrvy8TpzVI9W72
UF2oe8v5svNfbsMOZwXQFezPCd7cevCGFddWJ9Mig3DvEeN/s5CJxf01l4t9elAv
KND+Hk46cR8aKbsS/DJLjiLSUdPNMFEghr6AqWKUukLhjLitGL7Kf31DcL8HdUYR
XcFCd0T4Get0nirrmi9hMhfA9VLWCLriepLjdHHRZkEhZKeOmPCVv9PBqeA+8NMl
cgl4yKXP31N9yaiKFc0TIEauDg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:21:29 2026 by rpki-client