
$ rpki-client -vvf rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.mft
File: g1KnNOghRPMixQtyik92WjPXIlY.mft (raw, json)
Hash identifier: H4Mbo1WKp1zo7d/RcI41zay3NDrEmi36R0v/hnDGO1M=
Subject key identifier: 17:8A:8F:A6:0A:CC:4E:59:5A:A3:C4:0B:A2:77:13:7B:C4:C5:11:07
Authority key identifier: 83:52:A7:34:E8:21:44:F3:22:C5:0B:72:8A:4F:76:5A:33:D7:22:56
Certificate issuer: /CN=A917357E/serialNumber=8352A734E82144F322C50B728A4F765A33D72256
Certificate serial: 02E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1KnNOghRPMixQtyik92WjPXIlY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.mft
Manifest number: 07B0
Signing time: Tue 12 May 2026 23:51:38 +0000
Manifest this update: Tue 12 May 2026 23:51:38 +0000
Manifest next update: Tue 19 May 2026 23:51:38 +0000
Files and hashes: 1: g1KnNOghRPMixQtyik92WjPXIlY.crl (hash: GHj36igeej7j6kdAvVqzhxoAS1UOMscPy1XTB1HaudA=)
2: D89FDE783D9611F1B175AB4BC4833773.roa (hash: 4wi07dE2kolx7jvAdeVv4QEH8aWYT0OYBjVpj0ack7Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.crl
rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1KnNOghRPMixQtyik92WjPXIlY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:51:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 745 (0x2e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917357E, serialNumber=8352A734E82144F322C50B728A4F765A33D72256
Validity
Not Before: May 12 23:51:38 2026 GMT
Not After : May 19 23:51:38 2026 GMT
Subject: CN=6a03bd0a-5c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0f:71:71:96:fb:1e:d9:7d:c1:cd:8c:86:0f:
e0:0c:58:1b:17:b0:39:33:9b:5c:dc:55:f2:d9:79:
f7:6c:e4:df:f3:9f:27:86:09:23:f1:62:4f:6b:5f:
f4:42:53:84:74:f0:a2:c9:0b:20:75:7d:08:96:bc:
42:4a:1c:e3:5c:b3:f5:a2:33:62:66:aa:4a:0e:10:
95:2c:b3:7c:ea:1f:cc:8c:28:4c:c5:62:88:26:a6:
bd:77:dd:d6:5d:e8:97:aa:fe:5f:d1:9a:6b:a8:ca:
9c:c2:f2:a8:f6:e3:ac:6b:cd:36:ba:8e:56:40:ab:
e0:0c:ba:e3:00:2a:57:41:e9:f8:e0:05:9c:d2:a1:
b3:a1:24:e4:22:ec:d9:c4:e5:ab:a1:e8:8b:e5:51:
e5:15:d1:33:d1:32:07:37:d8:fe:71:24:97:55:cf:
8a:06:37:1f:20:97:5a:74:6e:35:42:5c:a2:59:f1:
53:b7:e2:ad:74:e2:5f:ce:33:cd:f7:a1:77:0b:17:
21:f9:97:8c:b8:e1:86:ae:53:02:03:f4:bf:58:1c:
70:1d:d2:04:45:58:d2:60:65:40:9e:05:ea:02:7d:
86:f2:bc:9b:bd:8c:58:38:68:14:ba:ae:5d:c7:cf:
7f:f3:23:18:45:b5:4b:31:b0:c6:be:13:50:7d:dc:
24:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8A:8F:A6:0A:CC:4E:59:5A:A3:C4:0B:A2:77:13:7B:C4:C5:11:07
X509v3 Authority Key Identifier:
keyid:83:52:A7:34:E8:21:44:F3:22:C5:0B:72:8A:4F:76:5A:33:D7:22:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1KnNOghRPMixQtyik92WjPXIlY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:94:3f:a0:b7:61:86:fe:3e:e1:e9:47:8c:ad:79:3a:44:ec:
62:3e:cb:94:49:82:ff:cb:0d:8f:d0:7d:5b:6e:f9:9a:45:35:
d0:ec:fe:ce:a3:b7:f7:99:af:34:15:13:72:bd:cb:92:3a:d0:
be:b1:c7:90:8c:ce:4b:2b:da:77:2d:64:cf:0a:57:ba:ce:bc:
87:6c:74:b9:85:bd:68:2d:44:c0:38:e6:7b:a4:41:10:12:21:
f6:cf:10:d8:86:9a:0e:d7:c0:59:d5:45:ab:ea:68:32:43:48:
72:0e:3e:94:c3:18:fa:73:7b:2c:54:9d:d4:57:d1:dd:60:df:
92:27:4b:5d:23:65:97:77:15:7d:20:ea:27:ea:c3:54:ec:ca:
8f:36:68:b1:30:94:ef:bc:d0:92:f4:10:b1:ae:ac:29:d8:6a:
10:75:e5:b3:ad:78:12:fb:e4:c1:0c:8d:a2:aa:3b:58:c6:19:
f2:fe:84:af:eb:03:97:1b:22:3f:0b:da:c0:62:12:ce:5e:b9:
6b:83:33:10:a1:fd:25:33:c9:88:5d:9d:54:6e:d0:4d:26:b7:
47:e3:03:99:12:2b:cf:86:0e:2b:15:af:25:6e:a4:4e:48:e2:
6d:ed:5e:94:1a:4f:17:8b:42:69:b5:6e:90:b7:10:97:1c:af:
6d:11:cc:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:16:48 2026 by rpki-client