
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
File: gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft (raw, json)
Hash identifier: F6VeBV0ye+3c8zy6VnC1xXob11/VeXSQzFLowqjlEjM=
Subject key identifier: 7C:A2:FF:BD:E6:0B:4C:7A:21:CF:47:91:2E:38:76:F2:36:13:79:7F
Authority key identifier: 80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB
Certificate issuer: /CN=A917B4BF/serialNumber=8035090A057327E1200593C20C88C519A45C9ECB
Certificate serial: 052E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
Manifest number: 04D7
Signing time: Thu 23 Jul 2026 00:45:34 +0000
Manifest this update: Thu 23 Jul 2026 00:45:33 +0000
Manifest next update: Thu 30 Jul 2026 00:45:33 +0000
Files and hashes: 1: gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl (hash: pf2IhjyNOpjq7skFlE/2ZV3JKYywWLtsAFpyEsj1r34=)
2: 609BCC763D9311EE9B7BB945C4F9AE02.roa (hash: Z/QK88M5uL5DdEz3ATOtjxO2eM1sapV5OhRj3AH8iQw=)
3: F255CD0A5EC411ED810B8584C4F9AE02.roa (hash: IFm6rzchuTr/Ghy/abEkmajej4rQuJFBH9uiFcUCM2Q=)
4: A5D75708E07111ED9601E941C4F9AE02.roa (hash: g0/tJc0JW/CRmQeJicEs0HkSx3ITHzBqjIOAcBLM6FE=)
5: 8F9CB4448F3511ECB2182782C4F9AE02.roa (hash: PEgw27of0MFqunEKz93iWKmEM4bPPmkxIAHYsCgJElI=)
6: 44B11A52CAEE11ECBC0B2B7EC4F9AE02.roa (hash: 1ib5ZHiX2c+Ay9rYC1Z/Jru6mlw71yvanvthh2v+7bo=)
7: B5BFAB442FE111F19DB441919E833773.roa (hash: P12NrwuEVi8wdx/kCABaTswenwo867fCicXtnmsvepc=)
8: 6873616CCAE811ECBB89015FC4F9AE02.roa (hash: naDu5Ja+nUZ+iaPxJzaO5xNctRuZdG06y3HniPa528I=)
9: 64782D1E607E11ED9CD7EF0FC4F9AE02.roa (hash: eYPDqk6CiCVss4EkZuowgeG638Civi0MVQZq29pSYbk=)
10: F5B3F2F02FE111F183FB5F929E833773.roa (hash: adpxHreCn3jxtJ88fU3gS6rSVCPiga5e2uj5/vlUSuY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl
rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:45:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1326 (0x52e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B4BF, serialNumber=8035090A057327E1200593C20C88C519A45C9ECB
Validity
Not Before: Jul 23 00:45:33 2026 GMT
Not After : Jul 30 00:45:33 2026 GMT
Subject: CN=6a61642e-24cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3e:90:00:97:71:5a:8f:41:f9:84:fb:3d:a8:
8c:9c:07:19:60:d1:a3:15:c1:07:7e:5c:31:7a:73:
2c:26:db:0b:0f:7c:e3:53:c5:c1:a6:5e:71:86:36:
89:e4:7b:ef:7a:53:f1:fa:a4:36:5f:ac:2c:9e:0b:
a3:6c:3d:be:86:8a:ed:19:e7:42:2d:6e:db:35:92:
52:d2:e4:15:af:bd:43:32:02:16:a3:e3:b2:43:09:
f4:48:75:be:4a:f7:1a:6b:c8:9f:7c:61:cd:63:84:
c8:05:dc:f3:bd:b1:c1:51:9c:59:c7:e4:17:d2:ea:
a7:e8:b9:b0:6c:51:9b:f0:b1:99:96:d1:1c:4c:72:
3a:2e:f0:2c:d2:29:36:03:94:70:00:12:b2:a7:31:
d1:90:1a:bd:3c:39:47:67:a2:7c:a8:81:96:85:5b:
76:82:4d:59:12:ed:a3:5b:b3:71:43:61:fd:01:c8:
8d:15:1f:94:df:6b:0b:1a:b1:21:07:02:2c:0a:ba:
22:31:e5:51:c9:2d:0c:cb:27:73:67:7b:7c:60:b6:
f8:f4:75:7e:0c:1d:a1:65:9d:b0:e5:db:26:f1:c9:
90:24:ab:4b:8a:70:16:41:55:8d:00:1f:a7:c8:92:
03:c1:ab:50:e4:77:e6:dc:98:c7:67:2a:2c:2a:09:
a3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A2:FF:BD:E6:0B:4C:7A:21:CF:47:91:2E:38:76:F2:36:13:79:7F
X509v3 Authority Key Identifier:
keyid:80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:61:8d:3f:76:26:8a:01:1a:ad:22:81:a4:43:15:4b:30:0d:
4e:4b:cb:26:94:aa:44:a3:e0:ff:0b:ea:e5:d8:70:ae:03:91:
5a:d5:3d:e5:15:4d:36:49:c3:89:38:71:ec:90:36:bd:8d:9d:
6d:59:b5:ba:d8:77:01:d9:bf:7b:bc:69:9a:20:d1:62:3b:db:
d7:11:0f:51:fe:f2:f2:1e:31:a0:b1:37:5e:c8:86:8c:ac:a5:
44:f6:43:fa:93:c9:9b:6d:08:42:bb:9e:16:e7:df:f4:04:1d:
99:0e:b5:60:d3:50:e3:12:3c:43:d1:f7:79:cf:9e:18:27:a3:
c3:ed:2d:5b:09:1f:3e:d6:70:f0:e9:61:f9:24:82:52:15:1d:
12:74:a7:eb:6b:10:ce:2e:ed:c5:4d:a8:90:60:4c:28:e9:65:
4f:77:57:36:cf:70:84:8b:af:4d:97:33:62:8e:fb:77:46:c7:
23:4a:98:76:1e:75:f6:28:61:ac:1b:02:b8:8c:ef:75:b7:33:
f3:0b:fe:d1:75:ac:83:25:14:46:5f:04:40:eb:7f:90:08:e9:
b8:49:06:39:74:22:88:96:e5:df:ff:42:ac:84:a5:96:98:b5:
ba:cd:f8:9f:69:c6:6c:a6:b2:c9:39:e3:a9:38:50:99:36:29:
21:cb:85:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:42:01 2026 by rpki-client