
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
File: gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft (raw, json)
Hash identifier: pzD8f/gn8l8RfFUKL9ItHv+LCamqXAmWgx5h5JwbpQU=
Subject key identifier: 34:8C:40:90:BD:65:9D:9C:83:33:72:FC:35:4B:83:A7:8B:A8:A8:9F
Authority key identifier: 80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB
Certificate issuer: /CN=A917B4BF/serialNumber=8035090A057327E1200593C20C88C519A45C9ECB
Certificate serial: 050A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
Manifest number: 04B3
Signing time: Wed 13 May 2026 00:08:55 +0000
Manifest this update: Wed 13 May 2026 00:08:54 +0000
Manifest next update: Wed 20 May 2026 00:08:54 +0000
Files and hashes: 1: gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl (hash: WLBsMtGPgltXOi4THxPoKUFuW1YfRMmh82dm41z+1ck=)
2: 8F9CB4448F3511ECB2182782C4F9AE02.roa (hash: PEgw27of0MFqunEKz93iWKmEM4bPPmkxIAHYsCgJElI=)
3: 64782D1E607E11ED9CD7EF0FC4F9AE02.roa (hash: eYPDqk6CiCVss4EkZuowgeG638Civi0MVQZq29pSYbk=)
4: A5D75708E07111ED9601E941C4F9AE02.roa (hash: g0/tJc0JW/CRmQeJicEs0HkSx3ITHzBqjIOAcBLM6FE=)
5: 6873616CCAE811ECBB89015FC4F9AE02.roa (hash: naDu5Ja+nUZ+iaPxJzaO5xNctRuZdG06y3HniPa528I=)
6: 44B11A52CAEE11ECBC0B2B7EC4F9AE02.roa (hash: 1ib5ZHiX2c+Ay9rYC1Z/Jru6mlw71yvanvthh2v+7bo=)
7: F5B3F2F02FE111F183FB5F929E833773.roa (hash: adpxHreCn3jxtJ88fU3gS6rSVCPiga5e2uj5/vlUSuY=)
8: B5BFAB442FE111F19DB441919E833773.roa (hash: P12NrwuEVi8wdx/kCABaTswenwo867fCicXtnmsvepc=)
9: 609BCC763D9311EE9B7BB945C4F9AE02.roa (hash: Z/QK88M5uL5DdEz3ATOtjxO2eM1sapV5OhRj3AH8iQw=)
10: F255CD0A5EC411ED810B8584C4F9AE02.roa (hash: IFm6rzchuTr/Ghy/abEkmajej4rQuJFBH9uiFcUCM2Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl
rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1290 (0x50a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B4BF, serialNumber=8035090A057327E1200593C20C88C519A45C9ECB
Validity
Not Before: May 13 00:08:54 2026 GMT
Not After : May 20 00:08:54 2026 GMT
Subject: CN=6a03c117-c718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6c:a9:e8:aa:ed:58:8e:62:99:dd:3c:38:42:
d7:20:0a:83:c0:c0:78:16:67:3a:1b:cd:53:39:35:
39:82:35:1b:bb:d1:8a:b3:d2:3e:77:dd:80:77:50:
c0:85:30:0f:ec:cb:e2:3d:61:10:9e:39:21:ed:74:
24:8b:6a:89:5a:03:dc:c0:1b:10:96:fe:e8:1f:17:
74:8c:5b:7a:27:8c:23:23:8c:0d:d8:6b:85:ae:c3:
bb:14:37:0b:4a:de:db:6c:cc:f6:c6:68:0a:e3:c0:
4a:00:56:19:30:ff:6b:11:84:56:44:a7:23:af:ef:
75:78:48:51:1b:13:a4:33:11:a5:fb:74:51:61:4a:
a4:1b:6d:f9:9c:f1:3e:df:73:41:5e:f8:2a:ea:24:
ce:67:ca:a6:8a:4e:ed:40:b6:87:43:c6:87:d2:58:
9f:54:c2:53:66:3d:e0:b6:b5:26:84:3c:ce:51:0d:
22:cd:c9:c5:67:70:cc:76:b1:82:07:ed:e0:a2:5c:
7a:c4:ef:0f:95:40:bb:c6:a9:e8:c1:49:60:13:04:
df:8e:13:15:1d:d9:66:78:fb:e9:14:15:44:9a:d6:
9a:51:92:fd:8b:e6:74:9f:7a:73:db:72:e0:07:22:
d8:0f:72:60:e6:9c:04:ed:c2:a9:32:86:5c:25:8d:
40:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:8C:40:90:BD:65:9D:9C:83:33:72:FC:35:4B:83:A7:8B:A8:A8:9F
X509v3 Authority Key Identifier:
keyid:80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:8f:fe:5b:bb:48:ce:9d:e9:c7:37:f0:cb:26:45:bd:29:47:
d9:92:28:44:f3:ac:a2:66:f5:3c:62:4b:7f:4b:d8:ee:55:8e:
23:f2:35:cd:25:d3:5b:44:af:8d:8c:30:c9:ed:f3:b1:38:82:
56:6c:4b:ff:d3:f7:51:63:9f:ed:95:c6:d7:20:05:b8:4b:00:
41:ab:f1:e5:8e:7c:e1:b9:65:36:7c:e2:53:61:3f:22:78:77:
f0:5b:60:8c:07:33:d7:ad:09:84:7b:0f:57:19:b3:56:16:2e:
d5:6b:3f:59:48:87:c3:a8:55:01:d4:aa:9e:0a:58:d5:b5:fc:
d9:58:ea:99:a1:7b:98:70:d4:f7:79:14:07:d4:a2:66:c5:14:
af:1f:da:39:0c:f6:f3:e2:be:6e:d5:a1:7a:56:ea:ef:01:94:
82:ff:ea:a0:70:10:8e:53:6e:14:da:20:b7:73:a8:73:bb:ac:
b1:82:02:3a:10:39:d2:11:b7:8d:ad:50:e0:2f:47:69:83:63:
1e:a2:d1:ef:db:a2:da:f2:76:aa:f3:ad:bf:7e:3c:ec:f4:87:
56:51:3d:6d:da:6f:74:1f:78:46:db:a7:f8:cc:ff:fb:56:82:
d2:74:f4:1c:ca:d5:4a:b4:c4:43:83:53:31:98:c2:67:8f:56:
82:66:b1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:02:05 2026 by rpki-client