
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
File: gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft (raw, json)
Hash identifier: SCCx9cExI+6TomHKCZtfjY7I+SBb4ZcSGzJW9E7jxtc=
Subject key identifier: 34:91:BE:0D:A3:5E:83:10:26:6D:BA:26:D0:82:CF:69:33:37:72:A1
Authority key identifier: 80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB
Certificate issuer: /CN=A917B4BF/serialNumber=8035090A057327E1200593C20C88C519A45C9ECB
Certificate serial: 0569
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
Manifest number: 0512
Signing time: Sat 14 Nov 2026 23:31:01 +0000
Manifest this update: Sat 14 Nov 2026 23:31:01 +0000
Manifest next update: Sat 21 Nov 2026 23:31:01 +0000
Files and hashes: 1: gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl (hash: ctJ1p789U2/sJFJkdydU9NscyNkEG6dqTX9A5CMatCw=)
2: 6873616CCAE811ECBB89015FC4F9AE02.roa (hash: naDu5Ja+nUZ+iaPxJzaO5xNctRuZdG06y3HniPa528I=)
3: B5BFAB442FE111F19DB441919E833773.roa (hash: P12NrwuEVi8wdx/kCABaTswenwo867fCicXtnmsvepc=)
4: A5D75708E07111ED9601E941C4F9AE02.roa (hash: g0/tJc0JW/CRmQeJicEs0HkSx3ITHzBqjIOAcBLM6FE=)
5: F5B3F2F02FE111F183FB5F929E833773.roa (hash: adpxHreCn3jxtJ88fU3gS6rSVCPiga5e2uj5/vlUSuY=)
6: 8F9CB4448F3511ECB2182782C4F9AE02.roa (hash: PEgw27of0MFqunEKz93iWKmEM4bPPmkxIAHYsCgJElI=)
7: 44B11A52CAEE11ECBC0B2B7EC4F9AE02.roa (hash: 1ib5ZHiX2c+Ay9rYC1Z/Jru6mlw71yvanvthh2v+7bo=)
8: 64782D1E607E11ED9CD7EF0FC4F9AE02.roa (hash: eYPDqk6CiCVss4EkZuowgeG638Civi0MVQZq29pSYbk=)
9: 609BCC763D9311EE9B7BB945C4F9AE02.roa (hash: Z/QK88M5uL5DdEz3ATOtjxO2eM1sapV5OhRj3AH8iQw=)
10: F255CD0A5EC411ED810B8584C4F9AE02.roa (hash: IFm6rzchuTr/Ghy/abEkmajej4rQuJFBH9uiFcUCM2Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl
rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 23:31:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1385 (0x569)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B4BF, serialNumber=8035090A057327E1200593C20C88C519A45C9ECB
Validity
Not Before: Nov 14 23:31:01 2026 GMT
Not After : Nov 21 23:31:01 2026 GMT
Subject: CN=6af8ef35-618d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f0:a5:a2:9a:da:87:06:bd:11:bd:21:3b:68:
63:35:03:e6:73:49:23:00:54:ab:65:a4:44:63:fa:
21:65:ab:16:2e:af:bf:c7:4a:20:ca:d0:5b:9a:77:
72:b0:83:21:4d:83:c4:38:e3:61:37:03:1e:36:61:
05:64:27:54:ba:bf:d7:60:02:e0:e8:91:92:5b:75:
73:3c:3e:1e:61:d7:a5:d0:0e:e0:23:5f:a0:df:f4:
ac:a6:ab:42:c6:b1:d2:55:aa:65:72:ac:65:3c:65:
3c:f4:f7:fc:f3:21:43:18:b1:c0:6f:d3:32:dd:32:
03:e1:72:fb:1a:f3:ea:27:63:5e:85:97:79:38:5e:
0e:0b:a2:fd:46:0d:65:15:a0:a8:e6:49:cb:41:b0:
50:0f:af:19:80:1c:84:c3:d8:9e:5d:21:68:eb:0d:
94:c2:79:ff:b9:68:e1:a0:a9:38:5f:b4:f3:a9:9d:
3e:61:ca:71:a7:e6:49:ef:cd:68:86:16:73:9b:28:
0b:09:18:8d:5b:ec:ff:2b:a2:ca:77:c4:e6:8c:ea:
02:10:60:d6:95:3d:17:fd:06:61:58:aa:75:57:2a:
c1:f3:53:e3:34:27:ef:3b:38:0f:1e:36:74:5e:ce:
9b:c3:d0:d7:3e:cf:a7:bf:fe:e3:c8:45:cb:36:03:
cd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:91:BE:0D:A3:5E:83:10:26:6D:BA:26:D0:82:CF:69:33:37:72:A1
X509v3 Authority Key Identifier:
keyid:80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:ed:5a:a9:8a:12:be:4d:4e:ba:c5:62:c0:4b:f7:04:cd:6c:
2d:f1:cf:e3:9a:4b:9f:66:27:18:04:e7:50:31:38:70:9a:d5:
68:f4:1b:1e:d0:fa:25:f1:f0:2e:5e:ea:85:40:af:f1:1b:d4:
54:9a:ef:54:89:34:f5:66:03:d9:b2:6b:1c:2f:24:ae:30:73:
4b:40:e7:ab:85:d8:6c:b6:dc:dc:83:e3:86:b3:d3:ec:07:67:
d7:a1:b2:3e:ff:58:89:78:7c:c9:c2:2a:d9:a6:27:c0:c6:dc:
f6:56:73:8b:c9:6e:48:39:f8:8f:a8:da:34:9a:a8:90:10:b6:
c5:8c:45:b0:26:d8:41:d0:30:b4:e5:83:53:fd:9f:bb:d8:ee:
1b:8e:fd:d8:74:62:c7:45:3a:7d:9e:5c:ea:96:d1:7c:05:95:
99:82:f7:a0:d2:55:e5:77:4e:4d:31:b6:1e:16:9b:57:ff:10:
a6:1b:b3:53:9a:32:7a:5c:dd:ca:26:5d:dc:8d:b8:e6:45:3d:
cb:fe:91:a8:fb:36:3b:4d:07:b3:54:29:09:96:f9:de:50:19:
cf:95:25:9e:55:3e:1a:7d:6e:74:8c:21:2e:28:5c:03:28:f6:
52:2f:53:88:18:03:45:ad:bb:4e:4f:81:5d:97:dd:d9:2b:75:
a0:70:1a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:35:24 2026 by rpki-client