
$ rpki-client -vvf rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft
File: gaZX6qx1VMq3oaKI9bP-7dilzEs.mft (raw, json)
Hash identifier: 7CiGdLthjaT43vB+OSnKbL9DJ6llMt+fPuQOueH+quU=
Subject key identifier: 5A:03:E6:9E:03:82:FA:C4:99:4E:F2:14:3D:5B:C1:59:E0:68:06:82
Authority key identifier: 81:A6:57:EA:AC:75:54:CA:B7:A1:A2:88:F5:B3:FE:ED:D8:A5:CC:4B
Certificate issuer: /CN=A917DFDA/serialNumber=81A657EAAC7554CAB7A1A288F5B3FEEDD8A5CC4B
Certificate serial: D1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft
Manifest number: CC
Signing time: Thu 23 Jul 2026 05:48:29 +0000
Manifest this update: Thu 23 Jul 2026 05:48:28 +0000
Manifest next update: Thu 30 Jul 2026 05:48:28 +0000
Files and hashes: 1: gaZX6qx1VMq3oaKI9bP-7dilzEs.crl (hash: ki2ubHIlxlOFwZ8e2wI1Odw8H2AlTKxFJp/2mkp2eAs=)
2: A78653B2561F11F09624D128C4F9AE02.roa (hash: tZlTWUfKWexoieRyMVExBKlmUH5v/oDQJXIDDrcReSc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.crl
rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:48:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 209 (0xd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917DFDA, serialNumber=81A657EAAC7554CAB7A1A288F5B3FEEDD8A5CC4B
Validity
Not Before: Jul 23 05:48:28 2026 GMT
Not After : Jul 30 05:48:28 2026 GMT
Subject: CN=6a61ab2d-d12e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8e:e8:fa:fe:45:da:42:e0:04:ef:ba:33:a5:
59:c6:71:fb:8b:a9:ba:12:7e:9c:ff:0b:44:3a:ae:
50:3a:8d:d5:76:2b:e2:b2:c8:e7:57:45:a7:84:3e:
3f:bc:c7:a0:35:f8:ba:c6:77:56:9a:71:49:79:68:
6d:97:4d:49:21:1f:8c:f9:67:79:f1:51:43:29:62:
2f:60:a6:ab:5c:67:1c:f8:da:b1:e7:10:87:5c:f0:
05:79:5f:c1:65:c6:33:5c:b9:e1:ea:46:3b:1d:d4:
bb:e0:95:30:a0:fd:a0:a1:42:b3:e4:a2:73:7c:cd:
35:f0:60:15:bc:74:9c:f4:a5:e1:89:77:f8:b6:61:
ab:ee:33:d4:9e:43:ae:cf:d5:2f:08:7b:7f:ba:df:
25:17:b1:22:0e:6c:53:cb:ae:70:9d:7c:48:c8:b7:
4c:e8:88:e9:0a:f5:fc:bb:7e:47:9e:de:22:ef:0f:
08:17:0f:e0:1e:a9:05:37:1f:86:8a:e6:5a:07:6f:
7a:43:66:f9:cc:90:fb:39:0c:ef:9a:46:87:f5:68:
48:f5:16:1c:a1:0e:ee:33:61:50:72:1c:65:b0:13:
6b:59:31:14:86:f1:f9:1c:03:b3:36:89:10:5d:42:
ae:ca:11:c9:f0:78:d9:9e:39:21:bb:3c:21:f0:51:
a2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:03:E6:9E:03:82:FA:C4:99:4E:F2:14:3D:5B:C1:59:E0:68:06:82
X509v3 Authority Key Identifier:
keyid:81:A6:57:EA:AC:75:54:CA:B7:A1:A2:88:F5:B3:FE:ED:D8:A5:CC:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:9f:35:b7:39:25:3e:22:4d:b0:87:5a:fe:fa:6f:ec:24:da:
24:e7:3b:84:0c:08:c9:64:b1:95:52:04:3f:e3:5b:ac:25:9b:
34:30:c5:8e:9f:4d:69:a6:61:06:2f:8d:a5:af:1c:b6:f1:84:
8b:2a:ae:ee:de:87:7f:a4:12:bd:a6:ea:db:04:75:89:9e:55:
e8:5a:a1:f6:42:c9:3e:c5:cf:5a:cd:13:59:80:9c:2b:6f:c4:
a1:de:96:2b:8d:8b:0b:17:a9:c3:52:a5:1b:35:67:fb:16:ba:
d4:a9:ca:0b:8d:7c:4e:52:da:24:ae:1e:1c:2d:67:44:f3:cc:
2c:a1:48:2d:77:06:83:34:89:42:0a:a5:71:91:13:96:b8:18:
ea:e5:a9:0e:6b:82:60:5b:f9:38:3d:36:e8:a3:c8:c0:94:35:
c4:e7:9d:7c:5d:44:f8:90:d7:57:4e:1a:5a:c9:dd:a5:52:17:
fc:03:f6:67:0f:e9:e3:9b:ee:85:04:a7:64:83:3c:03:4f:75:
97:f8:ea:53:66:a4:85:97:3a:e0:9a:b3:16:09:e9:1f:b8:ee:
e6:ff:81:86:ed:37:a6:e1:af:18:9d:67:14:29:b1:a1:9e:d5:
ae:cb:97:57:9c:e8:20:ad:81:44:b0:10:98:dc:3e:f7:42:27:
0d:13:75:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:17:07 2026 by rpki-client