
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft
File: Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft (raw, json)
Hash identifier: iSDSNAeDWBGnwi4L66gHp1UAf5irlL5e8MmnQD09WYs=
Subject key identifier: 40:90:69:5F:98:D2:EB:C7:95:18:F6:0F:39:57:E7:FA:D5:B6:46:5A
Authority key identifier: 1A:0F:78:6F:11:B8:E1:7D:45:DE:1E:DC:E6:1E:16:00:DD:49:30:A4
Certificate issuer: /CN=A917E951/serialNumber=1A0F786F11B8E17D45DE1EDCE61E1600DD4930A4
Certificate serial: 024B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft
Manifest number: 0243
Signing time: Wed 13 May 2026 02:33:06 +0000
Manifest this update: Wed 13 May 2026 02:33:05 +0000
Manifest next update: Wed 20 May 2026 02:33:05 +0000
Files and hashes: 1: Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl (hash: pszbEu2TK7sTYisKW/TzZr+XjbcEMhr4ebZ2HT7Y5y0=)
2: 952F87FAEBDA11F082D0705C6C6F56BC.roa (hash: CsD2M4xYWmD+4KZHvogCG8jsC1NzwYJkcqvvaiFYMlM=)
3: 59ADC606EBDA11F0868F86546C6F56BC.roa (hash: 9lrxfUBWBmg3EvWvMM3CqOq7J9rwqvVHXsxONFDg0xI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl
rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:33:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 587 (0x24b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E951, serialNumber=1A0F786F11B8E17D45DE1EDCE61E1600DD4930A4
Validity
Not Before: May 13 02:33:05 2026 GMT
Not After : May 20 02:33:05 2026 GMT
Subject: CN=6a03e2e2-263c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dd:3c:34:b5:42:55:cd:da:c5:fc:55:40:64:
af:da:2e:73:9d:29:3d:f9:89:97:aa:e3:92:28:9c:
04:b3:da:a1:c4:b4:19:1e:26:22:42:ed:91:b8:93:
63:bc:f3:5e:74:85:2b:9d:24:fd:38:6a:82:98:f2:
87:b7:b6:8b:58:1d:05:db:44:fe:cf:59:c9:3a:c9:
f7:17:9b:6e:a6:69:98:dc:d4:f6:c6:f6:b9:42:64:
ad:af:bb:dc:2c:43:31:d2:74:94:aa:b1:db:7e:f9:
21:29:34:2d:67:be:f3:f8:58:3a:d8:4e:e3:5f:8f:
2e:a1:d1:20:9e:15:26:b3:af:1d:b0:4e:6e:80:a1:
d8:66:2b:a7:5c:9a:2a:c0:4f:63:34:ed:7b:3f:9a:
fb:3d:4a:d6:19:ac:3b:8f:ce:4b:8c:c4:42:b1:dd:
39:d7:78:17:e2:1f:8a:67:5c:79:f8:a3:3c:96:8e:
dc:7f:e4:c3:f1:a9:8f:a5:23:e2:81:95:96:c7:ef:
80:8a:39:6c:1e:24:fb:e9:d3:07:80:42:1a:8e:da:
98:97:91:e3:32:8e:f1:bb:19:71:70:fd:b5:d5:93:
bc:5f:78:0a:ca:45:b2:f7:ad:88:52:c4:86:47:bf:
70:d9:ae:84:60:67:d3:1d:02:90:56:b4:cb:e2:75:
46:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:90:69:5F:98:D2:EB:C7:95:18:F6:0F:39:57:E7:FA:D5:B6:46:5A
X509v3 Authority Key Identifier:
keyid:1A:0F:78:6F:11:B8:E1:7D:45:DE:1E:DC:E6:1E:16:00:DD:49:30:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:47:9d:66:a6:11:48:d2:f8:74:14:2c:f7:aa:22:25:5f:bf:
df:4d:0c:82:2c:9e:9e:b4:af:ef:01:f4:d5:4a:43:f1:14:95:
ce:0d:3e:1a:7f:6f:44:c7:fc:52:c1:c4:ed:dc:e2:fe:eb:6e:
37:58:7b:ff:4e:d4:9d:9d:80:4c:dd:61:4b:94:7d:0e:d1:42:
81:b5:d6:ff:3b:49:80:56:8e:ce:8f:e6:e9:ac:92:b2:ad:45:
75:7a:20:ff:6c:1d:74:2f:24:35:7b:5e:97:59:80:ad:73:ce:
54:34:64:98:ee:ef:7e:e3:38:6d:4f:9b:bd:54:00:ab:98:15:
32:60:e9:36:43:b4:e4:69:44:cc:34:a5:17:0d:10:e2:b6:5d:
22:b9:a9:49:05:a7:48:62:fd:90:7a:79:04:17:52:32:78:0c:
ab:5e:8b:6e:e1:ef:6c:fc:99:65:32:06:83:62:74:5e:a4:ff:
45:6d:e1:b4:85:b6:41:00:9c:9d:67:bc:35:fa:18:25:a2:e4:
54:30:b6:74:b1:26:b8:b5:93:fa:29:50:2e:81:81:ad:25:4f:
9d:bb:e4:ac:07:9e:42:7c:43:01:b6:f5:6b:22:30:36:20:97:
be:54:3b:5b:f0:04:b2:24:1e:64:07:1d:6d:38:3d:5c:81:bf:
07:57:89:7f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0U5NTExMTAvBgNVBAUTKDFBMEY3ODZGMTFCOEUxN0Q0NURFMUVEQ0U2MUUxNjAw
REQ0OTMwQTQwHhcNMjYwNTEzMDIzMzA1WhcNMjYwNTIwMDIzMzA1WjAYMRYwFAYD
VQQDEw02YTAzZTJlMi0yNjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvd08NLVCVc3axfxVQGSv2i5znSk9+YmXquOSKJwEs9qhxLQZHiYiQu2RuJNj
vPNedIUrnST9OGqCmPKHt7aLWB0F20T+z1nJOsn3F5tupmmY3NT2xva5QmStr7vc
LEMx0nSUqrHbfvkhKTQtZ77z+Fg62E7jX48uodEgnhUms68dsE5ugKHYZiunXJoq
wE9jNO17P5r7PUrWGaw7j85LjMRCsd0513gX4h+KZ1x5+KM8lo7cf+TD8amPpSPi
gZWWx++AijlsHiT76dMHgEIajtqYl5HjMo7xuxlxcP211ZO8X3gKykWy962IUsSG
R79w2a6EYGfTHQKQVrTL4nVG9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFECQaV+Y
0uvHlRj2DzlX5/rVtkZaMB8GA1UdIwQYMBaAFBoPeG8RuOF9Rd4e3OYeFgDdSTCk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTk1MS82RjQ5Qjk5MkRC
NzExMUVEOTUwM0Q4NURDNEY5QUUwMi9HZzk0YnhHNDRYMUYzaDdjNWg0V0FOMUpN
S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dnOTRieEc0NFgxRjNoN2M1aDRXQU4xSk1LUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RTk1MS82RjQ5Qjk5MkRCNzExMUVEOTUwM0Q4NURDNEY5QUUwMi9HZzk0YnhHNDRY
MUYzaDdjNWg0V0FOMUpNS1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOEedZqYRSNL4dBQs96oiJV+/300MgiyenrSv7wH01UpD8RSVzg0+Gn9vRMf8
UsHE7dzi/utuN1h7/07UnZ2ATN1hS5R9DtFCgbXW/ztJgFaOzo/m6aySsq1FdXog
/2wddC8kNXtel1mArXPOVDRkmO7vfuM4bU+bvVQAq5gVMmDpNkO05GlEzDSlFw0Q
4rZdIrmpSQWnSGL9kHp5BBdSMngMq16LbuHvbPyZZTIGg2J0XqT/RW3htIW2QQCc
nWe8NfoYJaLkVDC2dLEmuLWT+ilQLoGBrSVPnbvkrAeeQnxDAbb1ayIwNiCXvlQ7
W/AEsiQeZAcdbTg9XIG/B1eJfw==
-----END CERTIFICATE-----
Generated at Wed May 13 07:26:13 2026 by rpki-client