
$ rpki-client -vvf rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.mft
File: GEQqEWwwEBvsjIn0UBl4wJIDa7g.mft (raw, json)
Hash identifier: 6mfVwlXWQsUZI3e0irFs0qHgdrz59sgnWZyxucdVw9Q=
Subject key identifier: 74:AE:88:D0:D4:CD:42:31:54:7D:5C:4F:21:45:21:8A:2A:CE:17:47
Authority key identifier: 18:44:2A:11:6C:30:10:1B:EC:8C:89:F4:50:19:78:C0:92:03:6B:B8
Certificate issuer: /CN=A917EA7F/serialNumber=18442A116C30101BEC8C89F4501978C092036BB8
Certificate serial: 0852
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GEQqEWwwEBvsjIn0UBl4wJIDa7g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.mft
Manifest number: 0844
Signing time: Tue 12 May 2026 20:57:02 +0000
Manifest this update: Tue 12 May 2026 20:57:02 +0000
Manifest next update: Tue 19 May 2026 20:57:02 +0000
Files and hashes: 1: GEQqEWwwEBvsjIn0UBl4wJIDa7g.crl (hash: GHb+W1pbtWU/+t+r5Yr0vBfIyxHKLX6Jlg2coBvga9w=)
2: 18E7B6C80B5B11EB80C8B15FC4F9AE02.roa (hash: 6HBwnAdSSFtnjaGJ508w7iBxRC6Y0SWJe0qRKEHH2Og=)
3: 1994E0780B5B11EB80C8B15FC4F9AE02.roa (hash: FnoWXzNWJjjpdfPVYZMnHGoZQsfGs0O6OuWkpNH6Ba4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.crl
rsync://rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GEQqEWwwEBvsjIn0UBl4wJIDa7g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:57:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2130 (0x852)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917EA7F, serialNumber=18442A116C30101BEC8C89F4501978C092036BB8
Validity
Not Before: May 12 20:57:02 2026 GMT
Not After : May 19 20:57:02 2026 GMT
Subject: CN=6a03941e-6131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:35:2b:6d:08:4d:7e:50:1d:b6:75:5d:e3:32:
73:11:7a:b8:27:9a:e3:86:4d:41:cb:6b:de:1d:3d:
99:94:de:0a:9f:70:f2:6c:e6:34:b3:d5:d2:7d:09:
1c:86:22:11:ea:6c:66:5b:23:15:26:72:48:49:b6:
77:c0:c9:2b:16:c1:c9:ae:62:ce:41:42:5e:59:b4:
90:66:41:3a:7a:97:cd:d3:e9:02:ff:23:4e:fb:7f:
9e:b9:45:3e:d4:c5:70:f1:46:24:b0:27:8e:90:bd:
99:ba:9d:e9:89:92:46:e2:9f:80:87:f8:fa:41:a3:
05:ee:e1:6b:11:8f:6c:33:32:65:2e:9a:65:83:37:
22:c9:85:7b:26:cc:bf:9e:19:9c:d2:f7:90:22:7e:
4d:28:28:a9:04:b4:96:02:1f:10:42:80:89:71:22:
41:da:c7:55:ec:33:e4:93:6b:93:85:40:4f:a7:10:
c7:88:30:57:bb:26:4d:2c:28:1e:dc:8e:5f:11:c7:
10:4c:88:8b:6c:3e:9b:62:a1:34:45:22:a1:3a:34:
17:42:70:a4:81:ac:01:fe:db:d6:b6:74:36:0c:db:
71:3a:6d:a2:f8:67:a3:50:39:61:5a:dc:66:1e:17:
45:df:9f:5b:da:c6:4e:64:a7:ff:c5:e8:e7:6a:4e:
4e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:AE:88:D0:D4:CD:42:31:54:7D:5C:4F:21:45:21:8A:2A:CE:17:47
X509v3 Authority Key Identifier:
keyid:18:44:2A:11:6C:30:10:1B:EC:8C:89:F4:50:19:78:C0:92:03:6B:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GEQqEWwwEBvsjIn0UBl4wJIDa7g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:31:90:8e:ab:5f:7f:5b:08:98:63:a2:8f:f5:13:ce:75:2c:
4d:8f:65:d8:7c:7b:2d:53:c4:2d:e4:f0:17:35:d6:72:93:49:
88:e6:8c:12:c6:ea:20:88:64:cb:85:16:ce:4d:7a:7c:75:a8:
9b:21:d3:b0:8e:7a:06:b2:a3:b0:40:6d:3a:2b:2c:2a:c9:53:
c5:6f:29:97:6e:5b:7c:8d:9f:5a:1d:ea:ce:b8:00:69:e8:af:
0b:a3:fa:e2:78:af:3a:75:26:c0:be:99:fc:26:63:e4:5d:e5:
e5:a0:41:7c:7a:d6:57:4a:da:88:6d:f6:52:70:00:38:06:ea:
d3:3d:38:9c:20:bd:c2:2d:e7:71:6f:b0:9b:48:11:91:d9:2e:
3c:09:4d:bf:ac:0b:b9:5f:5d:9e:1f:9f:27:6d:81:97:e8:4b:
63:fd:55:5e:92:d2:eb:7f:d1:17:dc:75:0f:19:46:31:6e:1d:
fe:b9:0c:c4:67:96:61:27:43:a6:ef:24:64:6e:6e:bb:cd:ea:
d8:6b:d6:87:13:83:52:e3:d6:21:2c:39:e2:3c:e3:f6:7f:ce:
87:23:c3:c2:a3:6e:f2:2a:64:fc:e9:06:1f:ac:6a:fb:b6:c5:
3c:4e:f7:a9:03:cb:b0:1a:56:c4:1d:59:63:64:18:f9:26:42:
59:43:06:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:03:40 2026 by rpki-client