
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft
File: ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft (raw, json)
Hash identifier: FDEjzP18/yezp5uOZRGQF9b/WowJoDORNAwzp2llxTE=
Subject key identifier: F3:B7:CF:CB:D1:07:62:82:7B:9C:7C:1D:90:43:0C:C7:03:F1:F3:BF
Authority key identifier: 82:05:E9:79:6E:C6:9A:0C:73:DC:3B:5B:3C:E1:2C:48:19:2B:45:77
Certificate issuer: /CN=A919D222/serialNumber=8205E9796EC69A0C73DC3B5B3CE12C48192B4577
Certificate serial: 0131
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft
Manifest number: 0121
Signing time: Thu 23 Jul 2026 07:26:35 +0000
Manifest this update: Thu 23 Jul 2026 07:26:35 +0000
Manifest next update: Thu 30 Jul 2026 07:26:35 +0000
Files and hashes: 1: ggXpeW7Gmgxz3DtbPOEsSBkrRXc.crl (hash: 7GUbaCphbhkNwS5bSu7YCfQpP4MgE2nqaZ0/mcTjjoY=)
2: 1852A5B0CD8011EF8728D139C4F9AE02.roa (hash: GcZaKKkUm4eJadng809d875dfAtSrkk2RvfSOSlgS2k=)
3: 18B90242CD8011EF8728D139C4F9AE02.roa (hash: VPm4SknJQLz4jStnPVeOHdN+rR2StpfDf8Lhwbu1ITk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.crl
rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:26:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 305 (0x131)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D222, serialNumber=8205E9796EC69A0C73DC3B5B3CE12C48192B4577
Validity
Not Before: Jul 23 07:26:35 2026 GMT
Not After : Jul 30 07:26:35 2026 GMT
Subject: CN=6a61c22b-75e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:49:c5:0e:0a:d5:57:bb:d7:c9:80:b0:1f:f1:
f6:03:ed:af:21:74:e9:a4:de:21:f4:89:26:f4:f7:
44:f3:2c:e5:e3:47:0a:ed:51:dc:47:86:5d:d9:3c:
bb:34:a3:77:34:c9:f8:d3:db:e8:e3:ec:e0:17:75:
5c:ce:a3:c9:11:5b:56:6d:2f:6b:12:93:60:a3:2b:
69:31:df:15:74:82:04:0d:da:6c:96:fe:c1:e8:10:
31:10:18:83:c9:81:9e:94:4c:d5:a4:33:6d:1c:4a:
31:02:8b:12:be:db:49:b8:be:ed:6e:ef:69:c8:11:
e6:9b:9b:44:d4:4a:6e:45:7c:a9:a5:17:e7:92:5f:
44:fd:fe:67:2b:d6:4e:b2:3d:58:38:70:ab:25:89:
a5:4a:f9:8f:8e:aa:1c:b5:ec:0a:8b:25:05:fb:c9:
5a:84:be:bf:86:db:8e:4f:44:37:47:81:f0:d8:05:
b8:b1:85:ba:02:a7:9f:66:d0:ec:3c:33:0b:fc:95:
ca:df:7e:92:99:5e:bd:f2:ae:c2:33:c3:c1:2e:02:
69:37:ba:f3:7d:95:86:f0:32:e3:47:c2:7a:7a:24:
c4:56:de:43:39:73:8c:56:01:ce:84:84:f7:9a:8a:
be:30:82:d3:90:a2:fe:c3:7e:69:d1:c0:ff:eb:9c:
f8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B7:CF:CB:D1:07:62:82:7B:9C:7C:1D:90:43:0C:C7:03:F1:F3:BF
X509v3 Authority Key Identifier:
keyid:82:05:E9:79:6E:C6:9A:0C:73:DC:3B:5B:3C:E1:2C:48:19:2B:45:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:5f:84:ba:e3:95:ad:bf:8d:59:e1:ad:21:c4:4c:c4:78:d8:
e9:47:4a:2f:58:d8:99:a6:d3:75:37:8a:bb:79:38:38:99:c8:
bf:18:78:52:16:f7:3d:88:3c:b4:c2:96:e8:fb:59:99:63:90:
f4:6d:f1:c6:b6:69:29:dc:cb:90:94:f1:f5:f2:de:bc:5a:da:
0f:19:85:76:be:5c:8d:91:aa:70:d7:1d:de:3f:69:68:27:8a:
f7:6f:0d:9c:e0:e4:89:43:f2:d8:f0:b1:4a:6e:a6:a9:f1:17:
d0:6e:dc:83:dc:e2:93:4a:fa:74:44:70:14:9b:99:22:39:a5:
af:7c:84:d7:9c:cb:92:a0:69:29:5b:f3:f2:f2:44:94:50:1a:
81:b4:00:b5:57:1a:43:24:ef:34:d3:b9:da:86:9d:36:34:55:
4b:da:6b:80:1d:30:a4:92:35:43:5d:31:73:6f:73:23:39:ac:
67:85:ed:2a:33:41:55:54:16:57:1a:49:a4:b9:c5:96:33:a9:
67:ca:e2:38:16:15:fe:91:35:13:a3:b4:ae:40:4d:0a:ac:f8:
e3:ea:46:07:b3:ed:b4:d5:0f:5e:04:64:3b:96:0b:d9:3e:54:
61:4b:2e:8a:be:77:c6:44:9c:02:50:21:7c:7c:eb:f8:5e:06:
8b:b7:d5:3b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUQyMjIxMTAvBgNVBAUTKDgyMDVFOTc5NkVDNjlBMEM3M0RDM0I1QjNDRTEyQzQ4
MTkyQjQ1NzcwHhcNMjYwNzIzMDcyNjM1WhcNMjYwNzMwMDcyNjM1WjAYMRYwFAYD
VQQDEw02YTYxYzIyYi03NWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2EnFDgrVV7vXyYCwH/H2A+2vIXTppN4h9Ikm9PdE8yzl40cK7VHcR4Zd2Ty7
NKN3NMn409vo4+zgF3VczqPJEVtWbS9rEpNgoytpMd8VdIIEDdpslv7B6BAxEBiD
yYGelEzVpDNtHEoxAosSvttJuL7tbu9pyBHmm5tE1EpuRXyppRfnkl9E/f5nK9ZO
sj1YOHCrJYmlSvmPjqoctewKiyUF+8lahL6/htuOT0Q3R4Hw2AW4sYW6AqefZtDs
PDML/JXK336SmV698q7CM8PBLgJpN7rzfZWG8DLjR8J6eiTEVt5DOXOMVgHOhIT3
moq+MILTkKL+w35p0cD/65z4UwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPO3z8vR
B2KCe5x8HZBDDMcD8fO/MB8GA1UdIwQYMBaAFIIF6XluxpoMc9w7WzzhLEgZK0V3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDIyMi84NzY0NDg5Q0NE
N0YxMUVGQTU4NDg4MzhDNEY5QUUwMi9nZ1hwZVc3R21neHozRHRiUE9Fc1NCa3JS
WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dnWHBlVzdHbWd4ejNEdGJQT0VzU0JrclJYYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RDIyMi84NzY0NDg5Q0NEN0YxMUVGQTU4NDg4MzhDNEY5QUUwMi9nZ1hwZVc3R21n
eHozRHRiUE9Fc1NCa3JSWGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAe1+EuuOVrb+NWeGtIcRMxHjY6UdKL1jYmabTdTeKu3k4OJnIvxh4Uhb3PYg8
tMKW6PtZmWOQ9G3xxrZpKdzLkJTx9fLevFraDxmFdr5cjZGqcNcd3j9paCeK928N
nODkiUPy2PCxSm6mqfEX0G7cg9zik0r6dERwFJuZIjmlr3yE15zLkqBpKVvz8vJE
lFAagbQAtVcaQyTvNNO52oadNjRVS9prgB0wpJI1Q10xc29zIzmsZ4XtKjNBVVQW
VxpJpLnFljOpZ8riOBYV/pE1E6O0rkBNCqz44+pGB7PttNUPXgRkO5YL2T5UYUsu
ir53xkScAlAhfHzr+F4Gi7fVOw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:27:32 2026 by rpki-client