
$ rpki-client -vvf rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.mft
File: ggCxpefBdgW1czx0_sHvEnOz6iU.mft (raw, json)
Hash identifier: c9afAMQ18rSsgTwR/zvo9pMlJRKuVgJkLXCQfzY6eEk=
Subject key identifier: 3A:6B:E6:74:9D:6D:2F:16:A0:6E:0B:7F:29:83:F3:F3:8A:89:B4:03
Authority key identifier: 82:00:B1:A5:E7:C1:76:05:B5:73:3C:74:FE:C1:EF:12:73:B3:EA:25
Certificate issuer: /CN=A911AD0C/serialNumber=8200B1A5E7C17605B5733C74FEC1EF1273B3EA25
Certificate serial: 355C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggCxpefBdgW1czx0_sHvEnOz6iU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.mft
Manifest number: 355C
Signing time: Tue 28 Jul 2026 15:22:05 +0000
Manifest this update: Tue 28 Jul 2026 15:22:04 +0000
Manifest next update: Tue 04 Aug 2026 15:22:04 +0000
Files and hashes: 1: ggCxpefBdgW1czx0_sHvEnOz6iU.crl (hash: Y0fxue7nViiQE6CYuwSIfWNFHe/5KE0M7A2EBGvWsTM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.crl
rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggCxpefBdgW1czx0_sHvEnOz6iU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:22:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13660 (0x355c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AD0C, serialNumber=8200B1A5E7C17605B5733C74FEC1EF1273B3EA25
Validity
Not Before: Jul 28 15:22:04 2026 GMT
Not After : Aug 4 15:22:04 2026 GMT
Subject: CN=6a68c91d-bd48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cc:4e:eb:a4:4e:f1:d5:68:c9:07:86:10:9f:
81:5e:7c:d6:7f:ca:d0:08:1b:6d:4c:89:49:b4:cf:
36:18:af:45:23:54:a1:fc:81:04:1e:8c:22:f2:6b:
0c:82:2b:08:fe:a6:68:5d:5a:64:6d:d5:f4:1b:93:
e1:8d:2f:51:f5:26:ff:43:1f:48:9f:d8:1b:36:3f:
b7:92:9f:f7:e9:9e:52:30:bc:cd:cc:26:d0:86:23:
3d:36:4f:9f:2d:72:69:8c:a0:41:34:78:12:d0:09:
5c:7b:58:9e:7d:da:b0:5e:06:77:8f:4a:f9:32:eb:
1d:e6:44:de:16:79:2f:f6:92:0a:e6:e6:37:74:4e:
83:b0:4c:0f:f6:3b:8f:9c:3f:de:f5:41:f8:26:7e:
a4:31:1f:0b:ee:98:54:ef:17:c9:ae:78:18:a3:58:
7d:7e:90:d7:3f:3e:3a:66:ed:6a:8d:f6:f1:08:1a:
0d:a7:dd:f8:d3:55:6b:de:e2:64:06:58:fe:fe:87:
a0:31:a5:a6:b7:7a:c0:7f:c9:9b:43:4c:d7:8c:a8:
0a:02:7a:91:46:d3:da:fa:ac:45:91:c5:9e:5d:86:
df:5c:c7:eb:25:2c:2e:ab:e3:d3:27:75:53:0c:95:
67:74:ad:d1:29:98:84:f2:83:95:0d:f8:9c:19:c1:
33:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6B:E6:74:9D:6D:2F:16:A0:6E:0B:7F:29:83:F3:F3:8A:89:B4:03
X509v3 Authority Key Identifier:
keyid:82:00:B1:A5:E7:C1:76:05:B5:73:3C:74:FE:C1:EF:12:73:B3:EA:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggCxpefBdgW1czx0_sHvEnOz6iU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:62:b8:98:ad:27:e1:ae:cf:52:bc:90:2a:ad:61:a3:01:9d:
cc:3e:46:e3:38:f8:e5:ab:4d:24:53:dc:95:bf:18:8e:51:8f:
94:08:a6:fa:40:b2:06:d4:82:a5:51:93:0f:6d:d0:a3:48:45:
59:22:d3:7d:05:14:ad:36:d1:28:14:69:ab:d6:f7:a1:80:72:
0c:9a:fc:9c:c3:ad:dc:0c:88:bf:2e:f6:93:7b:b1:0d:91:36:
13:0e:24:6d:33:32:45:fb:61:68:43:19:bd:e3:9f:8a:98:52:
77:f0:3d:63:e9:45:c8:65:78:c0:24:89:0e:62:cc:ac:eb:66:
ef:dd:c5:1c:14:fb:19:08:de:02:7f:21:6b:39:9c:91:91:95:
05:46:2c:ac:cb:25:c0:fd:2e:08:21:f4:63:7c:5f:05:1a:05:
79:45:bd:8f:b7:12:e2:b3:8f:31:42:01:60:1d:54:86:eb:d1:
38:07:7d:f1:07:52:3a:6e:65:23:48:97:8f:02:7d:99:3a:7d:
67:ec:e2:ce:be:1f:cd:e6:1c:c2:27:dc:f6:79:44:5a:e5:67:
44:f2:56:04:1c:e9:2a:79:19:ac:af:f5:3e:1c:72:41:7b:6c:
ee:d0:7b:6e:eb:1e:0f:c6:1e:d8:39:5e:7d:48:9c:9e:79:db:
5b:da:c6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:56:44 2026 by rpki-client