
$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft
File: gja7zXAtSCL93VuwVmDPEDjsjH4.mft (raw, json)
Hash identifier: WtMcjUI80IU43FQKYMmqY/5iqNmrLVU4wMlGkjglVvY=
Subject key identifier: 5C:C7:E1:F9:08:50:0B:00:16:EA:81:EC:D4:71:34:83:DE:B9:7D:DC
Authority key identifier: 82:36:BB:CD:70:2D:48:22:FD:DD:5B:B0:56:60:CF:10:38:EC:8C:7E
Certificate issuer: /CN=A911AE4B/serialNumber=8236BBCD702D4822FDDD5BB05660CF1038EC8C7E
Certificate serial: 0917
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft
Manifest number: 090A
Signing time: Tue 28 Jul 2026 20:39:12 +0000
Manifest this update: Tue 28 Jul 2026 20:39:12 +0000
Manifest next update: Tue 04 Aug 2026 20:39:12 +0000
Files and hashes: 1: gja7zXAtSCL93VuwVmDPEDjsjH4.crl (hash: 29x7Tsg5bS9gEecBEsO33w6Pm8oqeOY2Eji8LHwYnt4=)
2: 63B7CB76D0E511EA9916E053C4F9AE02.roa (hash: pYGKIqod1ITslZbHR5crvWsrKnNCLAjIRuDb4Q/IMAk=)
3: 3ABFAC2231E211EFA341983CC4F9AE02.roa (hash: ujHcZXNwuVg9oYIrnnoAIw1UkI7YOZ3N1z9618MB7Nk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.crl
rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 20:39:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2327 (0x917)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AE4B, serialNumber=8236BBCD702D4822FDDD5BB05660CF1038EC8C7E
Validity
Not Before: Jul 28 20:39:12 2026 GMT
Not After : Aug 4 20:39:12 2026 GMT
Subject: CN=6a691370-61fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4e:56:18:80:d8:a3:7b:e3:84:87:a0:39:4b:
1e:bf:f7:2d:a3:60:45:bd:2e:d3:26:ff:b3:f2:7a:
60:85:cb:90:59:3e:86:e1:53:94:27:77:21:41:53:
f5:7f:cc:93:83:1b:f3:59:6e:9f:cf:f7:c3:6d:53:
1d:e6:59:d9:ef:09:69:6f:a1:30:f5:7a:b9:d3:9e:
1a:f8:5a:3a:31:b7:e9:22:aa:71:9c:3c:b3:13:9b:
4d:d2:f5:9e:ee:e9:78:27:fd:cd:0c:5a:2a:78:19:
d0:ea:ae:3c:9e:ce:53:b1:09:c5:85:b9:83:08:d5:
a6:99:42:cc:37:4f:e3:ea:8a:f5:d7:ff:af:b3:10:
70:8c:d8:6a:e9:e0:01:94:d6:e0:3b:ca:ef:07:51:
f9:9b:0b:bd:17:5f:7a:82:a7:c8:7d:97:e5:63:3c:
bb:5d:56:97:fd:e5:24:d6:f1:3a:24:49:b5:29:f8:
65:8a:e4:8b:b0:cf:79:fd:82:5d:b4:20:ca:15:cc:
14:0d:df:c3:f5:05:39:1a:67:a8:c4:55:34:02:dd:
59:83:ae:75:8d:81:88:fd:3b:96:6b:69:da:cb:0c:
24:44:5f:e3:0d:80:70:13:20:bf:0b:b0:ed:2b:88:
7d:9b:c8:5f:f2:2d:69:2f:2a:9f:59:c9:6b:a4:b2:
94:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C7:E1:F9:08:50:0B:00:16:EA:81:EC:D4:71:34:83:DE:B9:7D:DC
X509v3 Authority Key Identifier:
keyid:82:36:BB:CD:70:2D:48:22:FD:DD:5B:B0:56:60:CF:10:38:EC:8C:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:82:a6:ff:56:1e:26:c3:04:22:cd:65:99:d4:b0:8e:fc:90:
f6:ee:9d:13:2f:8a:0f:60:d8:10:a7:9a:cc:6b:57:8d:9b:d0:
f5:eb:4c:11:0c:81:a8:f5:44:b3:cd:d9:37:89:22:aa:ca:f7:
c0:a9:7c:2a:ed:29:46:0a:10:68:6b:ec:1a:0d:2d:9d:10:40:
76:50:1e:9c:54:c4:72:ce:0c:d8:72:fb:75:4c:37:94:95:7f:
98:8f:c6:f6:bc:7f:f1:0f:61:7f:ba:d3:09:61:cd:00:0f:ec:
c6:1a:70:89:5a:05:fa:d1:25:60:e5:94:1b:fa:d6:06:db:ef:
37:bf:ff:96:cc:54:5f:ae:7f:99:6e:9e:8b:28:b1:3e:1d:e6:
f6:7d:d0:a1:01:42:3d:8d:82:2f:32:f2:92:66:56:07:7b:a3:
cd:1f:23:b0:2f:03:7d:49:0d:00:c3:45:52:c9:ee:c1:64:2d:
b5:3b:d2:eb:56:e0:ad:dc:46:09:90:ae:76:a4:df:b3:73:d0:
bf:c6:14:3f:94:7d:ea:6a:e1:71:02:b4:ce:58:c5:44:4a:d0:
6f:f7:e3:aa:86:b3:44:2e:5c:34:54:2c:11:c3:49:a1:04:5a:
e4:02:86:b6:4c:83:64:7b:5f:24:0e:72:1c:e6:c1:3c:5e:6c:
7b:13:a4:35
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCRcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUFFNEIxMTAvBgNVBAUTKDgyMzZCQkNENzAyRDQ4MjJGRERENUJCMDU2NjBDRjEw
MzhFQzhDN0UwHhcNMjYwNzI4MjAzOTEyWhcNMjYwODA0MjAzOTEyWjAYMRYwFAYD
VQQDEw02YTY5MTM3MC02MWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmE5WGIDYo3vjhIegOUsev/cto2BFvS7TJv+z8npghcuQWT6G4VOUJ3chQVP1
f8yTgxvzWW6fz/fDbVMd5lnZ7wlpb6Ew9Xq5054a+Fo6MbfpIqpxnDyzE5tN0vWe
7ul4J/3NDFoqeBnQ6q48ns5TsQnFhbmDCNWmmULMN0/j6or11/+vsxBwjNhq6eAB
lNbgO8rvB1H5mwu9F196gqfIfZflYzy7XVaX/eUk1vE6JEm1KfhliuSLsM95/YJd
tCDKFcwUDd/D9QU5GmeoxFU0At1Zg651jYGI/TuWa2naywwkRF/jDYBwEyC/C7Dt
K4h9m8hf8i1pLyqfWclrpLKUgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFzH4fkI
UAsAFuqB7NRxNIPeuX3cMB8GA1UdIwQYMBaAFII2u81wLUgi/d1bsFZgzxA47Ix+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU0Qi8yNEE2OEU5Q0Qw
RTMxMUVBOUE3M0I5NEZDNEY5QUUwMi9namE3elhBdFNDTDkzVnV3Vm1EUEVEanNq
SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dqYTd6WEF0U0NMOTNWdXdWbURQRURqc2pINC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QUU0Qi8yNEE2OEU5Q0QwRTMxMUVBOUE3M0I5NEZDNEY5QUUwMi9namE3elhBdFND
TDkzVnV3Vm1EUEVEanNqSDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAd4Km/1YeJsMEIs1lmdSwjvyQ9u6dEy+KD2DYEKeazGtXjZvQ9etMEQyBqPVE
s83ZN4kiqsr3wKl8Ku0pRgoQaGvsGg0tnRBAdlAenFTEcs4M2HL7dUw3lJV/mI/G
9rx/8Q9hf7rTCWHNAA/sxhpwiVoF+tElYOWUG/rWBtvvN7//lsxUX65/mW6eiyix
Ph3m9n3QoQFCPY2CLzLykmZWB3ujzR8jsC8DfUkNAMNFUsnuwWQttTvS61bgrdxG
CZCudqTfs3PQv8YUP5R96mrhcQK0zljFRErQb/fjqoazRC5cNFQsEcNJoQRa5AKG
tkyDZHtfJA5yHObBPF5sexOkNQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:44:51 2026 by rpki-client