
$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft
File: gCx1H6mENH35yTztuX7ZUalSgoY.mft (raw, json)
Hash identifier: gA1/4uF0cMHfsoNrRO7c8kyTOivaKNswPx4WT82b3NQ=
Subject key identifier: 3F:64:18:9E:9D:36:54:58:E9:8C:17:91:2B:E7:6B:E8:A7:66:55:E3
Authority key identifier: 80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86
Certificate issuer: /CN=A911AE8B/serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286
Certificate serial: 0E12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft
Manifest number: 0DEA
Signing time: Tue 28 Jul 2026 18:00:26 +0000
Manifest this update: Tue 28 Jul 2026 18:00:25 +0000
Manifest next update: Tue 04 Aug 2026 18:00:25 +0000
Files and hashes: 1: gCx1H6mENH35yTztuX7ZUalSgoY.crl (hash: jlfga5050yMT9l47jvkhB6hV0oioG/A6NZ8PVDQDeck=)
2: C64AB888F28211F0B78FCAB4696F56BC.roa (hash: 2Wh9GEwPkIT3ersV2cUdA77BiYM2ozOHXH7e19XrJGE=)
3: AF2CB5CE101E11ED9FA78415C4F9AE02.roa (hash: c6Bxsf4/9YtF+57E7R8e7VzwUukKAS9p7Ji/ny3xUY8=)
4: 677F3316E02711E9AB669750C4F9AE02.roa (hash: Rx39rgdKBA7zdcc962yiNhgXGCpK5LRJSU4D4pU54RA=)
5: 9A735F54EBE611EC82C08A11C4F9AE02.roa (hash: B3wAK97jhUd9WZXrgCNdwLjXUkDVCtHuNCOpZHTWsx4=)
6: C5C152D2F28211F0B78FCAB4696F56BC.roa (hash: BXi41BPmYbwmPR7CH8efyQzZoCZh4MQESuU5TAzEzUA=)
7: AD727D903F8111F1AAE343DCAF833773.roa (hash: 6/Bw7aE+CShp5tga2BPNlQn9ZAcE3QdhOoOj6cEOvU8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl
rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3602 (0xe12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AE8B, serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286
Validity
Not Before: Jul 28 18:00:25 2026 GMT
Not After : Aug 4 18:00:25 2026 GMT
Subject: CN=6a68ee3a-b211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:97:6e:b1:52:30:2d:f1:a1:5f:f2:0a:2f:7a:
31:de:62:bc:8f:e1:b9:a1:9a:99:15:ea:46:0d:98:
60:a1:7f:71:9f:2a:7b:1b:5e:39:32:3f:55:60:37:
96:8d:a9:47:f2:b7:89:f4:a3:63:57:4b:78:87:56:
b5:81:9f:d7:c2:54:7f:b3:b3:c3:66:07:38:22:ea:
c0:a7:50:91:1f:37:ef:91:e2:b0:0d:34:2f:5b:61:
61:1f:ad:9d:bc:ed:87:d8:b2:ca:01:e7:b8:49:82:
a3:97:9f:12:48:80:71:ae:f3:d9:d1:8d:9d:f4:7d:
ae:56:64:a2:fd:86:52:ac:3c:7b:1a:38:58:d7:33:
ed:2a:99:3c:54:57:ba:df:af:4a:1e:5e:6f:97:50:
44:c7:49:ad:a0:9e:46:f7:f5:21:ce:a8:89:c3:d4:
1c:2a:06:61:9f:c1:de:42:39:f0:f8:a9:d0:56:c0:
92:5e:5e:1f:4b:78:1a:f9:b8:5b:23:89:06:1c:49:
95:c7:36:f6:ca:df:28:a4:c2:c7:f8:e3:ab:1c:9f:
2f:1e:c2:44:84:be:ad:14:74:66:25:c2:66:86:29:
ad:9a:02:25:bf:ea:b1:6a:a9:e7:74:91:b4:37:d2:
54:7e:30:dd:e2:9c:d5:6c:25:84:0d:a7:31:eb:25:
8c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:64:18:9E:9D:36:54:58:E9:8C:17:91:2B:E7:6B:E8:A7:66:55:E3
X509v3 Authority Key Identifier:
keyid:80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:df:ed:be:d9:22:d5:91:37:25:89:eb:b1:82:68:1e:5e:63:
ff:5c:ed:06:d5:d2:d9:0c:5f:16:a0:2d:83:dc:35:46:b9:be:
18:45:c4:ef:6d:ed:23:65:de:1d:df:c2:fb:28:c1:0e:ca:36:
56:17:cb:44:6a:91:a5:1b:af:2e:30:d6:89:d3:7f:3f:00:76:
84:54:11:ad:d3:b4:9b:ca:62:91:9f:3b:31:b2:db:5d:87:88:
b8:ae:73:33:6d:53:f3:49:c6:86:d4:ac:23:cf:c2:7f:82:82:
84:b2:57:79:0d:ff:20:f1:93:30:28:68:2e:e1:b1:87:f9:12:
3c:6c:18:bf:86:e9:46:e7:ca:54:2a:40:22:ff:1c:4d:07:13:
b8:62:57:73:3f:81:90:70:48:81:b5:74:54:4a:f7:ae:d6:c8:
61:4f:15:4f:85:cf:21:6d:72:f6:5d:99:9d:ad:6f:a5:aa:ab:
33:de:86:07:e9:53:d6:d4:8b:e9:ac:f2:6e:fe:df:4d:cf:fc:
6e:1d:48:7d:19:df:e4:95:75:f2:1e:65:14:b1:47:43:0d:4f:
68:45:2e:93:22:00:83:da:59:4d:55:ac:e8:64:87:ed:b1:75:
ac:6b:fa:51:e4:29:e8:22:5d:20:c9:74:21:63:8d:42:ae:fd:
bd:7c:25:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:18:32 2026 by rpki-client