
$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft
File: gCx1H6mENH35yTztuX7ZUalSgoY.mft (raw, json)
Hash identifier: HMqiLf0m+QdyYRLAaIjUts83Dik7V6WXCr11wUtXhjA=
Subject key identifier: 94:C1:74:14:F5:62:34:D0:8E:0E:DD:DA:52:19:7D:9D:06:B6:82:B7
Authority key identifier: 80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86
Certificate issuer: /CN=A911AE8B/serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286
Certificate serial: 0DFB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft
Manifest number: 0DD3
Signing time: Fri 12 Jun 2026 17:52:28 +0000
Manifest this update: Fri 12 Jun 2026 17:52:27 +0000
Manifest next update: Fri 19 Jun 2026 17:52:27 +0000
Files and hashes: 1: gCx1H6mENH35yTztuX7ZUalSgoY.crl (hash: 8tyv6jCRUTeHw2TVzRo2fed7BhaWZP5yWKgPCBBdF04=)
2: AF2CB5CE101E11ED9FA78415C4F9AE02.roa (hash: c6Bxsf4/9YtF+57E7R8e7VzwUukKAS9p7Ji/ny3xUY8=)
3: AD727D903F8111F1AAE343DCAF833773.roa (hash: 6/Bw7aE+CShp5tga2BPNlQn9ZAcE3QdhOoOj6cEOvU8=)
4: 9A735F54EBE611EC82C08A11C4F9AE02.roa (hash: B3wAK97jhUd9WZXrgCNdwLjXUkDVCtHuNCOpZHTWsx4=)
5: 677F3316E02711E9AB669750C4F9AE02.roa (hash: Rx39rgdKBA7zdcc962yiNhgXGCpK5LRJSU4D4pU54RA=)
6: C64AB888F28211F0B78FCAB4696F56BC.roa (hash: 2Wh9GEwPkIT3ersV2cUdA77BiYM2ozOHXH7e19XrJGE=)
7: C5C152D2F28211F0B78FCAB4696F56BC.roa (hash: BXi41BPmYbwmPR7CH8efyQzZoCZh4MQESuU5TAzEzUA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl
rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:52:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3579 (0xdfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AE8B, serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286
Validity
Not Before: Jun 12 17:52:27 2026 GMT
Not After : Jun 19 17:52:27 2026 GMT
Subject: CN=6a2c475c-506b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1f:64:85:49:d6:38:0d:5f:56:98:94:36:13:
3b:ec:3b:25:f2:32:a3:bd:d1:bc:aa:73:6e:69:48:
67:d1:3b:37:c1:60:40:9a:60:26:9f:19:03:70:65:
46:91:0a:7c:aa:72:b4:73:97:a0:e7:c8:6e:79:d8:
16:6a:59:6a:03:1d:89:6f:08:bf:4a:5d:9c:59:d8:
a9:39:b9:05:e7:38:08:ed:eb:bb:45:00:76:f0:f5:
01:be:90:3b:66:a4:f6:4c:31:42:b4:1e:aa:19:a7:
60:4a:4b:1b:97:74:15:d7:a5:e3:8f:5f:8c:cf:0e:
38:44:73:d8:04:bf:21:4b:2a:e7:ce:ee:f3:87:d2:
19:18:16:0e:2a:5a:56:55:1a:67:a7:64:71:8b:73:
c9:11:28:0b:40:46:5c:cd:54:a1:38:da:4c:ed:61:
f0:b3:b0:6e:82:87:3f:84:8c:45:c2:7d:9d:63:70:
51:7c:08:fd:fb:9e:f3:40:f6:29:f1:6d:42:c0:6a:
7b:e1:27:c8:10:33:1e:8c:9d:10:a6:c5:d5:0b:5a:
9a:d3:10:f1:8e:6d:be:3e:f4:89:63:7e:3a:88:bb:
8b:6a:91:ae:5b:5d:27:0b:78:dd:a3:69:41:68:eb:
10:37:94:66:e4:95:97:43:a3:0b:a6:4f:0e:45:7b:
fe:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C1:74:14:F5:62:34:D0:8E:0E:DD:DA:52:19:7D:9D:06:B6:82:B7
X509v3 Authority Key Identifier:
keyid:80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:50:ad:1d:42:5d:4c:f1:fc:84:7d:bf:d0:e9:4a:0c:33:74:
85:36:84:c8:f5:aa:c5:c4:d2:f7:f1:45:44:fa:3d:e0:0b:66:
d1:87:c5:bb:04:bb:08:35:ad:28:a8:db:95:f6:a8:53:ec:0e:
7a:e5:ee:b4:09:d7:4c:69:91:3d:60:3c:2a:ad:2a:9a:e3:94:
b9:6a:24:6a:f2:a8:13:83:e1:e6:53:75:9f:5c:f1:e1:6e:ca:
0c:fb:fb:76:26:dd:6c:ca:d0:f8:cb:35:ec:09:42:82:e1:1d:
a0:f5:ef:47:3d:99:32:c8:b9:24:67:ea:76:bf:bb:4c:91:80:
d8:5e:cc:1a:59:0c:59:e6:e7:71:2e:13:69:c9:be:08:44:19:
05:06:94:69:41:ce:32:06:65:8a:27:35:85:0c:10:c3:3e:e9:
1a:65:5f:ca:60:41:a2:69:0f:a9:c3:27:0e:94:0d:a7:42:32:
9a:b5:81:c6:31:6c:78:d0:b6:85:01:72:6b:d7:a1:18:fe:a7:
1f:79:06:4a:0d:b3:41:03:a2:1e:23:de:71:ab:79:e6:c6:7c:
61:8e:7b:77:03:a7:5d:f1:27:96:aa:ec:97:eb:c1:0c:93:fc:
59:8b:89:e9:ed:8d:06:9c:2f:4c:91:78:4c:8e:3e:aa:d9:86:
e3:eb:83:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:23:56 2026 by rpki-client