
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft
File: GiOYaENWXf_IAPgP8pa6sa03FOw.mft (raw, json)
Hash identifier: i/FCgk/L2uSOCvOUirOh5yHSmh5hUHGIhqJB8eMF39o=
Subject key identifier: 56:A1:96:BB:B7:C5:E4:32:CA:FB:AC:26:82:37:DA:EA:44:2C:02:57
Authority key identifier: 1A:23:98:68:43:56:5D:FF:C8:00:F8:0F:F2:96:BA:B1:AD:37:14:EC
Certificate issuer: /CN=A911F55D/serialNumber=1A23986843565DFFC800F80FF296BAB1AD3714EC
Certificate serial: 0456
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GiOYaENWXf_IAPgP8pa6sa03FOw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft
Manifest number: 0448
Signing time: Sun 20 Sep 2026 23:59:57 +0000
Manifest this update: Sun 20 Sep 2026 23:59:56 +0000
Manifest next update: Sun 27 Sep 2026 23:59:56 +0000
Files and hashes: 1: GiOYaENWXf_IAPgP8pa6sa03FOw.crl (hash: p4OQUiXtWXySaG56u8k6nrxROkH5FUhXrMj7gJ8uhIE=)
2: 96C26F3EB7AD11ECA2E94A7EC4F9AE02.roa (hash: IasGAzFc+l1gsAHfpGxVMa7FoIjlAPF1GzUpALF/028=)
3: 977ED926B7AD11ECA2E94A7EC4F9AE02.roa (hash: OdmIKnh99XTg8Hh9/TQirH8XV5FGfwwJr9IPq/Zw7no=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.crl
rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GiOYaENWXf_IAPgP8pa6sa03FOw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 23:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1110 (0x456)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F55D, serialNumber=1A23986843565DFFC800F80FF296BAB1AD3714EC
Validity
Not Before: Sep 20 23:59:56 2026 GMT
Not After : Sep 27 23:59:56 2026 GMT
Subject: CN=6ab0737d-3aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e1:0a:1a:9c:db:10:29:8e:7d:14:31:fc:7b:
77:4b:11:14:24:ce:b6:68:f9:e5:2d:f2:0e:5d:d4:
41:35:49:8b:05:e7:9c:b9:f1:b2:45:b7:a6:4c:cf:
ec:36:ac:b1:7c:5b:90:cc:9d:41:e2:ed:a3:ef:e1:
3b:16:10:86:84:6b:74:be:a6:79:55:c0:2d:f8:45:
ed:59:11:a4:67:da:f3:76:30:47:60:8d:08:60:7c:
ee:1b:c4:d8:a2:d3:58:ff:e8:14:d2:c8:4a:16:f6:
7b:06:09:b6:04:ce:3a:1b:dc:23:4a:45:2b:25:bd:
2d:0e:be:60:b1:7e:e1:41:c4:e4:eb:44:1a:31:9a:
b9:d0:a0:a6:42:b5:96:cf:0b:22:bc:e7:e1:4e:9b:
43:36:5d:2c:90:8d:00:5e:e2:e3:81:cf:83:26:8b:
b7:02:11:ff:d4:6d:56:f9:ae:a7:35:6e:5c:b0:ae:
80:15:d8:e2:e7:e4:9e:a4:79:e5:7e:16:56:28:88:
9e:67:c3:5e:ef:a0:38:59:b3:91:5c:85:57:e8:71:
13:47:9d:87:c1:2f:ec:80:77:13:59:76:31:ce:4a:
1f:13:64:4f:a0:62:c8:c2:1b:46:11:e2:91:41:67:
5e:4f:8d:10:ff:82:69:c6:8c:9a:9c:0f:57:04:5b:
7f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A1:96:BB:B7:C5:E4:32:CA:FB:AC:26:82:37:DA:EA:44:2C:02:57
X509v3 Authority Key Identifier:
keyid:1A:23:98:68:43:56:5D:FF:C8:00:F8:0F:F2:96:BA:B1:AD:37:14:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GiOYaENWXf_IAPgP8pa6sa03FOw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:cd:fa:ff:4c:56:c0:03:30:21:b5:65:94:b2:67:39:82:01:
e6:c6:1e:30:a4:f5:04:84:f9:f1:22:f0:cb:c8:aa:00:0a:6b:
a7:16:28:84:9d:2b:b7:e9:55:16:7f:72:7d:50:61:1d:49:fb:
2f:6d:18:1b:9d:1a:7c:fa:ae:60:7d:38:99:49:d8:49:87:5e:
aa:34:7c:2d:ac:7d:be:ab:c1:48:10:61:2f:b7:31:1c:3c:e0:
fd:a8:5c:01:9a:6a:53:2f:72:47:d7:5f:20:1e:9c:f1:b9:2b:
dc:96:df:4a:bf:9b:2b:b1:f3:4e:21:d2:54:a3:14:fb:d4:fc:
ea:04:ac:51:7a:df:e6:96:00:45:0b:06:20:63:bf:91:f5:34:
b4:76:99:74:7b:be:0c:cd:c8:82:42:f6:62:e5:44:73:89:44:
c7:2a:8a:c8:31:51:a4:d6:bb:77:b8:83:53:44:dd:da:1f:db:
6b:9c:25:00:8c:df:76:00:fb:61:ed:95:ca:cf:90:0f:26:8a:
86:86:e8:1c:e2:bb:e7:70:53:c4:e9:07:33:e8:1a:29:66:ed:
96:d2:2f:9d:bd:db:dd:7c:17:b3:d9:1f:23:7d:7b:68:31:49:
c3:74:c7:fe:a8:6f:64:21:f9:3a:55:23:ed:85:a3:b2:01:d6:
a1:3c:ac:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:24:56 2026 by rpki-client