
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft
File: GiOYaENWXf_IAPgP8pa6sa03FOw.mft (raw, json)
Hash identifier: k1ZV62K3u+Hj9nugtmNUcWjlwQmpFfmNPFZA5aqJhkw=
Subject key identifier: F5:15:CB:2F:CB:08:27:AB:BF:4E:15:84:7E:7F:E7:64:5E:E0:5D:AD
Authority key identifier: 1A:23:98:68:43:56:5D:FF:C8:00:F8:0F:F2:96:BA:B1:AD:37:14:EC
Certificate issuer: /CN=A911F55D/serialNumber=1A23986843565DFFC800F80FF296BAB1AD3714EC
Certificate serial: 0439
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GiOYaENWXf_IAPgP8pa6sa03FOw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft
Manifest number: 042B
Signing time: Mon 27 Jul 2026 01:20:29 +0000
Manifest this update: Mon 27 Jul 2026 01:20:29 +0000
Manifest next update: Mon 03 Aug 2026 01:20:29 +0000
Files and hashes: 1: GiOYaENWXf_IAPgP8pa6sa03FOw.crl (hash: rNv/feV6AJ5WtKPRJqROa7IQ0XNDi2gHMsnIgNQKPl4=)
2: 96C26F3EB7AD11ECA2E94A7EC4F9AE02.roa (hash: IasGAzFc+l1gsAHfpGxVMa7FoIjlAPF1GzUpALF/028=)
3: 977ED926B7AD11ECA2E94A7EC4F9AE02.roa (hash: OdmIKnh99XTg8Hh9/TQirH8XV5FGfwwJr9IPq/Zw7no=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.crl
rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GiOYaENWXf_IAPgP8pa6sa03FOw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 01:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1081 (0x439)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F55D, serialNumber=1A23986843565DFFC800F80FF296BAB1AD3714EC
Validity
Not Before: Jul 27 01:20:29 2026 GMT
Not After : Aug 3 01:20:29 2026 GMT
Subject: CN=6a66b25d-a75e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3c:83:64:9f:38:cd:74:ca:51:60:95:1f:df:
3e:df:de:f6:03:09:39:9f:f2:b1:b2:23:3d:1d:ce:
44:10:bf:6c:d8:83:f6:93:39:5d:ee:3f:cc:27:e9:
c9:44:8a:d8:fd:b0:f3:67:3d:eb:ef:cb:42:d7:9e:
a1:79:ab:0f:20:62:83:76:e3:bd:d8:76:e8:89:a7:
c2:2c:9a:7c:62:63:44:2a:55:ad:b5:f2:ec:45:37:
e4:74:19:62:69:14:71:a5:c0:9f:3a:d7:99:ba:fb:
f3:44:fc:44:c5:61:79:66:42:ed:61:b0:27:b7:a2:
43:4e:e7:69:60:43:93:10:bf:d2:e9:d8:ef:44:db:
42:53:d7:8d:0b:84:53:62:0b:cc:10:6e:dd:2f:61:
f5:bc:90:87:a7:b4:bf:29:f5:54:a5:c6:09:21:e4:
f4:66:e0:75:f0:34:fd:a0:c1:9f:53:b3:26:97:89:
cf:45:34:48:88:19:4b:43:ee:7c:ca:fb:f0:26:91:
88:93:01:8b:21:ec:6d:87:8b:2f:0b:86:cd:89:2d:
e7:e5:86:9b:c1:14:dd:6d:67:63:a8:cc:5f:3c:1c:
c0:e6:9d:92:94:08:5d:0e:0d:42:95:2c:a4:cc:09:
e6:80:ab:c9:dd:f8:12:ec:af:bb:f7:22:27:e9:d6:
e0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:15:CB:2F:CB:08:27:AB:BF:4E:15:84:7E:7F:E7:64:5E:E0:5D:AD
X509v3 Authority Key Identifier:
keyid:1A:23:98:68:43:56:5D:FF:C8:00:F8:0F:F2:96:BA:B1:AD:37:14:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GiOYaENWXf_IAPgP8pa6sa03FOw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:c6:5a:9d:0e:5a:20:06:7c:23:f5:45:d1:86:1b:85:3e:dd:
6c:ea:c7:fe:46:76:0b:f9:9c:33:f6:0b:76:49:a3:e5:d2:10:
cd:55:1e:71:73:ac:12:22:ac:fd:a0:ab:e1:02:49:0c:3c:2e:
9a:3d:64:f1:b5:2a:61:53:0e:42:61:82:f7:2b:8a:c5:1a:30:
a7:f8:4d:38:2c:1e:bd:a7:fd:a1:96:e4:59:ca:2b:d1:d1:b8:
2b:19:5d:a5:af:a3:41:84:50:86:63:bd:4d:bc:85:bb:70:9f:
58:0d:bb:4b:fd:a8:df:56:5d:ef:dc:15:48:b0:96:a9:fc:3e:
84:85:79:bb:2d:0a:fe:7e:d7:10:b1:b7:ff:59:a6:48:46:a3:
b6:07:e1:8c:06:c3:21:e0:35:69:1c:20:26:11:32:1a:cc:ae:
73:09:c9:02:fb:2d:aa:b5:65:f5:4c:61:c7:1a:8d:82:07:5b:
40:6f:68:5a:a8:57:6c:7c:f3:fc:4c:f5:ea:95:a7:c2:e4:ed:
aa:0d:7b:a4:5a:e6:0a:7f:b5:64:5f:d4:ea:98:8f:b2:29:98:
70:ff:84:1b:db:2f:79:ac:cb:56:14:b7:f2:f5:06:33:2a:1e:
42:95:42:f1:57:e7:8d:ef:be:4f:69:0c:f6:68:c6:83:10:8c:
f8:e4:af:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:29:24 2026 by rpki-client