
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft
File: gAcXZemLOWEliNN4VyFDLDJgf-4.mft (raw, json)
Hash identifier: e4gr0Pejx8VeMVXOxfFsL8HtVIT224usT5tjhWEHTcc=
Subject key identifier: 8F:AE:74:59:57:3D:D8:AB:51:5E:46:1E:42:65:55:70:E2:AE:83:80
Authority key identifier: 80:07:17:65:E9:8B:39:61:25:88:D3:78:57:21:43:2C:32:60:7F:EE
Certificate issuer: /CN=A911F584/serialNumber=80071765E98B39612588D3785721432C32607FEE
Certificate serial: 6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft
Manifest number: 68
Signing time: Wed 15 Apr 2026 07:30:07 +0000
Manifest this update: Wed 15 Apr 2026 07:30:07 +0000
Manifest next update: Wed 22 Apr 2026 07:30:07 +0000
Files and hashes: 1: gAcXZemLOWEliNN4VyFDLDJgf-4.crl (hash: qHZMWPPSdaQWZ7gKIORLO3KKI40wIKSH7bFgxILZCfY=)
2: D7E9A8C49DAA11F0A24E4963C4F9AE02.roa (hash: jOlgXy5s6Ahmo/y9znHfijD5u8a2h7ukaclc+SI1hq8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.crl
rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 07:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106 (0x6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F584, serialNumber=80071765E98B39612588D3785721432C32607FEE
Validity
Not Before: Apr 15 07:30:07 2026 GMT
Not After : Apr 22 07:30:07 2026 GMT
Subject: CN=69df3e7f-a4f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e9:84:7c:57:fe:37:9f:7d:87:86:8d:cd:8e:
28:c2:e7:10:f7:71:4b:b0:8e:73:80:b6:77:2a:73:
ee:b5:29:5d:36:0a:39:09:54:79:3e:7a:dc:69:4d:
48:20:d5:4b:cd:f9:f9:d7:d3:a2:0a:11:cc:8b:c1:
0c:75:bb:48:0d:e7:da:f0:00:df:9a:cf:53:4f:3a:
ac:b0:a4:0a:f6:59:64:02:8e:96:10:a9:a0:03:04:
18:94:4b:9e:e7:d0:3e:42:b5:b1:26:1c:8d:44:a9:
1e:89:e2:32:b2:3a:6f:7e:f4:1e:33:86:f8:84:fd:
c3:98:32:8f:8a:52:dd:a7:54:be:8f:42:2b:8f:d9:
0b:e6:79:2e:98:c2:70:05:8c:e1:7b:85:18:02:88:
36:41:68:6a:9f:6e:a0:19:3a:c7:13:c3:25:eb:e6:
41:2b:79:bf:07:2e:42:7e:d6:dd:01:85:05:9d:39:
ae:c6:fd:56:b4:14:2c:7a:8c:03:d7:22:91:5f:31:
76:08:96:7c:6b:f2:5e:9b:58:62:b6:9e:b4:32:ff:
4d:cd:fa:94:e1:06:31:20:ed:69:22:e2:c6:4a:fd:
70:94:ca:b1:6c:8b:a1:18:e0:ce:95:a0:e1:9d:d9:
fc:df:15:d2:ec:94:d0:cf:0a:1f:2c:b9:15:e8:48:
66:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AE:74:59:57:3D:D8:AB:51:5E:46:1E:42:65:55:70:E2:AE:83:80
X509v3 Authority Key Identifier:
keyid:80:07:17:65:E9:8B:39:61:25:88:D3:78:57:21:43:2C:32:60:7F:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:81:97:11:35:6d:5f:69:c2:b5:be:e7:b4:e5:aa:0a:42:e1:
80:95:66:66:c2:15:84:05:3a:5f:00:cf:f3:6d:63:37:d6:48:
a2:5d:6e:f2:53:35:e9:e5:5c:cc:31:c3:fc:4d:41:05:fd:76:
1f:1b:e0:48:55:1e:a9:d5:66:e9:87:24:d1:5b:09:3f:46:fa:
b5:ce:01:87:c7:6f:5d:61:37:05:8b:bd:ca:a1:88:94:72:40:
d6:53:1f:b8:3d:28:d1:16:45:1d:ec:28:fe:96:06:6a:7b:61:
fc:37:3c:ff:0b:9c:99:31:89:d7:6d:37:6c:75:dc:a3:27:02:
af:61:11:f3:9e:9d:70:03:10:0a:62:12:e7:66:cf:92:f4:8e:
f3:d6:6b:83:46:a6:8f:5f:d6:7d:4e:f4:38:fc:02:5c:80:26:
55:e8:98:67:6a:b3:76:99:c8:7f:67:f7:aa:c2:79:c4:9d:af:
99:d3:01:c9:0c:6c:c5:a6:c7:31:e8:fb:1d:0e:19:41:01:54:
52:ab:82:6a:48:f9:0a:94:51:21:d7:4e:bd:bf:63:72:e9:b0:
ec:3d:c5:04:da:bb:ca:7a:a3:ff:83:41:cd:56:41:ec:d8:e1:
64:5b:cc:4a:b6:88:0a:64:f9:21:b7:11:70:9c:88:72:bb:1e:
cf:6b:34:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:43:16 2026 by rpki-client