
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft
File: gAcXZemLOWEliNN4VyFDLDJgf-4.mft (raw, json)
Hash identifier: Hr5L1KVIaZrJ/6GPtkAEsH0gFh+Q9e7VZ3UFVIfsxi8=
Subject key identifier: F4:9C:F5:07:DA:19:E2:14:76:E1:E8:CE:04:4B:E7:87:85:D3:A8:D1
Authority key identifier: 80:07:17:65:E9:8B:39:61:25:88:D3:78:57:21:43:2C:32:60:7F:EE
Certificate issuer: /CN=A911F584/serialNumber=80071765E98B39612588D3785721432C32607FEE
Certificate serial: A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft
Manifest number: 9D
Signing time: Mon 27 Jul 2026 09:29:55 +0000
Manifest this update: Mon 27 Jul 2026 09:29:55 +0000
Manifest next update: Mon 03 Aug 2026 09:29:55 +0000
Files and hashes: 1: gAcXZemLOWEliNN4VyFDLDJgf-4.crl (hash: paT+uhwJgFLzH25wM+z1SFzmQakrPPuQeETotcqcEHs=)
2: D7E9A8C49DAA11F0A24E4963C4F9AE02.roa (hash: axY0t/wfGcS0SqKBr/2f2eZYye9v2/DiDSRsHzKpfyQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.crl
rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160 (0xa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F584, serialNumber=80071765E98B39612588D3785721432C32607FEE
Validity
Not Before: Jul 27 09:29:55 2026 GMT
Not After : Aug 3 09:29:55 2026 GMT
Subject: CN=6a672513-e4da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0b:1a:0d:ec:b4:ae:94:8c:73:a3:e1:3e:66:
3b:af:24:21:69:88:c2:2b:22:ac:23:6f:7a:07:0f:
aa:c8:44:59:f4:84:93:85:5b:4a:c6:18:60:82:90:
e1:ec:e3:cb:47:d8:e5:55:9a:b3:dd:4a:22:67:7d:
63:e1:d4:9e:e0:8c:15:b4:85:96:51:86:9e:18:64:
65:b4:d0:54:d8:26:55:a0:aa:cc:5d:23:a7:c4:45:
90:b3:86:fa:fd:7a:8c:18:7e:b0:00:9e:4e:21:ac:
bc:01:0f:54:7c:04:df:33:18:78:10:42:b3:a6:29:
47:e7:a1:98:0e:e6:aa:73:e5:ec:60:3f:d9:7f:66:
dc:8b:72:ce:f0:aa:5d:01:48:45:97:b6:b7:7d:bd:
96:92:9f:ab:fb:2a:5d:37:b4:b1:1e:ea:29:f9:04:
e8:23:d4:5b:22:f7:2f:69:8a:39:ab:34:37:ad:eb:
48:3d:d4:e2:2e:a5:c4:58:8b:49:29:49:01:6b:dd:
d1:b3:64:d7:b2:83:3c:7b:0f:6a:af:47:b5:a6:06:
c9:e1:2d:a5:4f:fa:d7:ef:e3:58:86:13:d8:3f:14:
03:d8:bb:72:99:4f:c0:77:85:9e:e3:91:89:e9:e0:
08:51:21:5a:a1:72:0f:63:1d:13:b5:8f:68:d5:ee:
21:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:9C:F5:07:DA:19:E2:14:76:E1:E8:CE:04:4B:E7:87:85:D3:A8:D1
X509v3 Authority Key Identifier:
keyid:80:07:17:65:E9:8B:39:61:25:88:D3:78:57:21:43:2C:32:60:7F:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:b6:6d:2a:6b:8d:78:ff:35:e8:64:90:39:9f:81:2a:88:54:
a6:f6:7c:8b:f2:76:79:a9:28:3c:b5:15:a5:22:a2:ad:a5:97:
2f:23:83:ec:46:52:41:59:7e:e2:eb:42:20:2f:87:b1:10:9c:
0f:84:d1:fc:db:d5:3b:de:f4:78:c1:f2:9b:eb:6b:8c:96:c3:
bf:ae:c2:dd:1e:5f:d1:7f:11:aa:62:9a:56:7d:da:d1:ee:b2:
fb:a1:fa:a7:e2:b0:9d:87:f8:f6:3d:70:3c:74:8c:a3:70:8d:
b0:65:34:1b:bb:4c:c7:f0:2d:d3:86:92:ec:52:25:b0:ad:2c:
39:07:c7:5e:61:0e:40:8a:2b:19:2b:7b:2e:15:c4:b8:30:f3:
4c:18:38:25:83:f1:cb:b1:16:96:ed:75:f7:a8:22:16:de:4a:
bd:43:72:60:4a:c2:d9:bf:d7:0b:8f:78:4a:71:ba:b1:64:a8:
de:5d:00:1c:e6:71:dc:99:dd:93:2a:16:2b:a6:d1:9d:ca:ea:
16:b8:69:68:32:f6:fc:3c:6b:d7:48:f8:2d:9e:e3:8f:56:b1:
97:b5:91:16:3b:a6:f7:31:e9:7a:01:1b:1f:92:e1:3c:43:a4:
cb:8a:5a:21:38:6d:9b:75:de:49:45:4c:8b:a9:6a:1b:32:a8:
b6:2f:3e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:22:47 2026 by rpki-client