
$ rpki-client -vvf rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.mft
File: Gxrxg1EGyTOa3TFF6QCwb9qeVuc.mft (raw, json)
Hash identifier: kX2hxZuLXGzTUzC699fnPmiZ7Ns8qItvpGSEws871Y8=
Subject key identifier: 47:56:37:31:14:AE:97:35:3B:27:BB:F3:3B:91:DC:14:F8:CF:70:04
Authority key identifier: 1B:1A:F1:83:51:06:C9:33:9A:DD:31:45:E9:00:B0:6F:DA:9E:56:E7
Certificate issuer: /CN=A915CE6F/serialNumber=1B1AF1835106C9339ADD3145E900B06FDA9E56E7
Certificate serial: EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.mft
Manifest number: EA
Signing time: Mon 27 Jul 2026 08:32:58 +0000
Manifest this update: Mon 27 Jul 2026 08:32:58 +0000
Manifest next update: Mon 03 Aug 2026 08:32:58 +0000
Files and hashes: 1: Gxrxg1EGyTOa3TFF6QCwb9qeVuc.crl (hash: k9eLdaFtvxbi/tvPKM1jZdF+vyZpZUZJEWuDwFvpMU4=)
2: D7605790272B11F08FF39632C4F9AE02.roa (hash: s7nSBZgEuguHKvA0dP2uzOfAKKoPu7zIrIxCHfZMzCU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.crl
rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:32:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 238 (0xee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915CE6F, serialNumber=1B1AF1835106C9339ADD3145E900B06FDA9E56E7
Validity
Not Before: Jul 27 08:32:58 2026 GMT
Not After : Aug 3 08:32:58 2026 GMT
Subject: CN=6a6717ba-4664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8b:9b:d8:19:e0:36:93:b5:4b:05:e0:7f:0f:
d6:cb:2b:7f:2f:f8:fe:98:3b:31:09:5b:c4:f8:55:
a2:66:69:5e:0e:57:c8:5c:1a:ef:b7:a9:c5:37:f2:
7d:35:ea:ed:ad:bf:8a:8f:45:aa:1e:be:72:d1:5a:
f9:ee:32:c0:31:e3:16:e1:96:3d:b4:32:04:06:f3:
ea:86:e6:75:52:f7:87:38:7d:4e:dd:96:81:66:b2:
c7:c8:12:4f:67:0c:2a:93:09:4a:b1:1b:5f:a8:72:
45:40:51:ea:b2:93:6d:0f:4f:20:b6:cd:60:68:da:
fe:08:4b:ce:a5:b6:64:bd:5b:e8:72:34:4d:30:39:
35:82:55:0d:fc:69:53:a0:09:ba:56:d2:a8:b4:dd:
c4:61:65:93:7c:d9:92:82:09:09:1e:2d:f6:f5:32:
6f:41:38:b2:1c:9b:10:7e:3e:90:96:89:d7:6b:ed:
19:11:95:c1:3b:eb:ec:47:15:d0:0e:c6:2f:0a:ee:
4a:a2:ff:24:af:2b:7c:82:03:f0:67:25:51:0e:4a:
32:e9:39:4d:87:48:39:95:e2:87:fb:96:42:27:30:
2d:fc:72:23:5e:5f:3d:8b:ef:6e:4f:9d:e8:e7:4b:
ec:0a:0c:1e:b0:ef:0e:02:af:2f:ed:13:fe:da:ff:
46:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:56:37:31:14:AE:97:35:3B:27:BB:F3:3B:91:DC:14:F8:CF:70:04
X509v3 Authority Key Identifier:
keyid:1B:1A:F1:83:51:06:C9:33:9A:DD:31:45:E9:00:B0:6F:DA:9E:56:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a1:b5:18:a3:df:72:ff:da:fe:cb:16:04:8b:6c:e0:f0:b0:
40:ae:3c:81:c7:70:04:e2:46:07:6c:c0:ed:83:b3:9d:5a:7b:
03:20:91:7c:8c:47:82:8e:04:da:d1:1a:61:e0:f4:ae:42:07:
8f:45:52:dd:e9:18:10:f1:69:0a:6a:43:79:cf:9d:c3:60:de:
ad:4a:f0:45:af:db:76:52:e0:31:8c:9e:94:94:a5:d2:ac:18:
45:67:ab:2d:22:8d:de:cb:e3:09:63:48:8d:68:e8:61:a1:4d:
c4:55:80:4c:ba:12:aa:28:c2:b3:64:45:fa:91:48:b8:51:76:
a6:a4:c7:a0:7a:5d:11:95:90:6d:7d:5e:bb:bc:6e:a8:14:8e:
fd:e6:d9:3a:03:1c:1c:6f:b6:58:83:9d:a0:dd:e7:33:04:71:
53:11:78:f5:b9:a0:e7:95:bf:1e:de:fa:59:4e:e5:77:64:d9:
62:8d:c9:e7:48:68:27:da:66:b4:81:93:c0:c4:c7:8c:ed:01:
9d:e7:2b:f9:3b:80:74:aa:fe:2a:08:b6:60:5b:b7:81:0b:5e:
a3:58:1c:11:cd:6f:f4:70:c3:22:2b:58:39:47:9b:55:ff:44:
36:c5:0e:ba:44:a2:ff:ad:9a:59:05:0f:8a:3c:01:b3:4f:32:
73:d8:ff:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:11:25 2026 by rpki-client