
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.mft
File: Gxrxg1EGyTOa3TFF6QCwb9qeVuc.mft (raw, json)
Hash identifier: JvTp7vUB7f0yHjuWItfHqRoYzCwMkZEaivLUJtbGF/0=
Subject key identifier: AB:9E:37:98:E8:5C:EE:E7:9D:93:27:E0:75:39:72:C8:EC:21:7C:F0
Authority key identifier: 1B:1A:F1:83:51:06:C9:33:9A:DD:31:45:E9:00:B0:6F:DA:9E:56:E7
Certificate issuer: /CN=A915CE6F/serialNumber=1B1AF1835106C9339ADD3145E900B06FDA9E56E7
Certificate serial: 010B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.mft
Manifest number: 0107
Signing time: Mon 21 Sep 2026 06:06:55 +0000
Manifest this update: Mon 21 Sep 2026 06:06:54 +0000
Manifest next update: Mon 28 Sep 2026 06:06:54 +0000
Files and hashes: 1: Gxrxg1EGyTOa3TFF6QCwb9qeVuc.crl (hash: IjG07RmJzs/55AC2utZpsoQEbY0zU4/WJ4/8gdTemto=)
2: D7605790272B11F08FF39632C4F9AE02.roa (hash: s7nSBZgEuguHKvA0dP2uzOfAKKoPu7zIrIxCHfZMzCU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.crl
rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:06:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 267 (0x10b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915CE6F, serialNumber=1B1AF1835106C9339ADD3145E900B06FDA9E56E7
Validity
Not Before: Sep 21 06:06:54 2026 GMT
Not After : Sep 28 06:06:54 2026 GMT
Subject: CN=6ab0c97e-2309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bb:5e:06:3f:42:09:cc:1c:a5:ff:8f:c2:21:
2c:5d:3a:62:31:55:0f:36:f9:b6:60:3e:88:a5:00:
84:95:65:f5:17:00:2e:ca:f9:3d:9a:3a:eb:46:3f:
ab:71:ff:20:ce:00:2e:3a:8e:52:a7:5f:3e:21:69:
76:27:b7:40:e7:42:cd:f0:10:6d:e3:73:b0:1b:56:
09:83:66:be:49:4a:9e:f5:ef:2b:46:3f:b2:6c:99:
db:3b:da:31:96:c8:4a:a4:7d:0c:e2:a5:1e:8a:fd:
a8:9f:98:9b:a6:4e:89:4d:02:cf:f0:4a:6a:29:1f:
bd:60:d5:81:00:01:64:d5:e7:2f:ea:13:b8:4f:0e:
c0:c0:db:0b:88:f0:2a:df:4d:98:25:07:3f:48:c0:
f4:11:b1:17:a5:4c:3b:e4:30:2c:f0:23:d4:4c:d5:
f0:94:7a:ea:ad:13:19:cb:af:aa:fd:9b:23:51:01:
b8:e5:57:a2:97:fc:63:5a:e2:43:15:64:2c:82:99:
12:0f:8e:93:23:42:19:24:72:5a:36:a0:33:f4:01:
5d:98:58:b4:ca:1a:01:25:8d:9a:11:de:8b:7c:66:
d3:4f:48:f1:61:f8:40:69:dc:3a:f4:9f:2c:d6:3e:
d5:59:f0:fa:54:4d:a6:9a:e0:89:cb:f2:75:c5:e2:
22:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:9E:37:98:E8:5C:EE:E7:9D:93:27:E0:75:39:72:C8:EC:21:7C:F0
X509v3 Authority Key Identifier:
keyid:1B:1A:F1:83:51:06:C9:33:9A:DD:31:45:E9:00:B0:6F:DA:9E:56:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:56:b5:2d:08:f7:e8:e4:68:cc:80:10:a5:f3:0e:9a:44:1d:
6a:db:87:fc:be:64:50:0a:8b:0d:2f:ac:2d:67:1c:97:96:96:
d0:b7:53:46:df:78:9a:b0:0c:92:fe:9c:b5:f4:02:62:dd:f7:
32:19:8d:c8:be:2f:78:6f:1f:e5:47:2f:d8:f5:4f:dd:ee:24:
81:44:43:fd:e0:e1:77:2b:56:6a:4f:61:38:b1:4a:82:2e:b2:
1a:6e:41:0e:80:f8:5d:1d:c3:c9:27:fe:ed:d3:5a:a2:af:07:
6a:67:d9:9b:ee:a5:9a:1f:8b:94:d1:7f:6b:59:c6:61:3f:d5:
0e:3e:d3:aa:e1:81:85:77:31:af:f3:e3:96:ee:0d:0a:c8:b6:
f7:03:7e:9d:b5:c6:86:d1:ae:93:88:86:87:75:73:f2:b5:60:
1e:8b:b4:96:3e:cc:6c:0b:a4:1d:67:63:cc:ed:96:4a:2a:9f:
5c:a8:f5:93:a1:6d:cb:6d:37:e2:a0:29:22:6b:f3:ae:13:60:
2c:5e:7f:f9:b1:7a:4c:a4:89:48:d2:63:03:92:3a:ea:ae:13:
81:73:de:fd:49:bb:9e:d1:ae:2f:ad:f9:c7:93:1f:a6:a0:ea:
2f:da:7d:f2:f1:2c:d5:80:f6:00:86:b9:fd:64:01:e2:31:49:
5f:fe:5b:d0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUNFNkYxMTAvBgNVBAUTKDFCMUFGMTgzNTEwNkM5MzM5QUREMzE0NUU5MDBCMDZG
REE5RTU2RTcwHhcNMjYwOTIxMDYwNjU0WhcNMjYwOTI4MDYwNjU0WjAYMRYwFAYD
VQQDEw02YWIwYzk3ZS0yMzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvrteBj9CCcwcpf+PwiEsXTpiMVUPNvm2YD6IpQCElWX1FwAuyvk9mjrrRj+r
cf8gzgAuOo5Sp18+IWl2J7dA50LN8BBt43OwG1YJg2a+SUqe9e8rRj+ybJnbO9ox
lshKpH0M4qUeiv2on5ibpk6JTQLP8EpqKR+9YNWBAAFk1ecv6hO4Tw7AwNsLiPAq
302YJQc/SMD0EbEXpUw75DAs8CPUTNXwlHrqrRMZy6+q/ZsjUQG45Veil/xjWuJD
FWQsgpkSD46TI0IZJHJaNqAz9AFdmFi0yhoBJY2aEd6LfGbTT0jxYfhAadw69J8s
1j7VWfD6VE2mmuCJy/J1xeIi+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKueN5jo
XO7nnZMn4HU5csjsIXzwMB8GA1UdIwQYMBaAFBsa8YNRBskzmt0xRekAsG/anlbn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Q0U2Ri8yRDE4MTdCNDI3
MkIxMUYwQTBDNjc0NERDNEY5QUUwMi9HeHJ4ZzFFR3lUT2EzVEZGNlFDd2I5cWVW
dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0d4cnhnMUVHeVRPYTNURkY2UUN3YjlxZVZ1Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
Q0U2Ri8yRDE4MTdCNDI3MkIxMUYwQTBDNjc0NERDNEY5QUUwMi9HeHJ4ZzFFR3lU
T2EzVEZGNlFDd2I5cWVWdWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMVa1LQj36ORozIAQpfMOmkQdatuH/L5kUAqLDS+sLWccl5aW0LdTRt94mrAM
kv6ctfQCYt33MhmNyL4veG8f5Ucv2PVP3e4kgURD/eDhdytWak9hOLFKgi6yGm5B
DoD4XR3DySf+7dNaoq8HamfZm+6lmh+LlNF/a1nGYT/VDj7TquGBhXcxr/Pjlu4N
Csi29wN+nbXGhtGuk4iGh3Vz8rVgHou0lj7MbAukHWdjzO2WSiqfXKj1k6Fty203
4qApImvzrhNgLF5/+bF6TKSJSNJjA5I66q4TgXPe/Um7ntGuL635x5MfpqDqL9p9
8vEs1YD2AIa5/WQB4jFJX/5b0A==
-----END CERTIFICATE-----
Generated at Tue Sep 22 20:21:51 2026 by rpki-client