
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft
File: gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft (raw, json)
Hash identifier: OPTc7gga5mnuOwq2d8hzxnBZEHqOLZrmBieKhoq+0F8=
Subject key identifier: A3:68:1B:7E:AE:5B:71:BA:DD:3B:7E:19:6B:FB:53:E7:0D:2B:4B:36
Authority key identifier: 81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4
Certificate issuer: /CN=A917092C/serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4
Certificate serial: 01BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft
Manifest number: 0188
Signing time: Sun 27 Sep 2026 05:07:33 +0000
Manifest this update: Sun 27 Sep 2026 05:07:33 +0000
Manifest next update: Sun 04 Oct 2026 05:07:33 +0000
Files and hashes: 1: gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl (hash: 2uURr53/CpR4l0rFCSc2d8fzZsZJEie4+XcW7YMOy5s=)
2: E3105D04777E11EFB3F75352C4F9AE02.roa (hash: DrKVDvMocLXzLgvXMZCEUVeDoIKw7Tev+2Jtiw1fDsY=)
3: E3C4A4EE777E11EFB3F75352C4F9AE02.roa (hash: 50bHfxKSpda4xd/0+Y70XiROBlQW8ceJ16h3JpGhCFI=)
4: E1F3085E777E11EFB3F75352C4F9AE02.roa (hash: MlWkxf4J765duArgDZ2QKyAt6xI228MKLb5L4iTwob0=)
5: E27B5862777E11EFB3F75352C4F9AE02.roa (hash: mQtFZnxqBOSE+G0rPNutjCbpOwWmI7n4xbDitTqkJzk=)
6: 8E00FBF2777E11EF8D0ECC4EC4F9AE02.roa (hash: 9dQstXImTlCDYkWwNVOE5AaWfqt3N6M6/xI4kYS4UCs=)
7: 752774D616A111F0B2CDBC72C4F9AE02.roa (hash: suny3D8b6EtNlMBNr60aW4wrzdwyFWYaz0jtIBV7c9Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl
rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 05:07:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 447 (0x1bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917092C, serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4
Validity
Not Before: Sep 27 05:07:33 2026 GMT
Not After : Oct 4 05:07:33 2026 GMT
Subject: CN=6ab8a495-52c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9f:12:47:3e:14:36:7a:7d:22:f3:ad:e7:f8:
4a:56:53:fb:12:23:09:da:66:18:0a:73:26:6f:70:
12:9d:58:f0:9d:80:cd:70:ae:c8:47:fc:87:10:96:
d6:5d:35:fe:47:dc:be:a6:69:d7:00:a0:f8:f4:43:
0a:44:e9:1a:2d:ed:14:ea:3c:dc:a9:e9:f8:83:84:
b0:4c:0e:9b:ee:a1:db:63:13:16:7d:2b:b6:49:17:
1a:21:38:af:3f:52:27:09:17:47:25:ae:de:73:1d:
ee:2f:43:65:7d:4d:0f:02:bb:21:64:a5:48:5f:1e:
00:a0:7e:21:74:d3:ad:e3:eb:e2:87:25:ca:65:f2:
c1:01:df:9c:b9:87:1e:4e:b0:8b:24:7f:a5:4a:62:
9d:f1:d0:f0:d5:0a:d7:a5:46:50:e4:0d:b8:97:c0:
1d:2f:d2:b0:84:70:2a:0b:c9:94:45:42:61:04:a5:
58:0a:e2:59:b8:e3:58:8b:e2:05:5a:f4:d1:fd:00:
52:fd:31:2a:8a:dd:0d:5a:dd:dd:10:2f:4f:57:db:
22:77:51:87:3d:46:a7:df:be:7a:75:3e:ac:09:d9:
ec:61:90:a4:28:ac:48:c5:bb:29:2b:6e:a6:9e:c3:
a4:24:77:32:f1:12:a4:b4:d0:ac:56:99:db:d4:66:
a8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:68:1B:7E:AE:5B:71:BA:DD:3B:7E:19:6B:FB:53:E7:0D:2B:4B:36
X509v3 Authority Key Identifier:
keyid:81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:13:f4:8a:72:a2:95:66:ca:39:01:00:78:dc:cf:09:05:3b:
9d:54:69:2e:c5:56:5e:81:20:a6:4b:f6:f9:5b:bd:bb:5e:2b:
36:05:c3:86:0b:1b:b5:f5:0c:35:91:22:4f:0e:6b:40:8c:79:
e9:33:f5:13:21:13:1b:57:43:04:a6:76:87:6f:1f:cf:c7:d4:
d4:75:7f:a2:b0:a2:50:f2:db:5d:39:82:57:c3:f0:fd:c0:47:
54:0c:73:b8:d7:21:84:02:09:c1:9e:ac:c4:bb:99:4b:4b:ae:
54:46:03:2c:41:5e:71:34:45:7d:a3:30:39:9f:1d:bd:56:69:
6e:66:ca:04:a4:fc:c5:1e:3c:e4:7c:9f:8b:6a:12:84:a0:82:
88:a6:fd:c0:47:08:d6:09:58:de:eb:04:c6:41:6a:71:f9:45:
b4:2c:44:d2:86:5f:67:f7:1e:ba:67:9e:ef:57:ca:59:f3:1d:
81:59:6f:ed:20:1f:34:a0:56:cb:5e:c2:b6:b8:a2:05:25:42:
7c:e6:73:72:f9:29:f9:4a:fe:6a:72:97:1f:d5:d9:10:1a:48:
11:23:39:48:48:d4:af:4b:57:b3:db:4f:2f:1b:f4:27:ab:db:
6a:5e:77:1f:b2:ce:a9:5f:ee:21:de:6e:22:74:ca:2b:aa:a4:
05:fc:a5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 07:03:21 2026 by rpki-client