
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft
File: gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft (raw, json)
Hash identifier: YW0a18ObHLC3Jv3AgBy020pCspwR//w1gMQx694/Ayc=
Subject key identifier: 3B:DE:68:6C:25:7A:19:B2:BB:18:B7:34:A1:97:3C:A5:0D:37:6E:07
Authority key identifier: 81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4
Certificate issuer: /CN=A917092C/serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4
Certificate serial: 01C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft
Manifest number: 0190
Signing time: Tue 13 Oct 2026 05:11:55 +0000
Manifest this update: Tue 13 Oct 2026 05:11:54 +0000
Manifest next update: Tue 20 Oct 2026 05:11:54 +0000
Files and hashes: 1: gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl (hash: iy03DpHG8joWaC0aD78IdQ71Ab+aRpaM9aplApRPJd0=)
2: 752774D616A111F0B2CDBC72C4F9AE02.roa (hash: suny3D8b6EtNlMBNr60aW4wrzdwyFWYaz0jtIBV7c9Y=)
3: E1F3085E777E11EFB3F75352C4F9AE02.roa (hash: MlWkxf4J765duArgDZ2QKyAt6xI228MKLb5L4iTwob0=)
4: E3105D04777E11EFB3F75352C4F9AE02.roa (hash: DrKVDvMocLXzLgvXMZCEUVeDoIKw7Tev+2Jtiw1fDsY=)
5: 8E00FBF2777E11EF8D0ECC4EC4F9AE02.roa (hash: 9dQstXImTlCDYkWwNVOE5AaWfqt3N6M6/xI4kYS4UCs=)
6: E27B5862777E11EFB3F75352C4F9AE02.roa (hash: mQtFZnxqBOSE+G0rPNutjCbpOwWmI7n4xbDitTqkJzk=)
7: E3C4A4EE777E11EFB3F75352C4F9AE02.roa (hash: 50bHfxKSpda4xd/0+Y70XiROBlQW8ceJ16h3JpGhCFI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl
rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 05:11:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 455 (0x1c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917092C, serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4
Validity
Not Before: Oct 13 05:11:54 2026 GMT
Not After : Oct 20 05:11:54 2026 GMT
Subject: CN=6acdbd9a-96b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:52:71:c5:30:3b:46:8a:63:e1:11:7f:c2:66:
91:8b:70:84:d3:82:55:80:f1:49:27:42:f7:a2:2f:
47:6c:62:24:94:8e:ef:6c:bd:90:34:24:d7:35:5a:
5e:fe:27:ba:26:bc:00:d5:19:52:3f:1b:b3:d9:3b:
99:ae:4b:0e:6b:37:23:4e:ad:f2:42:ab:ff:22:5d:
5d:5b:45:91:b7:bb:51:31:4b:ab:5a:af:4d:ec:0e:
0d:20:35:f5:d2:43:a3:c8:0b:b9:29:08:f1:e1:dd:
06:bb:cf:43:cf:bb:53:fc:1e:8a:c2:24:e0:fe:54:
6c:17:37:a8:aa:1b:a2:52:ee:22:5e:50:b0:9b:39:
69:4e:7b:c7:85:eb:69:36:38:39:b4:4f:07:71:f8:
ec:a3:6b:14:e4:9e:ac:50:22:2a:b0:f5:a7:2d:0a:
07:16:5c:fa:85:58:76:30:ee:0c:0d:d7:35:5c:78:
6e:5e:ad:64:3e:83:03:55:10:89:22:76:65:ee:7e:
d9:6b:bc:a3:93:87:d0:aa:6c:28:f1:59:0c:cd:e3:
de:64:13:58:04:62:f5:8e:ae:76:cd:ec:50:62:54:
6f:f1:ec:fa:c6:6f:38:ee:43:f9:e3:3f:3b:75:bd:
d3:4e:d3:c6:90:7e:ff:de:ca:ab:47:e4:e3:f2:59:
89:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DE:68:6C:25:7A:19:B2:BB:18:B7:34:A1:97:3C:A5:0D:37:6E:07
X509v3 Authority Key Identifier:
keyid:81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:b6:aa:c9:55:aa:df:57:c4:48:3b:86:58:48:6a:1e:24:76:
21:c9:04:aa:ca:25:a1:42:23:4f:4f:b5:c1:4f:6a:9d:40:b5:
67:9b:cd:b3:40:dc:04:4e:65:3d:4b:eb:3d:af:71:f8:9a:da:
5a:48:16:77:c8:cf:ca:a7:50:a5:43:35:a9:c8:17:c5:23:37:
f8:49:3f:ee:2b:34:85:74:16:9d:0b:69:76:f4:59:dd:68:ad:
f6:80:ea:b6:03:8c:34:6e:f3:3d:c4:5b:60:12:da:b1:19:2b:
4e:ee:7c:72:b4:3e:56:73:0e:22:f9:05:5e:61:25:84:df:f8:
ae:1f:97:a3:cc:ce:50:5a:15:7c:3a:eb:88:50:8e:ea:0e:07:
35:e0:10:11:4a:17:c0:64:a6:2f:6c:ad:9d:ba:dc:e7:c6:d5:
c8:26:86:cf:70:6f:9b:8d:9d:e8:71:f7:83:a4:2a:eb:e4:0c:
55:6f:85:01:1f:a3:ef:fd:90:ef:07:c2:74:02:25:8d:1b:84:
10:15:c2:cb:57:cd:17:af:dd:61:c9:7f:fc:9d:f4:b0:c1:56:
63:04:7f:e4:b3:51:18:ea:39:a2:bb:41:a0:b2:b8:21:a4:a5:
13:e7:b4:c3:ff:a3:e7:3e:3e:ee:69:2c:1a:bd:e0:89:6f:7a:
75:12:0b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 22:39:05 2026 by rpki-client