
$ rpki-client -vvf rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft
File: gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft (raw, json)
Hash identifier: ooA0qWY03FB7hl2LWrmDWNSAbk8zhGsZ2qdZcYNKchg=
Subject key identifier: E0:E3:53:83:55:2A:7F:B4:63:A6:E4:40:56:47:B4:9C:E1:1E:2B:08
Authority key identifier: 81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4
Certificate issuer: /CN=A917092C/serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4
Certificate serial: 01A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft
Manifest number: 0169
Signing time: Wed 29 Jul 2026 06:18:25 +0000
Manifest this update: Wed 29 Jul 2026 06:18:24 +0000
Manifest next update: Wed 05 Aug 2026 06:18:24 +0000
Files and hashes: 1: gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl (hash: QgI6mOcyycgYLzM6Moh0sPrRuJl4GdbtjMB/FwhddZ0=)
2: E3C4A4EE777E11EFB3F75352C4F9AE02.roa (hash: 50bHfxKSpda4xd/0+Y70XiROBlQW8ceJ16h3JpGhCFI=)
3: 752774D616A111F0B2CDBC72C4F9AE02.roa (hash: suny3D8b6EtNlMBNr60aW4wrzdwyFWYaz0jtIBV7c9Y=)
4: 8E00FBF2777E11EF8D0ECC4EC4F9AE02.roa (hash: 9dQstXImTlCDYkWwNVOE5AaWfqt3N6M6/xI4kYS4UCs=)
5: E27B5862777E11EFB3F75352C4F9AE02.roa (hash: mQtFZnxqBOSE+G0rPNutjCbpOwWmI7n4xbDitTqkJzk=)
6: E1F3085E777E11EFB3F75352C4F9AE02.roa (hash: MlWkxf4J765duArgDZ2QKyAt6xI228MKLb5L4iTwob0=)
7: E3105D04777E11EFB3F75352C4F9AE02.roa (hash: DrKVDvMocLXzLgvXMZCEUVeDoIKw7Tev+2Jtiw1fDsY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl
rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 06:18:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 416 (0x1a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917092C, serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4
Validity
Not Before: Jul 29 06:18:24 2026 GMT
Not After : Aug 5 06:18:24 2026 GMT
Subject: CN=6a699b31-a269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:22:a4:63:35:98:a1:df:0d:90:81:9f:ce:2b:
95:e3:d1:1f:91:67:a5:6a:7e:16:ca:23:df:81:01:
ef:85:da:58:5a:03:96:df:b6:f2:c5:f6:fb:7b:0b:
03:59:c7:3d:9f:4a:00:aa:95:b3:79:9a:fa:ac:36:
b6:d4:2f:3a:bb:17:73:93:49:14:d9:99:10:6c:2c:
0f:3d:c4:32:63:f6:b7:4e:02:10:af:c6:6b:97:fc:
23:2b:7e:a8:5f:4e:d1:8c:86:b1:5e:19:81:6d:dc:
27:de:34:43:f0:ea:fa:cb:ce:d4:dd:f2:ff:c3:b3:
13:16:d4:ba:cf:63:f1:b0:6d:2f:26:39:bb:89:c2:
c6:a9:50:90:4b:c9:1a:ca:c6:f0:5e:45:29:9c:61:
98:f3:f0:22:e0:f9:90:66:82:1e:1e:f0:2f:bb:25:
1d:f5:57:e2:ae:58:a5:2a:fc:1a:ad:ac:2b:44:1e:
f9:52:cd:ec:60:eb:ac:69:29:d1:0b:1c:90:14:00:
b3:78:e3:25:4a:8f:e0:b9:0a:df:ab:91:f6:0c:4a:
a8:a8:21:5d:56:0c:bd:72:e3:50:71:d9:69:68:9b:
91:f0:38:71:73:24:03:f9:ab:d3:67:b3:dd:ae:cd:
e6:22:41:49:46:6f:57:b2:44:1d:5c:da:d5:f6:2c:
56:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E3:53:83:55:2A:7F:B4:63:A6:E4:40:56:47:B4:9C:E1:1E:2B:08
X509v3 Authority Key Identifier:
keyid:81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:1e:7f:23:7b:2d:47:7e:4a:88:59:ec:19:f8:c9:6c:db:c8:
b4:26:f2:d4:f4:01:bf:0e:38:79:6e:ec:35:45:88:d2:d7:b7:
5a:83:bb:03:2d:5a:2c:b9:82:15:1f:5d:7b:bc:b7:63:d1:f9:
60:78:b0:c7:60:66:dd:3f:23:70:3e:01:d0:54:ee:60:58:bf:
89:44:b2:69:3e:7f:90:63:05:2a:c7:93:0e:1a:55:71:c1:18:
42:27:73:1e:81:b6:f5:68:01:3a:32:66:60:ec:e9:f7:d2:3b:
9d:4f:54:75:53:e3:11:4e:3e:57:44:31:3c:0e:12:50:5a:13:
a4:6c:37:da:40:0c:7c:2d:be:11:43:ef:47:f0:29:c1:db:60:
82:94:08:fa:72:39:85:1f:1e:24:97:fd:e0:05:5b:c4:6a:34:
be:be:9c:da:6c:73:56:07:35:18:26:ba:4d:87:13:e6:4a:4f:
db:f5:9a:0d:31:66:03:7a:e8:7b:cd:2c:d3:b8:48:99:b6:80:
de:89:b7:aa:c7:f7:c1:ff:e2:1a:fb:d2:32:1f:39:bb:94:97:
20:22:60:b6:e3:e3:5d:41:27:f7:93:43:85:e1:f9:82:fc:82:
48:14:41:2d:bb:f0:a1:8e:9a:3d:55:0d:c1:6f:cf:88:5c:90:
04:95:9f:41
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzA5MkMxMTAvBgNVBAUTKDgxN0REMzgwMkYyNkU1N0VDRTgyNjVDRTg2MjZGQ0JC
OUM2NEU5RDQwHhcNMjYwNzI5MDYxODI0WhcNMjYwODA1MDYxODI0WjAYMRYwFAYD
VQQDEw02YTY5OWIzMS1hMjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0SKkYzWYod8NkIGfziuV49EfkWelan4WyiPfgQHvhdpYWgOW37byxfb7ewsD
Wcc9n0oAqpWzeZr6rDa21C86uxdzk0kU2ZkQbCwPPcQyY/a3TgIQr8Zrl/wjK36o
X07RjIaxXhmBbdwn3jRD8Or6y87U3fL/w7MTFtS6z2PxsG0vJjm7icLGqVCQS8ka
ysbwXkUpnGGY8/Ai4PmQZoIeHvAvuyUd9VfirlilKvwarawrRB75Us3sYOusaSnR
CxyQFACzeOMlSo/guQrfq5H2DEqoqCFdVgy9cuNQcdlpaJuR8DhxcyQD+avTZ7Pd
rs3mIkFJRm9XskQdXNrV9ixWCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFODjU4NV
Kn+0Y6bkQFZHtJzhHisIMB8GA1UdIwQYMBaAFIF904AvJuV+zoJlzoYm/LucZOnU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDkyQy9FMkMwNzdERTc3
NjYxMUVGQjU1RUQyNzlDNEY5QUUwMi9nWDNUZ0M4bTVYN09nbVhPaGliOHU1eGs2
ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dYM1RnQzhtNVg3T2dtWE9oaWI4dTV4azZkUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MDkyQy9FMkMwNzdERTc3NjYxMUVGQjU1RUQyNzlDNEY5QUUwMi9nWDNUZ0M4bTVY
N09nbVhPaGliOHU1eGs2ZFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATx5/I3stR35KiFnsGfjJbNvItCby1PQBvw44eW7sNUWI0te3WoO7Ay1aLLmC
FR9de7y3Y9H5YHiwx2Bm3T8jcD4B0FTuYFi/iUSyaT5/kGMFKseTDhpVccEYQidz
HoG29WgBOjJmYOzp99I7nU9UdVPjEU4+V0QxPA4SUFoTpGw32kAMfC2+EUPvR/Ap
wdtggpQI+nI5hR8eJJf94AVbxGo0vr6c2mxzVgc1GCa6TYcT5kpP2/WaDTFmA3ro
e80s07hImbaA3om3qsf3wf/iGvvSMh85u5SXICJgtuPjXUEn95NDheH5gvyCSBRB
LbvwoY6aPVUNwW/PiFyQBJWfQQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:15:57 2026 by rpki-client