
$ rpki-client -vvf rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft
File: gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft (raw, json)
Hash identifier: IMSvrlHu2Gz3cRKTlkpMizFVHDMjR6JrOhp+JL6ykIY=
Subject key identifier: 9A:E0:6B:83:AB:E9:60:0C:CB:F7:81:89:1A:65:D8:E7:6A:F3:50:EB
Authority key identifier: 81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4
Certificate issuer: /CN=A917092C/serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4
Certificate serial: 0181
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft
Manifest number: 0150
Signing time: Sat 13 Jun 2026 05:16:33 +0000
Manifest this update: Sat 13 Jun 2026 05:16:33 +0000
Manifest next update: Sat 20 Jun 2026 05:16:33 +0000
Files and hashes: 1: gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl (hash: lNH20MkXbflAs/7cxOhJNvVcjo0TkKt9X13gmriaESc=)
2: E3105D04777E11EFB3F75352C4F9AE02.roa (hash: nm1Ullm2VIIXw5m4XpAUTvY39qoFFv2kQzceO6Rs4JQ=)
3: E27B5862777E11EFB3F75352C4F9AE02.roa (hash: WpLf4AaObe+N5I2HIzmO3ifOs3a8b6pFk0v9kjWfhKo=)
4: E1F3085E777E11EFB3F75352C4F9AE02.roa (hash: tbOGVdr1pGEtRNIPhw+pN+6OYD1Bg4DdAHsAJbGglfo=)
5: 8E00FBF2777E11EF8D0ECC4EC4F9AE02.roa (hash: zpgkPkDvpxrkSLXBoEJusQVoT2JeDQ/RaiKoNpwaUvg=)
6: 752774D616A111F0B2CDBC72C4F9AE02.roa (hash: iGlUh9TWU4eF1gUngLKtyEqTN0brCSv48MjOIvg0+wA=)
7: E3C4A4EE777E11EFB3F75352C4F9AE02.roa (hash: CkipJrZk0lzhAoob2kPQd93c6/y1lAZ0Ra8Fe1utBl0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl
rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 05:16:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 385 (0x181)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917092C, serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4
Validity
Not Before: Jun 13 05:16:33 2026 GMT
Not After : Jun 20 05:16:33 2026 GMT
Subject: CN=6a2ce7b1-be7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ab:ea:53:c7:49:fb:62:e8:ed:82:ae:3e:c2:
c0:e8:b7:12:5f:27:19:87:04:44:a6:0e:be:e0:8e:
3d:83:61:6a:b6:5e:65:7a:5e:d4:85:f5:bd:80:c0:
75:16:14:88:4f:33:c4:13:f3:a5:2c:14:40:84:6c:
98:c9:84:2a:68:74:28:5e:13:03:63:01:43:10:7d:
a7:c8:a6:7a:61:fc:4e:24:e7:7a:5e:66:27:3c:72:
3d:4f:6c:eb:a6:84:cd:5a:dd:34:9e:4a:ef:a6:65:
00:ec:0b:3c:20:42:1e:9e:7c:51:15:77:e8:4e:93:
61:fe:0d:ff:21:9c:07:03:4a:c6:96:10:16:d6:d8:
ab:1b:b6:da:0e:92:75:07:9e:06:63:eb:1d:3e:cd:
a0:d9:ed:f7:84:c0:d0:59:e6:56:6b:38:b5:2a:57:
c1:a5:f2:92:5f:39:d6:fc:68:fc:de:c3:b6:5c:a1:
ad:d7:a5:d7:10:ef:9d:9f:c6:17:c0:c4:5d:b4:f3:
da:9c:0f:f4:b4:1b:e3:28:ac:68:7d:de:46:14:45:
a1:81:17:06:76:99:96:e2:5a:24:95:04:8e:92:b4:
9e:ba:34:be:f3:23:36:51:41:93:8f:8a:27:b5:9f:
1e:b6:d8:c1:5b:62:cf:3a:08:a1:9e:3c:d3:9c:f0:
4a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E0:6B:83:AB:E9:60:0C:CB:F7:81:89:1A:65:D8:E7:6A:F3:50:EB
X509v3 Authority Key Identifier:
keyid:81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:d6:74:cc:b3:55:f1:e9:02:2f:87:2b:6c:85:06:c5:d3:36:
ff:1e:0a:7d:b6:3b:d4:84:a3:30:91:b0:19:f4:e5:8c:a6:99:
b9:fc:e1:29:6d:71:06:56:7c:d8:05:60:72:7a:c0:06:f9:e9:
3f:60:e7:88:c5:e1:72:27:d3:5c:c9:c4:c0:5e:a7:a3:ca:e1:
39:92:f5:66:d4:e3:65:14:66:23:30:4e:0e:24:e1:b2:08:d6:
69:eb:de:50:47:2a:50:66:0b:39:d6:10:d8:d2:a7:05:23:90:
b5:8f:cc:30:77:a4:ac:8a:48:f2:8c:23:f9:7e:c7:f7:2f:53:
5c:91:39:68:f4:25:02:26:9e:4e:e9:13:a3:87:14:aa:e5:75:
1d:8e:bc:43:da:3c:80:81:82:57:b0:79:e9:87:72:84:96:c7:
08:f3:39:6c:e3:e2:70:9f:f5:95:d6:32:23:33:26:b6:b8:ca:
a7:d4:80:61:a8:ce:19:dd:22:ae:64:8d:f1:0c:d1:47:c0:60:
7b:9e:00:41:6c:4b:d4:a1:38:e2:8b:65:bf:54:0d:49:ae:d4:
56:83:5f:b9:31:c7:94:ac:46:e9:c7:7c:75:59:40:ee:c9:fe:
6a:64:7c:b3:3a:da:1a:a9:6f:af:be:2f:33:47:88:f8:72:9b:
49:07:b8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:37:04 2026 by rpki-client