
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
File: gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft (raw, json)
Hash identifier: UG3qIk8dbOiRm2i0Spq8o8YD/9WzXTi09t7XXVqqQYM=
Subject key identifier: 55:A8:9F:59:1D:85:73:D5:2E:D0:5F:1D:D3:54:68:41:56:65:2C:C5
Authority key identifier: 80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB
Certificate issuer: /CN=A917B4BF/serialNumber=8035090A057327E1200593C20C88C519A45C9ECB
Certificate serial: 0530
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
Manifest number: 04D9
Signing time: Mon 27 Jul 2026 00:55:37 +0000
Manifest this update: Mon 27 Jul 2026 00:55:37 +0000
Manifest next update: Mon 03 Aug 2026 00:55:37 +0000
Files and hashes: 1: gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl (hash: QFXGfj6cLkxSS9VdY3XMcbdx4LbsVrI0CdRvZ+LSmxU=)
2: 44B11A52CAEE11ECBC0B2B7EC4F9AE02.roa (hash: 1ib5ZHiX2c+Ay9rYC1Z/Jru6mlw71yvanvthh2v+7bo=)
3: 8F9CB4448F3511ECB2182782C4F9AE02.roa (hash: PEgw27of0MFqunEKz93iWKmEM4bPPmkxIAHYsCgJElI=)
4: 609BCC763D9311EE9B7BB945C4F9AE02.roa (hash: Z/QK88M5uL5DdEz3ATOtjxO2eM1sapV5OhRj3AH8iQw=)
5: B5BFAB442FE111F19DB441919E833773.roa (hash: P12NrwuEVi8wdx/kCABaTswenwo867fCicXtnmsvepc=)
6: 6873616CCAE811ECBB89015FC4F9AE02.roa (hash: naDu5Ja+nUZ+iaPxJzaO5xNctRuZdG06y3HniPa528I=)
7: A5D75708E07111ED9601E941C4F9AE02.roa (hash: g0/tJc0JW/CRmQeJicEs0HkSx3ITHzBqjIOAcBLM6FE=)
8: 64782D1E607E11ED9CD7EF0FC4F9AE02.roa (hash: eYPDqk6CiCVss4EkZuowgeG638Civi0MVQZq29pSYbk=)
9: F5B3F2F02FE111F183FB5F929E833773.roa (hash: adpxHreCn3jxtJ88fU3gS6rSVCPiga5e2uj5/vlUSuY=)
10: F255CD0A5EC411ED810B8584C4F9AE02.roa (hash: IFm6rzchuTr/Ghy/abEkmajej4rQuJFBH9uiFcUCM2Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl
rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 00:55:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1328 (0x530)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B4BF, serialNumber=8035090A057327E1200593C20C88C519A45C9ECB
Validity
Not Before: Jul 27 00:55:37 2026 GMT
Not After : Aug 3 00:55:37 2026 GMT
Subject: CN=6a66ac89-be52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:1a:6f:6f:01:b8:a2:d0:bc:b6:f0:60:4f:a2:
4d:e4:76:11:f0:31:fc:5f:16:95:86:b1:1f:df:67:
c2:64:79:d0:23:da:2e:02:33:ee:7c:ca:d9:0c:92:
a2:fd:55:02:c7:b3:99:3d:42:ef:43:ae:b9:da:8e:
9b:d5:fd:24:db:aa:d5:b7:e3:ea:27:1b:7e:0b:ae:
e3:14:bd:e1:d1:c4:9f:90:74:1c:fc:25:27:ca:a7:
d0:43:a7:93:70:7a:e1:1e:7b:59:8c:ff:e1:eb:ec:
89:f6:b9:24:e6:18:d3:66:55:c3:c3:7a:0f:e7:f9:
89:37:7a:9c:91:20:30:e6:f8:c0:38:49:68:82:5a:
6d:64:22:2e:0a:64:08:fa:c5:67:6f:73:77:79:23:
f2:d4:a3:fb:e5:54:95:c3:f0:71:7c:aa:d8:02:97:
a2:7f:56:16:fb:6b:76:d5:41:84:42:ce:54:e4:ba:
c4:74:f9:e8:4b:dd:c5:e6:43:34:30:a8:69:2c:85:
ab:20:9a:d2:fd:00:64:5b:6a:18:7a:51:13:11:df:
72:5d:a9:a3:e3:c8:01:62:bb:83:de:a7:04:12:9e:
2c:74:81:81:ed:74:d6:8b:5f:28:80:4d:8b:02:13:
d1:80:91:a9:63:9f:50:15:0b:69:e8:47:c2:c9:25:
b1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A8:9F:59:1D:85:73:D5:2E:D0:5F:1D:D3:54:68:41:56:65:2C:C5
X509v3 Authority Key Identifier:
keyid:80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:49:3c:f5:af:6b:5c:27:24:a4:98:7c:5a:1c:59:22:e1:7f:
dd:ae:0d:27:c9:e9:cc:97:0e:fb:3b:c1:96:0a:14:4c:13:0c:
6b:9e:c5:ab:8a:14:22:ae:f8:d3:37:15:14:24:f5:83:f7:e7:
a7:1f:c6:a8:d6:7a:12:bc:9c:08:21:3c:29:2d:e7:95:32:b9:
95:d3:6e:68:24:f8:eb:da:9a:42:0a:af:28:43:9a:4a:42:d8:
21:d4:9d:fb:b6:7a:e4:a5:16:b1:bd:b2:e3:6f:34:21:ca:5f:
c8:cf:1c:42:d2:e9:23:aa:f1:d5:01:90:7d:cc:1b:1f:4a:62:
b2:5b:27:76:0b:4b:66:98:99:c6:14:2d:ae:fb:94:cc:ff:a2:
0d:76:03:bc:24:ef:51:fa:40:d8:be:7a:bc:b6:8b:ab:2f:a2:
99:78:2a:aa:02:a0:c6:ff:dd:af:4d:a1:8d:89:6e:22:88:64:
f3:8d:ba:5c:09:d1:69:88:82:26:b0:ae:fa:4b:e0:f0:f9:8d:
dc:a1:8d:04:7f:8c:80:1e:3d:99:2b:81:2d:39:05:32:0c:26:
1b:0d:66:97:42:68:b0:56:5f:af:12:5e:d5:cf:c7:d6:9c:42:
38:4b:ae:ba:24:67:50:47:ba:9c:28:b5:73:97:cf:5c:a2:3e:
46:9c:3c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:28:05 2026 by rpki-client