
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
File: gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft (raw, json)
Hash identifier: Cv10RWg55pCE6yTlMUIOcTQmAmgcm/3BZnN8mRyk3+E=
Subject key identifier: 1C:77:CD:50:88:26:2F:16:75:45:AC:A2:5D:80:61:46:03:98:EC:07
Authority key identifier: 80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB
Certificate issuer: /CN=A917B4BF/serialNumber=8035090A057327E1200593C20C88C519A45C9ECB
Certificate serial: 04FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
Manifest number: 04A6
Signing time: Thu 16 Apr 2026 23:59:08 +0000
Manifest this update: Thu 16 Apr 2026 23:59:07 +0000
Manifest next update: Thu 23 Apr 2026 23:59:07 +0000
Files and hashes: 1: gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl (hash: Oh7MkOVaDmRGI0aPaIRDAbjzNNfe19hMYeOzzVYmLrc=)
2: 6873616CCAE811ECBB89015FC4F9AE02.roa (hash: naDu5Ja+nUZ+iaPxJzaO5xNctRuZdG06y3HniPa528I=)
3: 609BCC763D9311EE9B7BB945C4F9AE02.roa (hash: Z/QK88M5uL5DdEz3ATOtjxO2eM1sapV5OhRj3AH8iQw=)
4: F255CD0A5EC411ED810B8584C4F9AE02.roa (hash: IFm6rzchuTr/Ghy/abEkmajej4rQuJFBH9uiFcUCM2Q=)
5: B5BFAB442FE111F19DB441919E833773.roa (hash: P12NrwuEVi8wdx/kCABaTswenwo867fCicXtnmsvepc=)
6: A5D75708E07111ED9601E941C4F9AE02.roa (hash: g0/tJc0JW/CRmQeJicEs0HkSx3ITHzBqjIOAcBLM6FE=)
7: 64782D1E607E11ED9CD7EF0FC4F9AE02.roa (hash: eYPDqk6CiCVss4EkZuowgeG638Civi0MVQZq29pSYbk=)
8: F5B3F2F02FE111F183FB5F929E833773.roa (hash: adpxHreCn3jxtJ88fU3gS6rSVCPiga5e2uj5/vlUSuY=)
9: 44B11A52CAEE11ECBC0B2B7EC4F9AE02.roa (hash: 1ib5ZHiX2c+Ay9rYC1Z/Jru6mlw71yvanvthh2v+7bo=)
10: 8F9CB4448F3511ECB2182782C4F9AE02.roa (hash: PEgw27of0MFqunEKz93iWKmEM4bPPmkxIAHYsCgJElI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl
rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:59:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1277 (0x4fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B4BF, serialNumber=8035090A057327E1200593C20C88C519A45C9ECB
Validity
Not Before: Apr 16 23:59:07 2026 GMT
Not After : Apr 23 23:59:07 2026 GMT
Subject: CN=69e177cc-f691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d1:dc:1a:c3:9f:95:ed:46:2c:85:23:f6:70:
57:e0:b0:e1:9c:26:ec:79:d0:e3:d9:c9:11:25:5c:
ad:e2:d0:e6:b7:25:16:bf:6f:d1:7b:ab:f4:64:1a:
56:92:8b:54:12:fc:d3:1f:c8:be:9d:5e:88:07:35:
8c:01:7f:57:79:28:2d:45:cc:9e:e1:b2:98:71:47:
db:1e:41:a0:9b:ec:9e:f7:e6:46:58:be:29:3d:c9:
29:a0:31:fd:80:ca:c7:da:27:fe:e0:ff:b1:68:79:
39:3d:06:a6:69:97:64:00:59:58:c4:5d:49:0c:60:
19:35:88:d4:1c:d8:e9:0b:bc:0f:7f:a7:5f:eb:15:
71:8f:4f:22:3c:f6:89:e4:e5:b7:80:c1:e8:c6:08:
96:58:7c:f1:1c:cd:aa:c1:56:a9:6c:41:b4:a5:e7:
fb:98:51:72:0e:f1:a3:81:1f:31:3e:6e:a3:47:45:
6a:38:c2:9c:50:85:b2:23:f4:84:6d:2a:7d:f7:68:
3a:42:ab:e6:9a:43:c5:b2:84:ed:25:d0:6c:e9:38:
1a:4f:88:fa:b1:52:3c:4e:cd:f8:9a:f5:6c:15:ae:
27:cf:8e:41:e9:12:18:9c:c5:bb:96:74:ba:55:9b:
f1:5b:5c:ee:b4:64:38:0e:ff:f2:b0:7a:12:f4:92:
0d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:77:CD:50:88:26:2F:16:75:45:AC:A2:5D:80:61:46:03:98:EC:07
X509v3 Authority Key Identifier:
keyid:80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:6a:16:ab:6f:ba:fc:cd:41:72:b7:4d:3a:e4:3a:e7:55:a5:
cb:d1:7a:45:68:c3:e6:ac:c5:ac:08:61:ee:7d:af:99:a7:bd:
1c:f9:4a:97:8f:26:f6:a5:ef:47:c0:2f:c9:d1:fc:6a:f5:f8:
ad:26:f3:30:be:32:36:ca:13:71:ad:59:97:99:ed:86:9b:59:
a7:d6:21:e6:46:72:6e:e1:b3:bd:25:0b:c0:39:75:be:96:d5:
2b:7e:91:98:e9:e3:9b:08:cc:dc:93:24:96:73:53:45:a9:1d:
31:62:b2:ad:db:2a:fc:af:f3:9b:7a:17:e7:2a:fb:b7:68:ff:
03:c0:8c:0f:44:2f:a5:99:3b:da:47:e7:63:5e:f7:c5:44:17:
2a:28:70:cd:cf:de:c7:75:fc:0e:95:4a:33:0b:03:05:f8:03:
dc:19:cf:9f:2e:3b:49:b7:55:d5:0f:e6:55:4c:bd:6e:67:a2:
0e:85:9c:28:8f:e4:eb:38:56:f5:71:73:e0:ab:6d:05:02:19:
c3:06:59:0f:99:77:a2:75:f6:10:a3:44:22:aa:e2:b8:19:71:
75:54:37:ce:e1:b3:2f:9e:38:38:9a:aa:cc:a6:a9:6e:0b:07:
40:59:5e:f7:ba:97:c1:49:01:4c:26:a3:d5:fe:98:a3:2c:20:
d8:6e:9f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:49:31 2026 by rpki-client