
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEA1/F4DFD01E54E511F1AEEFDFE69C833773/gRRV8Xy_EnQcw8_uMCCc78Y5T4w.mft
File: gRRV8Xy_EnQcw8_uMCCc78Y5T4w.mft (raw, json)
Hash identifier: xTTx0GY/KTQKB1tSRjGSWF7c/abXMiPyJYRbp/RhMew=
Subject key identifier: 53:24:12:C8:12:AD:1F:00:94:FA:22:47:4D:A5:05:F8:9B:41:5C:0B
Authority key identifier: 81:14:55:F1:7C:BF:12:74:1C:C3:CF:EE:30:20:9C:EF:C6:39:4F:8C
Certificate issuer: /CN=A917BEA1/serialNumber=811455F17CBF12741CC3CFEE30209CEFC6394F8C
Certificate serial: 22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gRRV8Xy_EnQcw8_uMCCc78Y5T4w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BEA1/F4DFD01E54E511F1AEEFDFE69C833773/gRRV8Xy_EnQcw8_uMCCc78Y5T4w.mft
Manifest number: 22
Signing time: Mon 27 Jul 2026 11:13:46 +0000
Manifest this update: Mon 27 Jul 2026 11:13:45 +0000
Manifest next update: Mon 03 Aug 2026 11:13:45 +0000
Files and hashes: 1: gRRV8Xy_EnQcw8_uMCCc78Y5T4w.crl (hash: dXXMmtDmHJMb8qG/CRXuy0GAHEGolVX+xLVqHuybKPE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917BEA1/F4DFD01E54E511F1AEEFDFE69C833773/gRRV8Xy_EnQcw8_uMCCc78Y5T4w.crl
rsync://rpki.apnic.net/member_repository/A917BEA1/F4DFD01E54E511F1AEEFDFE69C833773/gRRV8Xy_EnQcw8_uMCCc78Y5T4w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gRRV8Xy_EnQcw8_uMCCc78Y5T4w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 11:13:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34 (0x22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BEA1, serialNumber=811455F17CBF12741CC3CFEE30209CEFC6394F8C
Validity
Not Before: Jul 27 11:13:45 2026 GMT
Not After : Aug 3 11:13:45 2026 GMT
Subject: CN=6a673d6a-9cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7f:0d:49:98:ff:8e:72:09:5d:30:e9:5f:5a:
ab:3c:a9:d5:3a:a2:2a:ac:c7:4a:fd:a7:36:56:04:
1b:f9:17:e2:10:9b:ff:75:21:f9:f1:44:cb:12:53:
34:67:cb:d9:ca:55:12:a7:8f:33:d8:3d:3b:fe:0f:
e9:89:6f:97:5c:55:f8:e8:3e:bd:d7:d1:91:9a:01:
8b:94:98:e0:fd:85:5c:e8:18:3f:7f:a6:2f:d9:56:
a2:19:90:e9:f0:b6:1b:40:d8:8e:1c:30:25:c6:23:
4f:7d:88:14:54:16:92:4f:f6:a8:c5:d6:08:43:f9:
c8:53:c9:61:46:0b:01:4f:c7:0a:9a:0c:a8:e5:4e:
8a:d2:53:c4:08:db:23:12:d3:4c:e0:7a:94:82:3f:
09:b9:20:25:96:71:14:d0:c0:1c:55:04:d2:22:32:
cf:97:1c:8e:65:f5:db:ed:98:d2:35:0e:7e:59:4e:
9d:2d:c2:4b:2d:eb:25:20:42:87:f2:00:e9:12:db:
b6:26:29:cc:fe:42:5a:23:8f:40:53:f0:57:f5:85:
12:fc:0f:65:f4:e2:65:21:58:50:85:26:78:a7:2d:
7c:bc:69:c6:dc:0c:2b:1b:72:2a:d9:66:ba:8d:4e:
0f:9c:2d:59:d8:15:f9:ba:0b:eb:9b:74:b2:ef:af:
69:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:24:12:C8:12:AD:1F:00:94:FA:22:47:4D:A5:05:F8:9B:41:5C:0B
X509v3 Authority Key Identifier:
keyid:81:14:55:F1:7C:BF:12:74:1C:C3:CF:EE:30:20:9C:EF:C6:39:4F:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BEA1/F4DFD01E54E511F1AEEFDFE69C833773/gRRV8Xy_EnQcw8_uMCCc78Y5T4w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gRRV8Xy_EnQcw8_uMCCc78Y5T4w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEA1/F4DFD01E54E511F1AEEFDFE69C833773/gRRV8Xy_EnQcw8_uMCCc78Y5T4w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:73:b8:74:fa:d4:68:97:8f:47:dc:f7:26:b0:ee:71:71:83:
04:e6:d1:08:25:5c:e1:66:33:61:a8:4e:ff:be:46:ad:7c:a8:
21:6a:dd:72:08:ed:fe:cd:fb:74:c3:df:9a:2e:a8:42:3b:d6:
c4:52:d6:27:a8:eb:d4:a0:7f:be:e3:a3:a9:d3:f1:f0:9b:b9:
71:2f:09:53:76:04:36:53:b2:b5:93:12:c3:d6:93:93:a4:6b:
85:45:bd:9b:aa:6f:f5:97:8d:86:8b:82:c1:0a:3d:bd:50:3c:
73:a9:48:b2:6a:fe:81:87:e0:82:51:03:a5:e6:94:69:a0:80:
19:78:75:5e:79:b4:5c:80:01:10:af:9b:de:87:40:7a:f3:bb:
63:ac:3d:5f:45:21:3d:37:86:89:ea:11:d0:ec:71:93:2d:15:
86:db:0a:ed:90:0c:45:c9:13:85:b0:72:b1:44:71:51:4c:50:
e5:95:d2:5e:64:1a:93:ac:7b:f5:b6:b0:6b:55:04:31:bd:b4:
55:4c:7b:63:bb:7f:b5:f8:33:d8:b9:b4:1c:30:43:1d:32:67:
71:40:02:1a:ab:f4:eb:b7:69:56:fc:f6:17:e0:0b:ff:3e:79:
c0:49:72:17:a2:57:f8:93:a7:04:02:01:6a:af:2c:1b:20:19:
c5:e8:18:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:28:08 2026 by rpki-client