
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft
File: g2LSOGrBMH7vi7_YdPc45tqjVXI.mft (raw, json)
Hash identifier: A4P7CGNPb6oEhT/sy7P9YkzJ2AD5VSXd6HIVg2YoO9I=
Subject key identifier: B2:DD:3F:32:46:9A:A1:65:1C:D7:4C:75:3B:A6:E2:9E:0A:FD:95:C1
Authority key identifier: 83:62:D2:38:6A:C1:30:7E:EF:8B:BF:D8:74:F7:38:E6:DA:A3:55:72
Certificate issuer: /CN=A917C0F5/serialNumber=8362D2386AC1307EEF8BBFD874F738E6DAA35572
Certificate serial: 0DE5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft
Manifest number: 0DDC
Signing time: Fri 12 Jun 2026 17:50:54 +0000
Manifest this update: Fri 12 Jun 2026 17:50:53 +0000
Manifest next update: Fri 19 Jun 2026 17:50:53 +0000
Files and hashes: 1: g2LSOGrBMH7vi7_YdPc45tqjVXI.crl (hash: 9Et9fmirCXijqyhU2k8yXEy4SC1w7dpmZ8bHMaU6m0o=)
2: D11C8B12DB7111E981104A54C4F9AE02.roa (hash: az5Wu3rdmwem1fp3sJ1LkEbrXCOkEOGTGhmGNaaRozA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.crl
rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:50:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3557 (0xde5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C0F5, serialNumber=8362D2386AC1307EEF8BBFD874F738E6DAA35572
Validity
Not Before: Jun 12 17:50:53 2026 GMT
Not After : Jun 19 17:50:53 2026 GMT
Subject: CN=6a2c46fd-1c68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0b:13:25:a8:2c:94:6c:25:12:66:1f:05:8c:
ad:56:74:98:40:dc:5a:01:70:29:62:6c:9a:f6:e0:
3a:8c:5e:10:f0:b3:20:c1:18:c9:c5:11:4e:1c:ec:
62:a1:85:7c:48:e6:0f:0a:62:9b:c6:4e:1d:eb:52:
39:1d:b9:bc:05:fa:0e:0a:20:5e:3b:3e:c2:65:e6:
75:76:95:88:a6:76:96:0d:a1:aa:cc:c1:34:28:bd:
ec:66:78:7f:dd:d8:3f:17:2d:1e:87:0e:5f:9a:61:
de:66:49:98:99:09:65:74:a9:dc:7e:b1:78:1a:84:
a7:a8:f4:c3:cf:88:b0:ab:c2:68:b7:ca:3e:84:d2:
a9:e9:83:ae:35:62:89:9b:bb:3a:b4:82:18:9d:74:
fe:b1:dc:76:99:1b:ae:a1:57:c9:89:41:47:31:0e:
24:d7:8c:0f:ee:b1:dd:c4:e2:7f:9d:5b:88:20:fd:
f0:e8:ce:71:01:30:46:cb:45:cb:72:ac:f0:b3:f7:
3d:70:cc:e8:a4:71:16:a9:3b:3d:0c:a9:d0:9f:7f:
dd:2e:4f:2d:25:cc:2f:c0:3c:ba:51:68:b9:ee:b9:
b8:ea:e7:79:45:9a:59:db:2c:8d:e4:aa:f4:66:90:
c4:d7:47:45:12:3b:51:ff:a0:5a:73:1c:29:68:3b:
43:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:DD:3F:32:46:9A:A1:65:1C:D7:4C:75:3B:A6:E2:9E:0A:FD:95:C1
X509v3 Authority Key Identifier:
keyid:83:62:D2:38:6A:C1:30:7E:EF:8B:BF:D8:74:F7:38:E6:DA:A3:55:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:d1:e3:d5:20:a0:db:7b:4c:ce:63:6a:74:83:0e:e6:4f:e6:
2c:73:61:4d:7d:4d:45:4f:3a:d4:6c:a8:dc:ae:58:b8:e5:f3:
2d:f9:51:ab:b8:cf:32:f7:b7:0b:0c:46:6a:63:7f:9c:a9:8e:
71:cd:0a:5b:14:43:f8:88:95:18:bc:de:fc:ab:b4:d9:55:0d:
99:68:1e:d2:e2:1b:7b:ab:23:57:c5:5f:40:e9:c6:59:6e:a9:
78:c6:33:3b:54:12:df:c9:9a:66:1b:d8:6c:67:26:01:bd:f9:
d9:43:6f:42:94:df:0d:a6:3e:f2:95:49:8d:16:2f:10:e7:10:
e1:f2:25:8d:ea:97:8c:d7:56:bf:88:b5:8d:a3:30:d3:d2:10:
fa:4b:90:d9:26:f0:d3:17:e5:ee:85:52:5d:ff:0f:80:60:7c:
98:02:6e:08:59:9c:4b:c4:db:e8:c7:bb:be:82:74:6b:5e:31:
85:08:da:97:5b:0f:28:f0:9b:0b:93:b0:b0:af:3c:01:98:47:
8c:da:2f:ec:83:ea:e6:5c:d7:fd:9e:33:80:b7:a8:a2:9c:d2:
70:43:a9:dd:35:76:59:92:03:cf:c0:c7:c3:b8:b9:3d:a3:db:
43:eb:38:1b:33:38:89:98:a2:df:3c:93:98:28:bd:e2:6c:92:
e5:f3:71:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:21:44 2026 by rpki-client