
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft
File: g2LSOGrBMH7vi7_YdPc45tqjVXI.mft (raw, json)
Hash identifier: cqGY2XrQNRWaHknU/58WsE5OKTxFSUFVWwkCO+hYujs=
Subject key identifier: 9D:6E:07:0C:FE:73:A3:76:AD:33:74:3A:C1:CF:16:43:DD:08:6D:F5
Authority key identifier: 83:62:D2:38:6A:C1:30:7E:EF:8B:BF:D8:74:F7:38:E6:DA:A3:55:72
Certificate issuer: /CN=A917C0F5/serialNumber=8362D2386AC1307EEF8BBFD874F738E6DAA35572
Certificate serial: 0DFC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft
Manifest number: 0DF3
Signing time: Tue 28 Jul 2026 17:58:51 +0000
Manifest this update: Tue 28 Jul 2026 17:58:50 +0000
Manifest next update: Tue 04 Aug 2026 17:58:50 +0000
Files and hashes: 1: g2LSOGrBMH7vi7_YdPc45tqjVXI.crl (hash: YfIoQ4qrXArEQjoHCingll0UehviYLiQMvkVjyN+t+A=)
2: D11C8B12DB7111E981104A54C4F9AE02.roa (hash: az5Wu3rdmwem1fp3sJ1LkEbrXCOkEOGTGhmGNaaRozA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.crl
rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:32:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3580 (0xdfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C0F5, serialNumber=8362D2386AC1307EEF8BBFD874F738E6DAA35572
Validity
Not Before: Jul 28 17:58:50 2026 GMT
Not After : Aug 4 17:58:50 2026 GMT
Subject: CN=6a68edda-a0cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:be:98:a5:d4:0e:2f:37:0a:2d:48:e0:f3:a6:
20:dd:9f:cb:8b:0c:2a:30:5a:b2:bb:c4:9c:51:17:
b5:3b:15:4b:92:66:d1:18:3a:4c:04:d1:e4:9e:d5:
00:6a:13:e2:39:ea:47:13:c0:f7:29:51:97:29:aa:
17:e7:88:d5:f1:c2:c1:be:36:aa:17:7f:6a:3a:74:
cc:65:63:e5:55:0e:cc:95:2b:97:40:44:86:dc:36:
d3:49:89:48:2a:b3:78:5c:d8:77:1b:02:ba:05:eb:
83:71:03:9b:ec:fc:3e:dd:4d:b2:5f:03:ed:27:14:
43:95:75:32:1c:83:a6:fa:04:c8:5f:ea:db:d2:ce:
d5:4f:33:e4:8b:2c:f4:30:c2:08:8b:9d:20:7a:eb:
18:e7:70:ed:99:76:97:df:fa:ec:eb:5f:20:22:f4:
cb:de:90:57:9e:c7:fb:23:40:51:f2:d1:89:e8:31:
d2:3b:cc:51:c8:2c:94:ec:01:eb:81:82:be:14:40:
05:1d:a6:ad:d0:d7:23:10:3d:fe:f3:1e:ff:3b:04:
80:15:e4:ee:cb:3d:99:fd:8f:0f:dc:40:ea:25:b3:
9c:e3:9b:c9:f5:b2:02:e4:59:3c:e7:88:9f:b2:77:
e0:99:1b:00:6e:69:03:b2:48:76:57:5e:ae:0d:e0:
3b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:6E:07:0C:FE:73:A3:76:AD:33:74:3A:C1:CF:16:43:DD:08:6D:F5
X509v3 Authority Key Identifier:
keyid:83:62:D2:38:6A:C1:30:7E:EF:8B:BF:D8:74:F7:38:E6:DA:A3:55:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:e0:bd:12:6b:32:28:8a:7f:59:f6:36:54:a2:76:5c:b6:9c:
11:0d:ca:01:72:48:2b:5b:bc:f6:ed:82:f3:f6:e6:f6:c0:41:
70:f5:62:c9:56:59:a9:b7:7c:6e:a0:cb:91:65:59:c6:6f:61:
c4:a3:60:d4:60:95:c6:42:4a:02:91:f0:b7:d6:2b:94:15:9a:
d5:a2:db:e6:1e:71:34:ed:68:2d:86:78:f2:d8:b0:36:bd:cc:
ab:c6:e1:6a:d0:ad:1d:43:68:db:8d:c4:f3:17:cf:66:a4:eb:
ff:99:f0:6e:7f:89:0c:ad:aa:74:56:9e:e4:f0:c1:9b:c1:7e:
36:14:c9:cf:08:2b:66:5f:ab:e1:26:77:f1:bb:d3:a1:b3:d0:
b1:ad:ce:b2:64:36:2a:a0:d0:a5:9d:11:b1:25:7f:d8:7d:71:
c0:94:73:cf:60:3a:5b:5e:8b:e4:00:29:bb:93:b6:b8:5a:8c:
09:6f:40:4b:67:58:bb:a0:d1:c5:20:01:f8:b9:2c:cb:02:75:
d7:63:c7:94:0e:c6:8c:66:17:fb:99:6d:88:b3:2a:1f:bd:05:
83:3e:9a:a0:44:a1:92:0f:a3:52:60:29:aa:6a:54:b7:8d:a6:
09:93:b3:3c:f2:e0:05:95:ae:42:03:44:ee:3a:ec:f2:5f:d9:
60:2c:3f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:29:47 2026 by rpki-client