
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft
File: gaZX6qx1VMq3oaKI9bP-7dilzEs.mft (raw, json)
Hash identifier: 4ygQZsZOITbjOJxgqC15cXOspEBbzahaS+YsvocjKuw=
Subject key identifier: E3:32:09:A4:D4:90:9B:E1:EB:91:87:B5:BE:B9:43:8F:36:1F:4F:A1
Authority key identifier: 81:A6:57:EA:AC:75:54:CA:B7:A1:A2:88:F5:B3:FE:ED:D8:A5:CC:4B
Certificate issuer: /CN=A917DFDA/serialNumber=81A657EAAC7554CAB7A1A288F5B3FEEDD8A5CC4B
Certificate serial: F0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft
Manifest number: EB
Signing time: Mon 21 Sep 2026 04:01:53 +0000
Manifest this update: Mon 21 Sep 2026 04:01:52 +0000
Manifest next update: Mon 28 Sep 2026 04:01:52 +0000
Files and hashes: 1: gaZX6qx1VMq3oaKI9bP-7dilzEs.crl (hash: qJzYkUxWoKqeBsJzZ0CdBOkh0eADNUzlGQAJpgAc4Rs=)
2: A78653B2561F11F09624D128C4F9AE02.roa (hash: tZlTWUfKWexoieRyMVExBKlmUH5v/oDQJXIDDrcReSc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.crl
rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 04:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240 (0xf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917DFDA, serialNumber=81A657EAAC7554CAB7A1A288F5B3FEEDD8A5CC4B
Validity
Not Before: Sep 21 04:01:52 2026 GMT
Not After : Sep 28 04:01:52 2026 GMT
Subject: CN=6ab0ac30-ade9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b1:19:54:d9:73:3d:80:f0:e4:6e:80:5f:92:
de:18:4d:14:36:cf:84:2f:52:9e:98:9e:76:9d:4d:
21:24:02:46:f0:c0:6e:de:34:11:d6:0c:18:13:47:
66:69:be:7e:36:92:d8:c3:56:77:70:1a:58:79:44:
f3:f7:df:63:a5:54:6c:be:1b:7b:56:00:70:4b:ad:
92:14:ba:63:83:1b:99:e0:66:d2:e9:5f:63:84:83:
b2:7b:1b:b0:88:a3:4c:19:d5:bc:02:4d:84:ec:dd:
6f:ac:41:66:a1:6c:cc:4e:64:e8:5f:c5:29:a0:f0:
e6:94:c2:58:90:38:c4:d0:47:fc:57:b0:07:99:02:
8b:6c:94:8b:41:d1:09:5b:44:91:2b:02:be:66:85:
4e:0f:c0:a5:8b:35:fa:6e:70:b4:75:79:a8:9f:94:
37:6e:77:ae:a9:74:c2:4b:fc:0e:30:a2:72:68:28:
ba:e7:0a:f9:be:6d:e3:f7:bb:fa:49:cc:a8:bd:04:
52:34:74:c2:4d:d2:81:57:85:36:d9:c9:07:19:37:
e0:b1:bd:74:96:d7:be:8e:5a:3b:e6:f9:4f:3d:cc:
05:59:7a:51:95:fe:ba:74:84:04:d3:5d:b2:12:bb:
32:dd:8d:8d:fc:aa:b6:da:c8:73:90:e6:1d:8a:a6:
5a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:32:09:A4:D4:90:9B:E1:EB:91:87:B5:BE:B9:43:8F:36:1F:4F:A1
X509v3 Authority Key Identifier:
keyid:81:A6:57:EA:AC:75:54:CA:B7:A1:A2:88:F5:B3:FE:ED:D8:A5:CC:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:d5:96:75:55:07:3e:cc:06:3c:f1:77:22:90:90:f5:a0:8a:
6d:49:ae:d5:90:89:1d:67:1b:f4:93:be:b1:e3:77:7a:06:41:
f9:87:0d:e2:cd:9f:ab:9a:83:6f:54:8f:7c:a8:d3:47:6b:84:
b9:a3:31:c3:70:9c:b2:5a:66:e0:5d:17:fa:2f:69:75:a0:56:
9e:26:35:0f:b4:ef:d3:90:d8:0d:5a:88:51:f9:d7:1a:cf:30:
9d:17:b9:de:03:0f:25:a1:52:39:77:eb:f2:db:1e:93:a6:78:
bc:23:a9:3a:96:2c:2c:56:b8:86:f5:43:33:3e:84:c6:8b:e0:
93:b7:63:02:cd:1d:3b:2f:a5:ca:ce:bc:ae:01:a2:d0:3f:ef:
cd:1c:00:da:d1:cd:cd:49:37:9f:8e:49:82:25:c3:09:d7:0d:
84:8a:2d:47:79:a6:fd:db:a1:46:24:1b:b3:09:1b:f9:e7:f1:
5f:49:4c:83:6d:a3:48:4d:4d:24:94:f1:04:9d:87:a7:e4:b7:
32:95:7f:e5:cc:9b:5b:10:80:6a:0e:80:c0:63:3f:58:7c:0d:
05:74:92:7b:66:ea:a1:87:34:63:f1:72:ff:ea:dd:f7:00:1f:
69:12:81:4e:c9:dd:6f:9e:30:b3:9a:42:5d:7f:8b:45:f6:5b:
b6:f1:88:f2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0RGREExMTAvBgNVBAUTKDgxQTY1N0VBQUM3NTU0Q0FCN0ExQTI4OEY1QjNGRUVE
RDhBNUNDNEIwHhcNMjYwOTIxMDQwMTUyWhcNMjYwOTI4MDQwMTUyWjAYMRYwFAYD
VQQDEw02YWIwYWMzMC1hZGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm7EZVNlzPYDw5G6AX5LeGE0UNs+EL1KemJ52nU0hJAJG8MBu3jQR1gwYE0dm
ab5+NpLYw1Z3cBpYeUTz999jpVRsvht7VgBwS62SFLpjgxuZ4GbS6V9jhIOyexuw
iKNMGdW8Ak2E7N1vrEFmoWzMTmToX8UpoPDmlMJYkDjE0Ef8V7AHmQKLbJSLQdEJ
W0SRKwK+ZoVOD8ClizX6bnC0dXmon5Q3bneuqXTCS/wOMKJyaCi65wr5vm3j97v6
ScyovQRSNHTCTdKBV4U22ckHGTfgsb10lte+jlo75vlPPcwFWXpRlf66dIQE012y
Ersy3Y2N/Kq22shzkOYdiqZadwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOMyCaTU
kJvh65GHtb65Q482H0+hMB8GA1UdIwQYMBaAFIGmV+qsdVTKt6GiiPWz/u3YpcxL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REZEQS83NjEzRjMxNjUz
MTMxMUYwODVERUNFNzlDNEY5QUUwMi9nYVpYNnF4MVZNcTNvYUtJOWJQLTdkaWx6
RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2dhWlg2cXgxVk1xM29hS0k5YlAtN2RpbHpFcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
REZEQS83NjEzRjMxNjUzMTMxMUYwODVERUNFNzlDNEY5QUUwMi9nYVpYNnF4MVZN
cTNvYUtJOWJQLTdkaWx6RXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYtWWdVUHPswGPPF3IpCQ9aCKbUmu1ZCJHWcb9JO+seN3egZB+YcN4s2fq5qD
b1SPfKjTR2uEuaMxw3Ccslpm4F0X+i9pdaBWniY1D7Tv05DYDVqIUfnXGs8wnRe5
3gMPJaFSOXfr8tsek6Z4vCOpOpYsLFa4hvVDMz6Exovgk7djAs0dOy+lys68rgGi
0D/vzRwA2tHNzUk3n45JgiXDCdcNhIotR3mm/duhRiQbswkb+efxX0lMg22jSE1N
JJTxBJ2Hp+S3MpV/5cybWxCAag6AwGM/WHwNBXSSe2bqoYc0Y/Fy/+rd9wAfaRKB
Tsndb54ws5pCXX+LRfZbtvGI8g==
-----END CERTIFICATE-----
Generated at Tue Sep 22 10:09:32 2026 by rpki-client