
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft
File: Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft (raw, json)
Hash identifier: HNlSaNSwukpYJCaMHKhnzS4T6HmEJ5nkMR3W7a5bdVs=
Subject key identifier: 1E:6F:77:0B:E6:C2:79:92:28:BD:20:93:C7:E4:AD:E2:DB:50:BB:C6
Authority key identifier: 1A:0F:78:6F:11:B8:E1:7D:45:DE:1E:DC:E6:1E:16:00:DD:49:30:A4
Certificate issuer: /CN=A917E951/serialNumber=1A0F786F11B8E17D45DE1EDCE61E1600DD4930A4
Certificate serial: 0292
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft
Manifest number: 0288
Signing time: Wed 23 Sep 2026 01:42:34 +0000
Manifest this update: Wed 23 Sep 2026 01:42:33 +0000
Manifest next update: Wed 30 Sep 2026 01:42:33 +0000
Files and hashes: 1: Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl (hash: 8A5ifOwX81QF9lL1LONmzmsDI5MQiNDIyFzZlgHDZ1Q=)
2: 59ADC606EBDA11F0868F86546C6F56BC.roa (hash: qZRxpIUeyrMWdNVkLIbZ0zgXRnmpkIFE5ZM4cqQSBes=)
3: 952F87FAEBDA11F082D0705C6C6F56BC.roa (hash: D0d40r76hbBLhGBP/ux7xiJsAzvMXm0Lp9fwpdqFW3s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl
rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 01:42:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 658 (0x292)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E951, serialNumber=1A0F786F11B8E17D45DE1EDCE61E1600DD4930A4
Validity
Not Before: Sep 23 01:42:33 2026 GMT
Not After : Sep 30 01:42:33 2026 GMT
Subject: CN=6ab32e8a-0800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:38:e0:d6:19:f9:00:6d:1b:7f:74:ca:3d:d7:
69:86:03:07:ff:a3:4a:f9:34:09:e3:69:9d:2a:56:
ff:8c:a9:39:ff:7d:83:82:59:05:c5:7e:90:fa:62:
de:f8:e1:e3:c4:09:fa:b3:1c:23:1c:9f:67:1e:53:
3a:10:5b:ca:0d:f4:2c:10:da:15:a2:f8:33:87:73:
d3:7e:bc:2b:18:37:84:74:06:e1:08:93:83:36:73:
45:62:91:c4:0f:fb:2d:cf:a9:bf:a4:45:bf:1d:74:
44:ae:8c:a6:28:e0:58:45:43:9b:4b:ec:3c:fb:cc:
6e:dd:19:2e:f8:bb:4b:c8:3d:ae:d8:b6:ca:03:bc:
b4:97:2f:42:c3:d2:98:02:3f:05:d0:ff:f7:aa:2e:
6f:5a:86:7b:7c:1c:32:52:d7:03:0e:09:60:e7:cc:
4f:9b:fb:f2:ed:3e:08:11:1f:31:35:cf:65:0f:c3:
3c:52:73:60:21:5d:28:96:b1:b2:4d:f5:3a:82:ca:
98:26:72:22:40:b3:35:17:c1:52:a6:3a:06:f5:10:
a0:9e:55:a7:28:43:d2:17:0d:e7:12:b5:0a:aa:62:
fd:70:26:a2:1c:58:29:55:7e:83:21:4c:d0:35:9d:
f6:f9:ce:0a:56:96:88:86:47:91:cf:98:9d:3c:a8:
a4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:6F:77:0B:E6:C2:79:92:28:BD:20:93:C7:E4:AD:E2:DB:50:BB:C6
X509v3 Authority Key Identifier:
keyid:1A:0F:78:6F:11:B8:E1:7D:45:DE:1E:DC:E6:1E:16:00:DD:49:30:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:bd:e4:18:96:74:00:ad:f7:38:d6:b8:d6:e3:8d:f4:2c:ec:
2d:90:c6:89:f2:c5:77:06:51:07:da:2a:69:fb:fa:b9:41:6b:
9d:fb:bf:b9:b6:cb:47:3a:25:ba:90:f7:ca:68:3f:00:43:b0:
21:7a:14:0d:74:dd:9f:9d:a2:87:08:a1:7a:b7:84:b1:27:c6:
67:d3:b8:ec:85:f4:9f:a0:8a:9c:6d:9f:88:19:99:6b:4e:fa:
6b:a7:f0:5d:a5:83:1e:08:a6:3d:4d:5e:df:7f:06:64:67:35:
49:6b:12:e1:48:d5:b3:dd:0f:8e:72:6d:7c:2e:7f:3a:57:af:
dd:01:ea:29:f8:27:ca:a3:fc:b0:31:01:14:5c:9b:eb:a7:5b:
4b:ef:cd:52:fe:b2:ad:38:fb:a9:0b:28:5d:51:93:ce:07:45:
52:15:37:4d:a9:ea:01:2a:d4:df:55:f8:78:77:b8:08:18:b0:
72:38:3d:24:ea:1a:c7:64:02:58:0d:28:92:0d:b6:4f:8f:08:
4b:2c:c1:c0:d4:5f:01:66:58:31:13:61:ce:db:53:83:59:5c:
7f:13:db:f8:ea:13:81:38:ff:a2:e4:e5:63:d6:03:92:6c:78:
ad:b4:24:47:d9:39:42:ec:10:01:bc:dd:a8:e4:eb:43:56:c6:
5e:f9:79:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:46:31 2026 by rpki-client