
$ rpki-client -vvf rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.mft
File: GEQqEWwwEBvsjIn0UBl4wJIDa7g.mft (raw, json)
Hash identifier: ubLKajlZa0Q7qYFo+9R3PlZQ5GIcQz1B/wb4B4QVaPA=
Subject key identifier: 51:05:16:E0:55:18:06:EF:06:8E:96:2D:FA:C2:1F:E6:C0:B7:AA:3C
Authority key identifier: 18:44:2A:11:6C:30:10:1B:EC:8C:89:F4:50:19:78:C0:92:03:6B:B8
Certificate issuer: /CN=A917EA7F/serialNumber=18442A116C30101BEC8C89F4501978C092036BB8
Certificate serial: 0862
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GEQqEWwwEBvsjIn0UBl4wJIDa7g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.mft
Manifest number: 0854
Signing time: Fri 12 Jun 2026 20:52:56 +0000
Manifest this update: Fri 12 Jun 2026 20:52:55 +0000
Manifest next update: Fri 19 Jun 2026 20:52:55 +0000
Files and hashes: 1: GEQqEWwwEBvsjIn0UBl4wJIDa7g.crl (hash: 30q6lPRWabTVOHaVmzgRMviD7dbaFLP831IQ4PpCZKU=)
2: 18E7B6C80B5B11EB80C8B15FC4F9AE02.roa (hash: 6HBwnAdSSFtnjaGJ508w7iBxRC6Y0SWJe0qRKEHH2Og=)
3: 1994E0780B5B11EB80C8B15FC4F9AE02.roa (hash: FnoWXzNWJjjpdfPVYZMnHGoZQsfGs0O6OuWkpNH6Ba4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.crl
rsync://rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GEQqEWwwEBvsjIn0UBl4wJIDa7g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:52:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2146 (0x862)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917EA7F, serialNumber=18442A116C30101BEC8C89F4501978C092036BB8
Validity
Not Before: Jun 12 20:52:55 2026 GMT
Not After : Jun 19 20:52:55 2026 GMT
Subject: CN=6a2c71a8-8779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7e:e9:1c:c9:6a:1e:54:5c:e2:9e:ab:94:44:
a1:8c:3b:fc:88:20:ce:62:b9:0a:9c:cb:98:23:4e:
7f:70:cc:4b:65:06:70:3c:eb:a6:7c:8b:05:8d:60:
0e:48:e2:1f:b4:bf:1a:e7:7c:52:45:75:b4:eb:ae:
22:f2:f3:10:c6:59:c0:41:d7:51:6e:e6:ac:fd:51:
3f:e7:c9:68:4a:47:ec:03:4c:bd:9f:25:3f:94:c1:
00:b5:bd:65:74:a0:b0:5d:33:7e:1b:a8:4e:e0:fb:
f9:15:99:d9:00:d4:54:58:66:39:35:82:c6:a0:47:
f8:e6:b6:21:99:e6:59:16:d0:4c:aa:21:5f:c0:ff:
6f:33:ff:57:69:ee:75:f1:f8:3e:3a:b4:0c:91:d8:
8a:de:a8:08:d5:a2:0b:b9:b7:c6:83:1f:ad:a9:87:
4b:de:ba:24:95:73:0a:3e:4f:76:0a:0e:8b:9c:18:
91:27:17:03:bd:4c:e1:a7:77:fc:27:2b:60:c7:77:
72:58:05:aa:64:e1:52:cb:af:81:64:b8:88:e9:d4:
a8:f6:9c:4a:b2:25:a6:d1:0c:d3:e5:d2:c0:7f:ab:
7f:96:fb:90:ac:87:c1:23:d3:aa:f3:8a:73:40:67:
4c:ef:99:61:6a:37:26:32:8c:5e:d3:e3:6a:cd:9a:
c0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:05:16:E0:55:18:06:EF:06:8E:96:2D:FA:C2:1F:E6:C0:B7:AA:3C
X509v3 Authority Key Identifier:
keyid:18:44:2A:11:6C:30:10:1B:EC:8C:89:F4:50:19:78:C0:92:03:6B:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GEQqEWwwEBvsjIn0UBl4wJIDa7g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:a1:39:c2:9b:72:c1:92:2f:0a:f0:fc:7e:3a:b6:49:f1:f6:
46:50:55:37:77:61:db:f3:3d:fa:c9:58:9b:ab:6c:6c:87:5b:
95:c4:3b:58:16:fc:d8:6c:56:09:75:f8:32:7f:d1:41:2c:f8:
14:54:66:19:69:cc:77:8c:71:22:c8:01:8a:3e:ff:22:f9:49:
77:cf:2c:5d:11:f8:1a:fa:ee:95:15:2e:b1:da:0e:f7:f2:36:
e5:39:47:f7:fe:23:4f:eb:49:00:6e:8f:66:7e:5e:1d:be:f6:
48:84:c9:ef:1b:af:0e:2b:ca:46:e6:6b:5b:0c:70:df:9b:a9:
27:cb:0b:b4:18:4b:43:f9:5e:05:45:aa:c1:4d:ab:b2:d7:03:
88:c7:4b:7a:2d:2b:34:b4:90:76:f1:10:96:1b:1a:bb:b5:1f:
0b:14:8f:00:92:b4:1d:7b:9c:9c:3c:c6:dd:99:c3:94:0d:73:
97:78:af:0a:06:6a:f2:8b:72:8f:71:7f:11:10:61:9c:9f:ed:
35:45:d6:c5:f5:c4:94:bb:c4:ec:e0:a5:d8:aa:5e:91:e9:50:
d1:3a:ec:59:1d:00:1c:90:5b:61:d0:c4:c2:b4:a1:4a:5a:2c:
a6:37:ce:91:6e:a1:68:9e:22:77:49:fd:3e:3b:11:3c:f3:3e:
86:e0:e9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:53:04 2026 by rpki-client