
$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft
File: -gRcYwK4c-iDZfqaAhSZtPPFhog.mft (raw, json)
Hash identifier: tLNzFoCuDXFdZ3zvkhUHhE1lhHHLgNKDfLAmUyKPSgI=
Subject key identifier: CF:E0:3B:B0:27:EE:A4:23:12:AE:CE:AA:92:2C:79:C3:A3:6A:2B:CA
Authority key identifier: FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88
Certificate issuer: /CN=A91853D3/serialNumber=FA045C6302B873E88365FA9A021499B4F3C58688
Certificate serial: 0640
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft
Manifest number: 0620
Signing time: Sun 26 Jul 2026 23:47:02 +0000
Manifest this update: Sun 26 Jul 2026 23:47:02 +0000
Manifest next update: Sun 02 Aug 2026 23:47:02 +0000
Files and hashes: 1: -gRcYwK4c-iDZfqaAhSZtPPFhog.crl (hash: nL+Volsctg0guW9WfZqFs74px/Bjh8UbnvzzBNiWNys=)
2: 36C4FAAAA9FC11EEBEF3E64AC4F9AE02.roa (hash: sXo/EfCy1P1hXgj+XVBKjDkQi4E974lDfTItj2KXQOc=)
3: 52A1A77A6ECF11F0B2785815C4F9AE02.roa (hash: 99SBr5WJIbWwpgEc6hwr9lvi4BLubRre2gvekG03kuo=)
4: 5C9E3A00E83111F0B570A08B79EE528E.roa (hash: ME2B8uuD8K+ZGXPv64QmrsnI4TiGRtKbpWpIh4aJJVc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.crl
rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 23:47:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1600 (0x640)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91853D3, serialNumber=FA045C6302B873E88365FA9A021499B4F3C58688
Validity
Not Before: Jul 26 23:47:02 2026 GMT
Not After : Aug 2 23:47:02 2026 GMT
Subject: CN=6a669c76-0773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e0:fd:3f:bb:a5:b4:93:4f:c2:0d:8a:33:63:
ca:45:cc:43:90:88:d7:6d:37:36:af:3c:ec:4c:f4:
78:88:f6:b7:24:78:59:c9:b8:bf:13:74:f8:75:78:
46:05:7f:de:1f:b6:3b:b1:ba:ac:c1:75:c3:1f:77:
00:1e:7c:cc:aa:8d:65:9a:06:ad:00:80:ce:f0:39:
e3:10:ca:45:0b:7a:79:8b:02:bd:7c:15:00:59:33:
57:12:8e:7a:73:83:37:41:38:b8:90:88:e2:25:23:
c6:5a:08:9a:fc:d5:31:15:70:82:b8:b6:2d:f5:a3:
eb:88:dc:d8:12:49:a5:14:86:47:a0:e1:cf:06:39:
a0:8e:68:29:f7:ed:d1:3b:03:00:6c:9a:fe:fb:e8:
e8:5e:bb:73:64:81:97:01:cb:cc:cd:75:a1:2e:1d:
d9:b9:06:c8:dd:7a:a8:87:e7:e8:68:10:ad:58:d5:
6a:b0:50:e6:f6:41:8a:f3:07:59:91:2e:0b:2b:12:
f4:67:30:e9:70:86:99:8b:73:1d:de:fb:cf:b0:a3:
4b:19:30:e3:09:78:2e:14:ad:7a:6f:24:6c:62:58:
5c:32:15:01:22:74:59:0f:19:d2:30:a5:e8:b3:b6:
24:22:bb:03:9e:66:65:35:0b:c4:ae:54:46:ec:6e:
fd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E0:3B:B0:27:EE:A4:23:12:AE:CE:AA:92:2C:79:C3:A3:6A:2B:CA
X509v3 Authority Key Identifier:
keyid:FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:0f:d0:2e:b6:f3:9d:26:73:8c:12:20:9b:22:4d:dd:45:86:
f6:b6:2b:f5:1a:2c:0e:c7:86:dd:96:a9:42:fc:9a:11:8a:12:
fb:df:eb:dd:75:83:7a:c9:9d:3f:95:3e:d6:f6:98:93:69:74:
19:7d:89:ee:31:82:20:ad:2a:57:67:c4:d3:3d:30:61:90:87:
d4:ce:d7:91:e1:1a:15:5a:20:ed:e6:17:58:7b:f5:9f:a6:73:
4b:dd:1c:19:8b:a0:7a:ff:5c:62:1a:17:b5:34:c8:94:34:5b:
e8:5f:be:12:0b:ed:86:08:5b:b4:2c:e9:3d:ec:03:a7:0a:9d:
99:48:25:aa:ce:08:87:c4:d9:ae:32:a5:10:c0:04:cd:8f:bc:
05:f7:e8:61:f6:8e:62:49:c4:0c:59:da:97:2c:6c:f8:2e:90:
99:9a:a7:43:2e:dd:ab:70:b3:21:d7:cd:45:b2:b7:f5:a0:82:
11:be:47:9a:7a:6d:0e:ff:ba:68:b5:89:09:73:f3:e4:5f:09:
01:92:8c:f9:bd:89:5c:80:29:04:d4:63:1e:40:06:d2:e4:30:
b6:b0:b8:5c:0d:12:cd:aa:69:37:60:8e:30:b5:f3:63:c4:39:
51:35:52:0d:c8:6d:01:43:9b:30:dd:5c:8b:94:1d:a6:6b:6a:
1f:cf:86:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:57:26 2026 by rpki-client