
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft
File: _gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft (raw, json)
Hash identifier: 1R9nZOfQB6FtvVjaM6llM32751ykigZehrJHvbhhv/Y=
Subject key identifier: 3E:99:97:60:A6:EC:9D:B4:99:29:A4:8A:19:28:68:B1:75:8F:DC:8E
Authority key identifier: FE:05:EF:B7:01:25:D5:20:47:6F:63:BC:60:9F:55:4D:C4:9A:C5:9C
Certificate issuer: /CN=A919A3F0/serialNumber=FE05EFB70125D520476F63BC609F554DC49AC59C
Certificate serial: 0285
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft
Manifest number: 0277
Signing time: Thu 05 Nov 2026 02:49:07 +0000
Manifest this update: Thu 05 Nov 2026 02:49:06 +0000
Manifest next update: Thu 12 Nov 2026 02:49:06 +0000
Files and hashes: 1: _gXvtwEl1SBHb2O8YJ9VTcSaxZw.crl (hash: or2Q1k8KpjKCel4bKS3KRbsV4LtH2YU2y4Gv+dICjNM=)
2: 27D894E81D4011F19325F4941B3D8C67.roa (hash: HG6t6YvzBlAumemzb2gstPcteAeL39jX+YuQ75GGVWA=)
3: 37D03D8CC48111F0BA91643FC4F9AE02.roa (hash: cpXny2w7RispSe37kaJTfb77RVD1gIo1S5cj5Rxm/G0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.crl
rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 02:49:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 645 (0x285)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A3F0, serialNumber=FE05EFB70125D520476F63BC609F554DC49AC59C
Validity
Not Before: Nov 5 02:49:06 2026 GMT
Not After : Nov 12 02:49:06 2026 GMT
Subject: CN=6aebeea3-4664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:be:c8:70:71:8b:b8:b0:41:3b:d2:bd:37:aa:
b9:97:88:21:d5:ca:3b:65:3f:5e:f8:6c:14:63:67:
fb:3f:20:0e:96:7c:9d:59:f7:75:e4:a3:88:02:8f:
67:32:4a:76:b8:40:58:45:96:a8:53:29:c6:c7:16:
54:78:a2:df:7b:41:11:fb:95:d6:9b:ab:ec:70:cf:
4c:e8:32:31:c8:79:e9:58:9e:03:09:2d:8a:dc:57:
02:54:c9:7f:2d:be:dc:76:0e:7c:f4:de:35:5e:9a:
de:38:1c:4e:c6:ae:e9:21:bd:ec:44:04:ae:2c:d1:
17:69:05:b6:5d:c6:13:2e:f9:60:c0:db:6a:7a:70:
6a:b2:1b:57:ff:e6:73:b6:f0:37:7e:6a:8e:d7:7b:
76:c3:7c:09:1f:37:35:3c:c2:89:b2:0f:73:75:61:
4c:f2:06:f0:d9:92:36:d1:19:dc:b7:9b:59:2c:b8:
78:79:50:3a:a7:d6:29:85:85:23:42:18:b5:a8:3e:
1c:99:65:a9:62:56:71:50:da:6b:82:a8:0e:77:a7:
2a:1b:da:48:b7:d4:42:fb:8a:f8:a8:fb:5f:f8:6d:
73:3e:43:ca:6d:7b:3c:09:fa:1a:63:4a:0e:14:7e:
7d:cc:21:8a:8d:17:23:af:af:92:64:06:9c:3a:be:
c1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:99:97:60:A6:EC:9D:B4:99:29:A4:8A:19:28:68:B1:75:8F:DC:8E
X509v3 Authority Key Identifier:
keyid:FE:05:EF:B7:01:25:D5:20:47:6F:63:BC:60:9F:55:4D:C4:9A:C5:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:cb:2d:5a:6e:17:c8:fc:dc:f3:a9:d9:63:d8:cf:81:79:25:
ca:9a:b2:61:5f:5f:11:e6:98:0e:af:83:31:56:74:c7:45:30:
a8:b2:c7:00:6d:b5:be:23:64:bc:91:e6:31:97:14:45:b6:f8:
25:db:0a:bc:c2:fc:e1:bb:b5:30:fa:97:d8:fb:69:8a:b2:25:
f1:56:1f:6b:82:20:ff:ea:47:05:3e:79:85:97:92:d2:c8:5e:
df:5c:ac:2f:31:9e:40:5e:29:49:b7:95:6c:86:43:38:2f:2b:
09:04:ff:d2:b3:df:bc:87:bc:90:44:c8:af:94:3d:1d:c8:bf:
cf:ad:f6:46:ed:e8:32:33:30:3a:02:43:14:15:62:34:99:e1:
1e:2a:8b:48:47:b4:a3:12:87:b6:ca:c1:d9:d6:92:7a:9f:e8:
1b:e9:fb:c9:81:5b:8a:e0:6d:3e:35:8d:62:9e:de:d6:bb:1a:
8d:1a:26:c9:7d:52:54:bf:9d:dc:d5:84:0d:bd:3d:38:ef:73:
cc:d5:05:88:05:90:21:68:14:cc:f6:a5:5c:c8:bc:4b:32:e0:
b3:42:5f:db:5b:dc:f7:63:4b:4b:b2:89:e4:b9:57:9a:61:22:
b7:b3:10:de:41:07:03:25:35:59:36:4f:38:68:d0:98:c2:cc:
b6:41:5b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 12:32:12 2026 by rpki-client