
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft
File: _gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft (raw, json)
Hash identifier: PqDUbuV0uv9WZ/NNUhm6gYZF5uLPV7hW0/XPnlgPHFQ=
Subject key identifier: CA:52:01:43:F3:72:2E:00:EA:AD:D2:7F:7A:2F:FD:D0:29:26:C8:3A
Authority key identifier: FE:05:EF:B7:01:25:D5:20:47:6F:63:BC:60:9F:55:4D:C4:9A:C5:9C
Certificate issuer: /CN=A919A3F0/serialNumber=FE05EFB70125D520476F63BC609F554DC49AC59C
Certificate serial: 023B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft
Manifest number: 022D
Signing time: Sat 13 Jun 2026 02:49:07 +0000
Manifest this update: Sat 13 Jun 2026 02:49:06 +0000
Manifest next update: Sat 20 Jun 2026 02:49:06 +0000
Files and hashes: 1: _gXvtwEl1SBHb2O8YJ9VTcSaxZw.crl (hash: pdO7Q9dB5rSCNH+1YL9H7h2OZMugdY67ZhoZ5PVFC/4=)
2: 37D03D8CC48111F0BA91643FC4F9AE02.roa (hash: cpXny2w7RispSe37kaJTfb77RVD1gIo1S5cj5Rxm/G0=)
3: 27D894E81D4011F19325F4941B3D8C67.roa (hash: HG6t6YvzBlAumemzb2gstPcteAeL39jX+YuQ75GGVWA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.crl
rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:49:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 571 (0x23b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A3F0, serialNumber=FE05EFB70125D520476F63BC609F554DC49AC59C
Validity
Not Before: Jun 13 02:49:06 2026 GMT
Not After : Jun 20 02:49:06 2026 GMT
Subject: CN=6a2cc523-9b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:49:0c:08:ce:dc:1f:56:f8:bf:22:67:6c:e9:
92:65:d7:2e:64:a2:aa:a8:64:3c:3e:44:68:65:a5:
65:c7:e5:cf:30:d3:b1:30:19:78:7d:75:65:d8:3c:
c3:c8:3b:da:26:f7:0b:19:3e:7d:47:a4:57:4d:b8:
33:a7:d8:7c:99:2e:a2:2f:6a:fb:88:68:58:a6:37:
7e:fa:3a:cc:7e:01:cb:23:57:4e:fe:c7:40:a3:32:
ba:c8:6a:b4:b2:b5:7e:cf:a1:27:ea:24:3e:93:e6:
30:85:01:2e:59:09:56:93:f0:f5:f3:cf:4a:b6:2c:
52:ff:a4:3c:f8:bb:97:48:09:2f:ac:0c:ee:d8:47:
aa:58:c5:31:9d:ff:a1:5a:a9:bc:e3:ca:70:95:29:
1d:b5:1b:41:6c:3c:fc:29:cb:5c:a4:98:f9:8e:9b:
6a:6b:b6:19:65:07:92:df:97:96:98:d6:a5:d6:01:
4b:65:9b:52:15:fd:c6:d8:29:cd:da:37:40:42:95:
54:0e:1a:13:e8:25:02:3f:a5:ce:51:cc:54:5c:89:
7f:09:fa:bb:41:02:dd:77:d1:8d:59:e3:36:bc:cc:
66:be:e8:05:1e:06:44:3f:ed:cf:57:26:a4:0e:c7:
6f:ef:46:97:7b:7a:5f:ee:92:39:88:3e:c4:60:c8:
46:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:52:01:43:F3:72:2E:00:EA:AD:D2:7F:7A:2F:FD:D0:29:26:C8:3A
X509v3 Authority Key Identifier:
keyid:FE:05:EF:B7:01:25:D5:20:47:6F:63:BC:60:9F:55:4D:C4:9A:C5:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:98:59:ce:3a:bb:c8:cd:b8:e9:5f:4c:fe:67:fb:27:3a:b9:
39:0d:66:c6:64:66:08:fa:68:2b:7f:4f:73:f5:72:65:09:20:
5b:23:02:fe:8e:a1:18:68:f6:49:b0:7e:fc:9a:6e:94:76:a7:
62:dd:41:8a:72:2a:fa:70:35:3f:e3:ab:4b:4b:82:89:fe:50:
41:1f:99:6d:b1:24:71:07:c5:9f:c2:ef:57:60:d3:9f:ed:32:
9b:1e:6e:5b:2b:c4:1a:ed:9f:d6:54:99:6e:56:7d:4a:9d:f9:
84:1e:ee:be:54:8f:dd:6e:ee:e3:78:41:3d:d3:28:fc:7e:bc:
ae:af:ee:70:14:07:01:f1:02:6b:e7:b9:ce:72:1b:ad:6c:67:
bc:7b:60:f4:19:89:0a:c4:3b:9b:07:52:8e:b1:75:30:0c:9b:
90:e0:62:9c:93:68:30:47:70:70:e3:c2:0b:9d:81:26:aa:1e:
f3:b0:ee:82:6a:1f:cb:4f:84:ac:02:1a:14:bb:1f:9a:33:06:
1b:70:10:f7:ff:99:25:b6:f3:1f:2a:40:95:7b:0c:12:61:20:
9e:2f:47:1a:c6:15:0b:5f:20:3b:21:f1:f9:37:71:46:58:88:
0a:ce:80:2f:d7:75:a4:d2:16:d0:36:ea:79:97:42:cf:d8:93:
24:18:7a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:35:22 2026 by rpki-client