
$ rpki-client -vvf rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft
File: ggZKEDz1DwHRlFMAajhs04c5G-Y.mft (raw, json)
Hash identifier: LQ0hu+uNRmInUI0j8+/a6j+etpPIaZFY/Pig70uWlFU=
Subject key identifier: 56:57:11:9A:8F:BD:EE:DC:E9:2C:1B:7E:C3:99:A9:A6:A2:03:ED:F1
Authority key identifier: 82:06:4A:10:3C:F5:0F:01:D1:94:53:00:6A:38:6C:D3:87:39:1B:E6
Certificate issuer: /CN=A919CA1B/serialNumber=82064A103CF50F01D19453006A386CD387391BE6
Certificate serial: 02A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft
Manifest number: 0294
Signing time: Sat 13 Jun 2026 01:44:34 +0000
Manifest this update: Sat 13 Jun 2026 01:44:34 +0000
Manifest next update: Sat 20 Jun 2026 01:44:34 +0000
Files and hashes: 1: ggZKEDz1DwHRlFMAajhs04c5G-Y.crl (hash: j8Dsm0sR96+cFJP912n1wGDV/TykTiTWEzwFpFFshUk=)
2: D318E67076CA11EDAA4FE042C4F9AE02.roa (hash: 4BA5NqaVokjWFwQzUDF6z/aNu276DFdfvc22Mig/Z84=)
3: D3B49A1676CA11EDAA4FE042C4F9AE02.roa (hash: feVu+a8lF5HfZtn0mtMt+vLIfU2xl9dTaoTUFZoVD6I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.crl
rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:44:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 680 (0x2a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919CA1B, serialNumber=82064A103CF50F01D19453006A386CD387391BE6
Validity
Not Before: Jun 13 01:44:34 2026 GMT
Not After : Jun 20 01:44:34 2026 GMT
Subject: CN=6a2cb602-4068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a9:82:4f:88:cb:86:83:22:cb:aa:17:c2:49:
81:d3:52:c9:c9:0f:43:aa:6d:52:ca:17:23:e2:c9:
f1:40:c8:03:07:f0:66:58:ea:7b:bb:5c:a8:89:fe:
ff:45:2e:e2:72:bd:3c:98:f3:df:01:0e:6e:62:75:
72:cb:95:d1:48:fe:a6:42:a0:da:c8:90:d3:3a:16:
98:07:f2:9f:e3:b0:e0:f7:0e:40:6a:01:1f:aa:d7:
c0:15:09:d9:e2:30:59:a9:6e:fb:bf:1e:41:5d:8d:
1a:b6:ee:4b:97:d7:cc:ae:92:87:be:4f:92:c6:eb:
32:95:96:d5:7b:74:91:9d:ad:93:31:1f:fc:1a:20:
fb:c1:bf:30:2f:5d:85:ec:c8:6f:e7:36:f5:ba:3e:
68:bc:d7:41:ae:a2:03:d0:14:a1:e9:8d:c7:e4:40:
e3:28:b0:dc:ca:45:cb:f8:f3:c2:41:2d:90:2b:1a:
68:a2:12:db:54:ab:ac:a8:68:4f:fb:68:e5:97:9b:
76:aa:4f:42:c2:01:c7:bf:c1:0c:30:f0:11:4c:9a:
b0:96:f0:22:0a:33:85:f9:5c:ab:ae:e3:40:51:9a:
cc:13:ce:a4:c2:24:cb:2d:94:0c:2d:9d:76:f1:5d:
e0:d9:00:ea:f7:d3:a3:65:c8:f6:ca:53:cf:17:d4:
67:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:57:11:9A:8F:BD:EE:DC:E9:2C:1B:7E:C3:99:A9:A6:A2:03:ED:F1
X509v3 Authority Key Identifier:
keyid:82:06:4A:10:3C:F5:0F:01:D1:94:53:00:6A:38:6C:D3:87:39:1B:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:3d:9e:80:cb:37:4d:bf:f1:7d:fd:57:b9:63:d9:63:f7:7c:
e3:7d:84:54:a9:50:4e:c1:cc:88:1c:3c:fc:19:83:e3:ac:10:
76:bf:a1:1a:fe:fd:24:16:74:fa:c1:33:48:f3:e5:48:8a:7a:
3e:6a:35:af:7a:cf:c5:85:fa:36:94:a2:0e:a0:13:4a:4a:68:
54:de:b0:e4:25:30:8f:cd:fe:1e:6d:4e:e3:22:0d:2d:01:cc:
7b:20:49:8c:3f:d5:aa:05:bd:b1:22:c7:2a:c8:1d:af:a8:e4:
4a:9e:ca:4f:26:ec:97:67:aa:6a:ee:2a:c5:bc:79:58:72:ec:
16:a7:bd:17:a2:b6:2a:46:88:73:bf:26:dd:0b:2f:0c:e7:0d:
74:85:e6:b6:89:32:4b:42:bb:eb:8c:99:98:66:84:6c:b5:2e:
cb:c9:fc:16:e0:f6:1e:87:2a:e2:3e:07:5f:22:89:70:51:34:
ce:cc:76:d5:c1:88:0d:39:26:6c:bb:43:7d:ad:fb:35:ad:49:
12:46:29:43:bb:19:3a:cc:ec:8f:b4:f1:42:9a:3a:d3:22:3f:
12:c9:70:f9:ac:69:53:d7:98:b6:5e:e3:a1:a0:95:1a:d1:33:
d9:1e:cb:ca:70:98:75:92:36:ff:b6:16:76:8a:d1:4f:17:3f:
e1:81:0c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:09:38 2026 by rpki-client