
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft
File: gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft (raw, json)
Hash identifier: MFTWh+RjRH52+9MR9gDkMroiQO5yZP901jWmwq7cG10=
Subject key identifier: 83:0F:6D:01:B1:93:24:56:3A:E4:75:73:78:A4:09:83:E2:CC:5C:44
Authority key identifier: 81:6A:47:8D:86:E7:E2:1B:F3:17:85:10:B8:58:53:25:58:34:30:EE
Certificate issuer: /CN=A919D08A/serialNumber=816A478D86E7E21BF3178510B8585325583430EE
Certificate serial: 0220
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gWpHjYbn4hvzF4UQuFhTJVg0MO4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft
Manifest number: 021E
Signing time: Sat 03 Oct 2026 03:25:58 +0000
Manifest this update: Sat 03 Oct 2026 03:25:58 +0000
Manifest next update: Sat 10 Oct 2026 03:25:58 +0000
Files and hashes: 1: gWpHjYbn4hvzF4UQuFhTJVg0MO4.crl (hash: uv0IIFa/DO9IoB91CA+KN8iaWYzGh3C7w4TGFEBCJlw=)
2: 2DBBD9E2788D11EEA502B350C4F9AE02.roa (hash: EEOuLVOFGIUAdOuI2tNMq9b7RGo51bkfuVm6Dgdj9UY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.crl
rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gWpHjYbn4hvzF4UQuFhTJVg0MO4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 03:25:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 544 (0x220)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D08A, serialNumber=816A478D86E7E21BF3178510B8585325583430EE
Validity
Not Before: Oct 3 03:25:58 2026 GMT
Not After : Oct 10 03:25:58 2026 GMT
Subject: CN=6ac075c6-4a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ef:ee:cc:8d:ff:1b:82:19:1b:64:f4:e2:f3:
01:7b:2c:9d:57:a2:0f:74:21:5e:2a:c4:37:ad:46:
32:f8:4e:d2:6a:fd:f5:92:10:52:8c:85:09:67:4f:
46:ac:64:9d:48:34:37:af:3b:91:4b:cc:52:27:5d:
ae:6f:ed:78:2d:f2:84:c7:3f:c8:bb:5a:15:23:87:
ef:74:6a:a4:3b:c9:02:ab:f1:3b:1c:fb:a9:3a:66:
39:6d:87:eb:8d:a1:f8:b1:d8:72:e3:e2:8e:92:3c:
62:63:37:96:ab:a4:c5:87:98:e7:42:78:1d:95:b6:
1e:4b:ec:8c:e6:d1:ef:b7:53:3c:ee:df:00:37:09:
ca:9a:80:95:91:42:87:a9:b7:80:63:d0:53:e3:86:
93:45:25:3a:77:82:86:be:63:c6:84:3b:07:84:88:
6b:69:66:32:13:ec:be:9b:98:1c:30:74:25:b5:61:
6d:11:cf:da:17:eb:bf:c0:9c:d2:2b:a8:b8:1d:91:
aa:4c:2d:77:e0:d9:c0:28:4d:87:38:2d:ef:6a:0b:
7e:5d:f2:1a:ef:a2:54:05:af:fb:48:ed:43:0b:0f:
67:95:57:fd:fb:af:23:51:5d:36:22:55:a5:55:41:
db:3e:a3:34:dc:f3:b0:69:f0:8a:bc:8b:54:62:50:
6f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:0F:6D:01:B1:93:24:56:3A:E4:75:73:78:A4:09:83:E2:CC:5C:44
X509v3 Authority Key Identifier:
keyid:81:6A:47:8D:86:E7:E2:1B:F3:17:85:10:B8:58:53:25:58:34:30:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gWpHjYbn4hvzF4UQuFhTJVg0MO4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d1:49:88:09:a7:ce:10:ee:d8:c2:8c:16:a4:72:43:e3:20:06:
cd:76:e9:d6:1d:1a:08:fa:44:cf:0d:bb:a5:3f:15:ba:12:72:
02:51:86:f8:c2:34:3c:6f:0e:0e:b9:6e:dc:1e:63:93:93:98:
26:bc:74:9b:7b:f5:c6:01:e3:80:23:f0:e1:ed:b1:23:67:67:
20:7a:7a:c6:46:73:5f:f6:62:9f:f6:d5:84:68:73:40:30:9f:
aa:7d:bd:e6:5a:b0:ab:ff:33:48:50:73:ac:86:1c:79:87:52:
7a:4a:aa:d0:6e:6d:21:cb:f2:56:b3:95:95:f6:39:14:26:d9:
02:00:d6:3c:50:1f:f3:79:fa:d7:0b:9f:0b:fb:58:02:0c:99:
97:1c:22:1d:44:2a:3e:58:6a:be:3b:b2:2b:e7:2a:b5:2e:2c:
d7:ea:1a:d1:7e:64:74:5e:24:35:96:93:2c:a2:da:d0:7a:23:
aa:39:6b:6a:d6:67:6e:02:f7:39:5e:85:a8:d5:34:ac:f0:24:
bb:09:c3:f4:3f:99:fa:10:8b:05:f4:6b:94:81:45:40:78:46:
59:42:fd:c8:b3:ff:dc:95:7f:39:7c:15:84:58:37:31:6d:f1:
48:bb:39:56:aa:01:3a:50:b9:2b:cb:b8:a5:5a:10:1d:3a:ac:
6b:ff:38:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:14:57 2026 by rpki-client