
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915B358/E7E564C6F11411F096CD554D4B6F56BC/gMgrnUJmF5jRouALzqsG8-Tho14.mft
File: gMgrnUJmF5jRouALzqsG8-Tho14.mft (raw, json)
Hash identifier: 87Jzjvf+TYkW70yjJjn7MVi5ajf2GHOVwyk2iW9TScs=
Subject key identifier: 24:B7:5D:C7:B1:84:29:F5:C9:F9:23:47:B0:E4:FF:9A:48:BB:34:E2
Authority key identifier: 80:C8:2B:9D:42:66:17:98:D1:A2:E0:0B:CE:AB:06:F3:E4:E1:A3:5E
Certificate issuer: /CN=A915B358/serialNumber=80C82B9D42661798D1A2E00BCEAB06F3E4E1A35E
Certificate serial: A0
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/gMgrnUJmF5jRouALzqsG8-Tho14.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B358/E7E564C6F11411F096CD554D4B6F56BC/gMgrnUJmF5jRouALzqsG8-Tho14.mft
Manifest number: 9D
Signing time: Tue 27 Oct 2026 07:45:02 +0000
Manifest this update: Tue 27 Oct 2026 07:45:01 +0000
Manifest next update: Tue 03 Nov 2026 07:45:01 +0000
Files and hashes: 1: gMgrnUJmF5jRouALzqsG8-Tho14.crl (hash: Id0DcU8nKk5Wo8xxknCGtYhVUdIpaSQdfIf7qiDY9JU=)
2: AF0B10DA76AA11F1B1C1D2366EA30FBC.roa (hash: I8vYr4sK7wPDCmK1D8AG70gSisE8oer5TEFY/kjW/mk=)
3: 6EA43FD8F1C311F0B949DD23396F56BC.roa (hash: f5n4m6nXywP280ii3RvUIrsXSPmcfdVHv8484hmnrW8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B358/E7E564C6F11411F096CD554D4B6F56BC/gMgrnUJmF5jRouALzqsG8-Tho14.crl
rsync://rpki.apnic.net/member_repository/A915B358/E7E564C6F11411F096CD554D4B6F56BC/gMgrnUJmF5jRouALzqsG8-Tho14.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/gMgrnUJmF5jRouALzqsG8-Tho14.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 02:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160 (0xa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B358, serialNumber=80C82B9D42661798D1A2E00BCEAB06F3E4E1A35E
Validity
Not Before: Oct 27 07:45:01 2026 GMT
Not After : Nov 3 07:45:01 2026 GMT
Subject: CN=6ae0567e-2f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:44:65:37:d1:dc:a0:1b:e8:f4:54:15:cd:ae:
ba:ce:0b:57:f7:bb:e1:94:13:74:eb:e3:0c:d7:6f:
79:90:8a:f1:aa:14:dc:9f:bb:dc:8e:e6:99:e9:96:
72:0c:98:6f:9d:50:0d:8a:8f:80:52:d4:85:7d:3e:
32:6f:70:13:ef:4b:61:bd:f4:cf:32:fb:1d:c7:4a:
a1:ae:0a:97:1d:61:70:b8:e6:5c:41:c7:74:8b:fe:
b6:55:28:6f:2f:0a:69:a9:a4:ef:66:b8:1c:d2:06:
a6:b9:9f:8e:43:f3:3c:e0:be:19:15:76:75:8b:02:
0c:c9:34:3d:32:ea:82:a7:e7:52:f5:e4:ab:b2:97:
ae:4f:1b:43:d1:70:f9:13:de:b7:c7:b5:a1:62:1e:
df:4e:ab:c2:95:62:3d:02:85:73:2a:c9:df:93:71:
91:a6:53:8b:34:33:0b:cb:b4:48:fc:9e:e2:82:8b:
3f:f0:af:a0:48:5e:62:3f:c6:c6:ca:bb:54:de:35:
a7:43:4a:da:3a:04:99:5d:64:5f:9a:9f:ea:40:ed:
25:00:57:91:77:29:3c:3f:49:e5:23:07:43:da:92:
90:21:08:60:30:34:fc:f5:5b:37:7f:9c:71:b3:63:
d2:c8:ab:95:85:dd:92:de:e8:a2:5a:e1:39:47:4e:
da:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B7:5D:C7:B1:84:29:F5:C9:F9:23:47:B0:E4:FF:9A:48:BB:34:E2
X509v3 Authority Key Identifier:
keyid:80:C8:2B:9D:42:66:17:98:D1:A2:E0:0B:CE:AB:06:F3:E4:E1:A3:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B358/E7E564C6F11411F096CD554D4B6F56BC/gMgrnUJmF5jRouALzqsG8-Tho14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/gMgrnUJmF5jRouALzqsG8-Tho14.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B358/E7E564C6F11411F096CD554D4B6F56BC/gMgrnUJmF5jRouALzqsG8-Tho14.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:74:df:94:8c:1f:37:b8:c8:02:17:d1:25:af:67:e7:6b:ef:
80:3d:ca:de:58:bc:25:60:e0:b3:5d:91:b7:7a:62:4c:e2:79:
1a:82:49:43:36:b0:fe:41:d2:a4:c9:3e:eb:5e:c8:36:fb:1b:
1f:7b:9d:f6:c3:b4:c9:3e:db:8f:ee:b0:9a:4f:da:c5:5e:e2:
07:99:43:3b:83:d8:4d:a0:a6:1f:57:94:bb:de:22:7f:5f:58:
30:d8:ee:94:63:46:84:fa:1c:0c:20:37:16:09:db:9a:4c:cf:
30:c6:ad:7f:02:24:9a:a5:d9:34:ce:24:aa:7e:f8:ba:9e:1c:
6a:a2:05:5d:95:9b:53:fb:08:f8:a2:3b:dc:55:ff:c7:7d:03:
00:ab:6b:da:fd:06:c1:ed:e5:3f:0a:bb:01:51:b1:e3:48:5d:
b0:23:b7:6a:a8:45:ea:ef:a0:65:30:c7:8b:e1:44:9b:26:12:
96:a3:ec:56:33:f4:9f:3b:1a:e9:3c:16:4d:53:fc:9d:aa:f1:
b0:24:1f:eb:a6:06:89:b6:b2:ea:41:d1:e3:20:04:1a:0f:20:
f0:82:bc:9e:9c:77:b2:35:99:3a:72:5c:46:24:f7:26:13:6e:
79:32:12:15:2b:49:1a:bf:21:98:fb:bc:f6:a7:3a:f9:d7:f0:
85:84:c2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 13:51:25 2026 by rpki-client