
$ rpki-client -vvf rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.mft
File: g1KnNOghRPMixQtyik92WjPXIlY.mft (raw, json)
Hash identifier: ackjz9SqFGMz6RvbthVqNqWF1pJKMMu2YAFVsPNkxMY=
Subject key identifier: 5F:48:84:12:86:A4:72:CD:82:C9:26:26:E8:4A:B1:2D:01:16:0D:06
Authority key identifier: 83:52:A7:34:E8:21:44:F3:22:C5:0B:72:8A:4F:76:5A:33:D7:22:56
Certificate issuer: /CN=A917357E/serialNumber=8352A734E82144F322C50B728A4F765A33D72256
Certificate serial: 02CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1KnNOghRPMixQtyik92WjPXIlY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.mft
Manifest number: 0786
Signing time: Sat 04 Apr 2026 23:35:51 +0000
Manifest this update: Sat 04 Apr 2026 23:35:50 +0000
Manifest next update: Sat 11 Apr 2026 23:35:50 +0000
Files and hashes: 1: g1KnNOghRPMixQtyik92WjPXIlY.crl (hash: zA2Ce+1DKwwfEAa1NEcYBdCIUKHamsoyCll0gRQgvv8=)
2: 21E1440A1E7711EFB69BE070C4F9AE02.roa (hash: Ehn7aSib3b8B+hpkrpsP8+4lO11Z+1C3P4j81GdJzF8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.crl
rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1KnNOghRPMixQtyik92WjPXIlY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 23:35:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 718 (0x2ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917357E, serialNumber=8352A734E82144F322C50B728A4F765A33D72256
Validity
Not Before: Apr 4 23:35:50 2026 GMT
Not After : Apr 11 23:35:50 2026 GMT
Subject: CN=69d1a056-7959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4d:2f:cc:13:8b:58:65:18:a7:53:c5:bb:76:
f3:8b:af:33:c6:04:ac:d7:37:09:32:55:6f:7a:76:
78:6d:7d:f9:00:18:cd:3a:28:23:33:fc:60:2b:bf:
5d:5c:63:d5:86:75:a3:95:44:d0:ce:78:22:94:17:
20:f4:54:47:94:86:60:56:48:e7:75:11:04:71:b7:
4a:c7:08:9b:25:11:e5:2c:19:a2:79:bc:03:70:78:
88:91:1a:cf:79:c5:fd:08:66:0f:51:d7:d8:6d:4a:
6f:16:90:fd:c6:64:ef:31:3a:e5:bb:36:c3:03:47:
7a:5b:5e:2a:2a:53:94:68:03:a6:21:03:25:7c:d3:
8b:d6:94:6d:5c:63:b8:fc:be:ad:bb:d3:0b:ca:74:
28:f7:d7:69:02:e5:25:49:c8:37:5f:ef:7e:63:ae:
35:28:fd:27:7e:cf:f1:5d:db:6e:c3:2e:b7:a5:d5:
8f:c4:4f:83:85:0d:b1:0c:4f:c6:3b:ad:02:35:7b:
e2:e3:b6:1e:c0:c4:67:a8:ba:e6:58:fc:be:0e:4a:
ee:4e:77:f9:8b:89:0d:50:bb:e3:90:50:70:36:71:
6a:63:ab:10:74:8a:da:ff:57:02:56:9c:ca:5b:0f:
45:8b:00:92:02:ad:a5:6f:22:9b:d2:ba:2a:19:7e:
fc:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:48:84:12:86:A4:72:CD:82:C9:26:26:E8:4A:B1:2D:01:16:0D:06
X509v3 Authority Key Identifier:
keyid:83:52:A7:34:E8:21:44:F3:22:C5:0B:72:8A:4F:76:5A:33:D7:22:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1KnNOghRPMixQtyik92WjPXIlY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:19:f3:95:93:8d:4e:35:64:8e:af:2e:42:36:2f:88:ad:3b:
c6:36:1b:60:e2:43:e9:8f:ed:12:4b:3f:7b:90:5c:74:60:84:
24:03:70:5a:c4:0a:0d:38:11:dc:9f:7d:f7:3a:d3:e3:71:16:
ac:82:37:a5:84:45:70:33:e4:f2:d6:7a:b1:10:0c:56:f3:cf:
89:64:3e:93:9c:eb:df:41:c9:a8:52:16:cf:99:78:78:4d:05:
ce:e3:f0:c2:17:20:af:87:35:6b:ac:a8:34:87:6b:dc:7b:61:
12:dd:67:b2:85:60:3b:df:86:79:6c:0a:5f:cc:1d:2c:97:02:
6d:a5:b1:f8:3f:89:35:b9:95:2b:b1:13:55:1d:62:55:7c:7d:
1f:41:41:54:7a:92:14:74:1f:df:c1:7f:ab:ea:d9:3f:6d:77:
67:60:0d:0c:0f:0e:1d:09:06:51:60:84:57:a4:e3:df:3c:dd:
d4:6f:01:80:8f:24:40:6a:f2:f3:79:98:79:6f:c8:de:91:b3:
3d:e7:2b:41:dd:95:75:1b:c2:5a:3e:87:d5:49:f7:1c:54:7e:
0a:57:2e:9b:8e:3f:d6:be:e6:98:16:c7:59:da:d0:32:1c:79:
34:25:cc:17:2f:e7:61:bf:db:0d:49:5b:26:83:5a:cc:d4:b5:
0b:fc:31:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:58:28 2026 by rpki-client