
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft
File: ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft (raw, json)
Hash identifier: hvK+LDZRt/0anqDr9mV50VvaRTzZsycCpO85dvOYvF8=
Subject key identifier: 4C:D8:77:54:07:D6:45:3E:90:9F:A9:E5:DA:6C:70:44:F6:B3:03:C8
Authority key identifier: 82:05:E9:79:6E:C6:9A:0C:73:DC:3B:5B:3C:E1:2C:48:19:2B:45:77
Certificate issuer: /CN=A919D222/serialNumber=8205E9796EC69A0C73DC3B5B3CE12C48192B4577
Certificate serial: 012B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft
Manifest number: 011B
Signing time: Sat 11 Jul 2026 06:41:38 +0000
Manifest this update: Sat 11 Jul 2026 06:41:38 +0000
Manifest next update: Sat 18 Jul 2026 06:41:38 +0000
Files and hashes: 1: ggXpeW7Gmgxz3DtbPOEsSBkrRXc.crl (hash: u9in42olwbbcjRWdTbmGmilgWdFLerrwdA/25nEjPUM=)
2: 18B90242CD8011EF8728D139C4F9AE02.roa (hash: VPm4SknJQLz4jStnPVeOHdN+rR2StpfDf8Lhwbu1ITk=)
3: 1852A5B0CD8011EF8728D139C4F9AE02.roa (hash: GcZaKKkUm4eJadng809d875dfAtSrkk2RvfSOSlgS2k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.crl
rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Jul 2026 06:41:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 299 (0x12b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D222, serialNumber=8205E9796EC69A0C73DC3B5B3CE12C48192B4577
Validity
Not Before: Jul 11 06:41:38 2026 GMT
Not After : Jul 18 06:41:38 2026 GMT
Subject: CN=6a51e5a2-bd40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f1:82:8f:2a:1a:18:ae:48:3e:48:06:a8:40:
65:8a:cc:04:52:7a:0a:27:31:6f:97:8e:6f:92:66:
bb:df:1f:43:a5:2a:c9:3c:3e:89:5d:4c:3a:df:e0:
4a:0c:48:1c:39:e8:a6:ee:8c:ec:6e:8f:a5:9d:4e:
3d:cc:17:58:b7:e6:62:38:e7:0a:5d:4a:2e:c3:0c:
b0:ea:0e:38:09:de:17:ba:95:89:65:19:ea:54:56:
c6:09:3b:f5:7e:f7:12:49:f0:ae:ed:2a:0c:07:dc:
06:29:58:e8:51:7b:78:c1:95:67:b2:19:a2:87:4a:
d1:8a:b2:6f:82:3b:42:68:c4:d1:8f:5e:47:11:af:
ec:81:6f:70:04:26:63:f2:3f:47:97:d7:ab:79:3c:
ca:ac:ba:b0:fb:9a:73:a1:1b:b2:3f:91:ec:97:b5:
b3:ef:a1:ea:00:25:33:46:65:5a:15:2a:73:ec:eb:
5f:a1:fa:08:58:b7:90:b0:70:73:94:e7:1c:6b:8f:
dd:90:6b:17:c0:3f:ed:d5:03:c1:0b:d0:5e:73:11:
bb:54:84:57:df:18:55:2e:d5:f1:f3:03:71:5d:da:
7a:a4:62:5e:cb:2f:a8:96:46:35:21:0f:03:5c:72:
56:f4:e1:0a:f0:7b:fa:f9:66:e0:f6:f5:3b:40:b0:
1e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D8:77:54:07:D6:45:3E:90:9F:A9:E5:DA:6C:70:44:F6:B3:03:C8
X509v3 Authority Key Identifier:
keyid:82:05:E9:79:6E:C6:9A:0C:73:DC:3B:5B:3C:E1:2C:48:19:2B:45:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:69:96:a2:24:47:00:39:93:51:34:c3:c6:fe:c6:de:50:68:
99:58:53:30:c2:7e:ff:ac:b0:69:ce:51:a3:16:86:2e:f6:0d:
ad:71:fc:16:8e:2d:16:2d:18:09:48:7d:c5:7a:c0:57:1f:fe:
cd:e8:f3:e2:c5:00:57:78:d7:22:7a:e5:f9:c6:98:61:9d:01:
da:0f:ec:bf:4f:03:00:2a:1d:89:8a:da:71:3a:4f:8d:78:b1:
09:13:81:f1:ef:34:73:32:37:0c:da:9a:73:f6:36:c3:de:e3:
76:49:f2:73:ac:f8:d0:9e:07:c2:4e:aa:8d:41:e9:1f:a6:98:
d2:5a:e6:7c:67:29:ac:0c:a6:b2:26:52:34:10:19:b7:96:67:
6c:17:36:c6:46:8b:05:a5:da:f2:bf:37:09:9b:1a:55:ed:b9:
2b:04:ea:9b:e2:70:13:61:c4:e1:58:05:16:b2:3b:0e:e3:91:
67:9c:79:eb:2e:ca:5f:64:ec:e9:7b:9d:cf:9f:ea:8b:c8:17:
1d:d5:ea:61:6d:6e:6e:06:77:0a:13:45:4c:48:7a:79:e8:f0:
b4:98:55:e5:90:22:41:28:8e:f7:98:b6:3b:1e:d2:ed:4e:0d:
80:71:58:43:e7:b5:3b:52:31:91:b7:48:58:24:f5:a9:44:6c:
c2:c8:0e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 10:15:55 2026 by rpki-client