
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft
File: gja7zXAtSCL93VuwVmDPEDjsjH4.mft (raw, json)
Hash identifier: Nc3sdR+UbDs24y+a7YwXARV2pZxsd92r2siaSJDI2EY=
Subject key identifier: 52:CC:39:13:28:48:13:5D:80:4D:50:C3:32:6C:69:DB:F8:48:4E:A7
Authority key identifier: 82:36:BB:CD:70:2D:48:22:FD:DD:5B:B0:56:60:CF:10:38:EC:8C:7E
Certificate issuer: /CN=A911AE4B/serialNumber=8236BBCD702D4822FDDD5BB05660CF1038EC8C7E
Certificate serial: 092B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft
Manifest number: 091E
Signing time: Fri 04 Sep 2026 20:07:05 +0000
Manifest this update: Fri 04 Sep 2026 20:07:05 +0000
Manifest next update: Fri 11 Sep 2026 20:07:05 +0000
Files and hashes: 1: gja7zXAtSCL93VuwVmDPEDjsjH4.crl (hash: zatOI+GGZ1BFDtZAhZzx1037Qwpes68STmrQIkHIQM4=)
2: 63B7CB76D0E511EA9916E053C4F9AE02.roa (hash: pYGKIqod1ITslZbHR5crvWsrKnNCLAjIRuDb4Q/IMAk=)
3: 3ABFAC2231E211EFA341983CC4F9AE02.roa (hash: ujHcZXNwuVg9oYIrnnoAIw1UkI7YOZ3N1z9618MB7Nk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.crl
rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 20:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2347 (0x92b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AE4B, serialNumber=8236BBCD702D4822FDDD5BB05660CF1038EC8C7E
Validity
Not Before: Sep 4 20:07:05 2026 GMT
Not After : Sep 11 20:07:05 2026 GMT
Subject: CN=6a9b24e9-8f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e4:8e:da:fe:b0:98:aa:a2:72:65:ff:b7:c8:
34:55:cc:cb:21:6a:e6:8d:96:bb:45:16:29:39:dc:
f6:d2:2d:b1:f2:57:29:b5:23:ff:ef:7c:1e:ea:25:
e3:04:55:36:3e:9b:10:7d:4a:c6:ca:1b:7b:4a:80:
40:ff:26:dd:86:d4:a1:5b:ca:f1:20:95:c4:50:e1:
3f:29:09:a6:25:33:2a:e3:25:ac:85:f8:da:1f:55:
22:88:7d:ac:37:32:8d:89:94:e6:24:18:3d:17:d6:
88:7b:37:9d:06:32:34:11:84:e2:7a:b9:2c:4c:be:
a3:cc:76:17:e4:bd:43:3d:5e:5f:4b:47:cc:95:4b:
63:87:b9:ab:79:f2:11:7c:79:d9:2a:49:ec:ec:a0:
ee:1b:0d:b3:71:93:53:aa:9a:8d:97:1e:c9:2d:9b:
4e:28:4b:63:ae:ec:4d:64:47:e0:c6:dd:75:e7:eb:
3c:7b:a1:38:ee:52:77:d1:8b:09:15:60:98:d0:6b:
16:42:88:62:f5:ac:e9:00:46:42:53:dc:43:51:0a:
23:8f:8a:f6:e6:86:44:ed:82:ab:58:a0:05:4a:b0:
cd:ef:02:6b:99:62:29:16:69:af:51:15:20:69:88:
d4:de:55:61:de:64:93:ca:6d:09:2f:37:e8:59:98:
cc:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:CC:39:13:28:48:13:5D:80:4D:50:C3:32:6C:69:DB:F8:48:4E:A7
X509v3 Authority Key Identifier:
keyid:82:36:BB:CD:70:2D:48:22:FD:DD:5B:B0:56:60:CF:10:38:EC:8C:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ab:a7:aa:46:4c:04:e2:1c:ca:c8:78:6b:74:18:b2:dc:a8:
44:fe:34:2a:a1:f0:c9:07:86:3f:20:59:97:ab:0f:47:99:81:
40:52:2c:7d:0d:40:90:64:83:33:3a:a0:19:9c:64:b9:73:28:
df:d2:5a:e1:2f:18:31:73:49:f8:03:f7:67:b7:c7:eb:2b:71:
3c:cb:80:8b:db:1c:fb:0f:1d:70:26:31:06:80:ec:c6:d7:89:
ef:e0:ed:57:70:d8:8b:b5:08:99:c4:64:1c:61:05:3f:75:f3:
27:13:8c:39:25:0b:78:8a:16:0e:dc:35:6b:0c:f1:d8:7f:f9:
93:73:a4:a9:8d:6c:3a:18:a7:3b:d6:7e:d6:ef:16:22:b0:56:
16:4e:ca:fe:be:3c:cf:56:f3:0a:d7:bc:51:e0:e3:13:52:23:
00:53:eb:77:5c:03:dc:74:df:af:06:8a:52:4d:41:cb:f3:06:
d8:51:36:31:31:e5:88:98:3a:6c:91:0a:af:93:c0:f9:3d:ff:
e4:60:0d:68:ec:d5:25:b8:ec:c6:7f:6f:cc:07:42:37:ce:09:
b5:71:11:94:2d:f4:69:82:97:48:ac:df:81:cf:eb:2a:ac:80:
cb:6b:16:85:87:08:bd:97:23:57:90:a9:cd:ac:b6:79:05:53:
e4:7e:b7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:51:09 2026 by rpki-client