
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft
File: gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft (raw, json)
Hash identifier: ku08MA26wjwx7OwTudYHFrwaObWkLfU3asqaEhF+ZUI=
Subject key identifier: 21:17:AC:DB:61:F9:0E:49:17:E9:AD:DF:8A:90:3A:85:54:2A:A5:D0
Authority key identifier: 82:60:07:A4:E3:D1:4B:B0:B5:09:BB:96:98:45:D0:1E:B8:09:DD:7A
Certificate issuer: /CN=A911DF8A/serialNumber=826007A4E3D14BB0B509BB969845D01EB809DD7A
Certificate serial: 04A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft
Manifest number: 0481
Signing time: Thu 03 Sep 2026 00:03:10 +0000
Manifest this update: Thu 03 Sep 2026 00:03:09 +0000
Manifest next update: Thu 10 Sep 2026 00:03:09 +0000
Files and hashes: 1: gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.crl (hash: zzdnMGcFsLqjm6ChdhHe+hVDijeRhn0z3upQoYnSwE0=)
2: 5963078E311611F1A5EF62D2C0833773.roa (hash: hAgQWjP5KafrY4xqJuxoHjvWfdsN4t0UT3NmZ7Q2C9g=)
3: 6AE58C0255F611F18224D99FB5833773.roa (hash: 9GiNrJp2XZO3hFbevYsBXsivgyqxyo3JH5mN+jJpZnE=)
4: 7D1E4382F7E111F09133AC30656F56BC.roa (hash: zNF2ygfhhND/uBTDhIyFRkeFn/MaMe2JQ58piW9rdw0=)
5: A7D021E89B7B11F1A02F16144211F970.roa (hash: bA+wSapkobV7zocyaHsBjvsej1GO6nWplqf8u6RD91E=)
6: 7C17299AF7E111F09133AC30656F56BC.roa (hash: t296rVU/xx7eKuOhP3U3tbmVD7byq5VC6ECxFEqQnZo=)
7: 7CA73BD4F7E111F09133AC30656F56BC.roa (hash: lrf8090retSGwJwGuDcCx3aFLrFcPfdjin1o0PlkDcA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.crl
rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 00:03:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1186 (0x4a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DF8A, serialNumber=826007A4E3D14BB0B509BB969845D01EB809DD7A
Validity
Not Before: Sep 3 00:03:09 2026 GMT
Not After : Sep 10 00:03:09 2026 GMT
Subject: CN=6a98b93d-9596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:94:4c:5f:25:76:a0:7b:b6:3b:3a:81:7e:2c:
c9:68:ba:ea:ab:07:df:92:a1:18:dd:13:95:56:1f:
f1:e6:65:59:d4:c1:1e:a5:40:f8:59:d7:26:d9:df:
ed:65:d5:52:6f:17:ba:0d:37:d5:40:32:4e:e4:e4:
cf:da:62:68:21:3c:ad:b1:d8:05:54:43:c5:c6:ef:
95:4a:ea:0d:bb:b3:0a:9a:1d:f9:16:a5:0f:c7:d7:
04:77:12:f1:af:da:84:8b:3a:fb:59:16:37:9b:49:
e1:ca:50:94:07:55:30:20:1d:75:a0:14:78:b0:11:
41:58:4f:ba:5b:9c:18:ad:b4:c3:fd:06:53:ec:e5:
ce:32:b6:e7:78:e7:df:58:80:56:43:67:a6:9a:08:
3c:94:89:af:df:e3:84:56:d0:0b:3a:51:7c:2f:33:
c0:8e:5e:f3:1d:e9:68:e0:a2:c0:4d:eb:6d:12:83:
3f:4d:f0:73:39:be:88:93:1f:02:42:ab:b1:4a:0e:
74:04:34:56:07:0f:77:f1:fc:f5:e0:2e:8f:65:84:
f0:2c:2c:14:11:1f:c3:f0:ae:01:de:0f:41:39:27:
e0:9a:9f:16:09:25:01:cf:a6:ef:f4:0b:52:f1:15:
58:9f:0a:55:d6:fd:b9:7e:8a:80:74:3a:48:e4:39:
89:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:17:AC:DB:61:F9:0E:49:17:E9:AD:DF:8A:90:3A:85:54:2A:A5:D0
X509v3 Authority Key Identifier:
keyid:82:60:07:A4:E3:D1:4B:B0:B5:09:BB:96:98:45:D0:1E:B8:09:DD:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:ef:cc:96:b0:a4:8e:33:b0:92:58:cc:14:e3:38:e6:7c:e8:
04:fc:cb:30:ee:3b:3b:22:e2:51:6a:eb:a2:ce:27:27:6c:f6:
0f:7b:98:3b:87:0b:84:56:81:c8:95:b8:44:45:4e:2a:1d:9e:
81:9a:c0:55:e3:33:f2:00:f5:91:f5:04:83:db:88:db:45:b6:
c0:30:be:c5:e4:ff:46:00:8c:f5:64:85:19:e2:bd:1c:5b:3e:
01:c9:6c:a3:9c:29:7c:e1:21:41:d7:a2:ac:5e:10:af:7c:d5:
f7:47:02:56:b9:2e:6d:ea:13:c8:e1:28:a7:15:2b:eb:c4:08:
fd:33:10:44:7d:3b:d4:40:13:83:7a:e3:66:f1:94:49:72:6e:
9b:0d:d3:37:5c:af:56:85:82:06:b7:cc:f9:e9:e0:81:04:b8:
71:08:f0:b3:53:f8:08:d1:50:e9:65:8b:c1:de:f9:75:72:f6:
9e:24:d1:4a:9c:b8:ed:1b:cd:fe:8c:2a:f1:00:14:88:d9:5b:
f5:4b:0c:69:0b:db:2c:f1:58:eb:33:f4:e7:15:6e:3c:44:74:
c7:6b:13:46:25:7a:31:5e:d6:f9:97:ea:12:45:f1:16:98:20:
3d:2d:04:d3:6c:3a:42:09:0e:ac:40:83:bb:17:53:65:43:87:
c1:b5:0b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:55:34 2026 by rpki-client