
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft
File: gAcXZemLOWEliNN4VyFDLDJgf-4.mft (raw, json)
Hash identifier: PooG3S6Vn4enAfQkxSyaZJr++12CVVtTtkdAeTVkAnc=
Subject key identifier: BD:E7:E2:11:88:33:DC:70:79:6D:47:E2:53:FA:6C:A9:4D:9E:09:33
Authority key identifier: 80:07:17:65:E9:8B:39:61:25:88:D3:78:57:21:43:2C:32:60:7F:EE
Certificate issuer: /CN=A911F584/serialNumber=80071765E98B39612588D3785721432C32607FEE
Certificate serial: C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft
Manifest number: C2
Signing time: Wed 07 Oct 2026 07:22:40 +0000
Manifest this update: Wed 07 Oct 2026 07:22:40 +0000
Manifest next update: Wed 14 Oct 2026 07:22:40 +0000
Files and hashes: 1: gAcXZemLOWEliNN4VyFDLDJgf-4.crl (hash: L+Fr2fHB1N7VPs2eC5tzK8gLrqI6Zlt8Sc2j6wDd3wg=)
2: D7E9A8C49DAA11F0A24E4963C4F9AE02.roa (hash: axY0t/wfGcS0SqKBr/2f2eZYye9v2/DiDSRsHzKpfyQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.crl
rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 07:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 197 (0xc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F584, serialNumber=80071765E98B39612588D3785721432C32607FEE
Validity
Not Before: Oct 7 07:22:40 2026 GMT
Not After : Oct 14 07:22:40 2026 GMT
Subject: CN=6ac5f340-de85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bc:d9:41:fc:7f:f7:31:0a:1b:88:89:46:90:
3d:3f:fa:f6:ea:39:79:f7:57:c5:a9:3c:fe:08:37:
a6:06:11:8a:1c:19:98:c1:6d:f5:d9:81:04:b6:8a:
20:7e:44:2f:77:61:98:2b:84:a8:c7:fd:cf:91:74:
33:cd:61:30:fb:88:b4:5a:1e:3d:d4:45:45:ec:3b:
87:6c:1a:53:fd:56:77:a9:27:45:fc:f4:b1:2c:fb:
9e:00:9a:c9:6d:3c:42:6b:83:40:5c:98:f9:6d:26:
3b:b2:73:eb:53:2c:94:d6:c2:cb:89:41:4e:3d:88:
3a:ab:2e:74:06:9e:d9:09:92:67:44:2f:29:3c:ec:
d9:cc:98:59:4a:56:80:d5:06:3e:71:f9:69:44:2e:
c3:f8:34:c2:91:4b:b2:1d:13:99:e7:37:05:17:e3:
b7:3a:93:ba:0b:d7:df:54:d3:fb:11:29:66:b8:a9:
3c:88:7e:38:5b:6a:05:2b:b6:18:61:77:7c:78:6c:
53:a6:16:3c:ac:b2:fd:46:2b:00:67:f3:a4:d9:44:
5d:77:cc:25:23:ed:a0:c0:9f:f5:d1:d9:a0:c4:aa:
d9:4b:dc:7e:15:e8:09:ad:60:19:a5:b4:6a:45:e5:
6c:21:39:4d:c5:f2:a9:c7:c9:3a:00:f8:d7:b0:20:
05:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E7:E2:11:88:33:DC:70:79:6D:47:E2:53:FA:6C:A9:4D:9E:09:33
X509v3 Authority Key Identifier:
keyid:80:07:17:65:E9:8B:39:61:25:88:D3:78:57:21:43:2C:32:60:7F:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:51:cc:14:62:49:a1:34:11:41:c6:cc:36:24:8e:92:b8:cb:
35:a2:0c:23:09:0b:eb:be:6b:11:64:24:4f:2f:a0:a8:a0:3d:
15:64:82:ec:b5:f8:8f:76:eb:8c:6a:26:75:7d:c7:14:aa:40:
23:bc:52:bc:0b:c3:62:01:10:19:79:85:aa:1d:1b:56:6e:53:
33:f7:41:26:3d:5f:55:5a:c4:e7:3c:14:99:05:68:00:b8:5c:
92:8d:61:77:aa:4c:98:ac:74:3b:4f:9a:5d:51:66:ca:5f:19:
b3:a2:26:6f:21:23:8f:a1:ea:23:62:ac:01:00:48:0a:7b:e3:
5e:f6:02:51:3b:58:91:c3:fd:b5:71:71:25:eb:4c:ce:e8:c2:
32:31:88:69:eb:8a:dd:07:a9:fb:01:d8:38:a7:2c:c9:fb:e5:
01:fd:81:36:b9:45:09:4f:76:f8:7f:8d:69:13:ef:b3:15:ad:
e2:6d:40:6d:dc:01:b7:2e:62:96:2b:83:a4:c3:32:e1:f8:c7:
58:ca:d9:1a:38:35:7f:ea:e7:f4:ad:05:65:f8:2b:02:1c:4b:
41:00:4a:0a:4f:cd:03:5d:1c:df:8c:be:1d:5a:40:3b:07:83:
2f:87:fe:6e:75:56:51:2e:cd:3c:05:18:8a:9d:e6:9e:6f:1d:
69:a0:e3:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 01:22:52 2026 by rpki-client