
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913AC62/65FABB4EA4F811F1B185F2B86E11F970/_-gfY04l5olzmJndVfFB_kR8cAs.mft
File: _-gfY04l5olzmJndVfFB_kR8cAs.mft (raw, json)
Hash identifier: EJ3+MxObm1TUIaV1HyLYPOxCyJszkToMN/CaF2TMB1M=
Subject key identifier: 41:7C:A9:B7:C9:A7:E2:00:0C:F4:08:D7:A8:6E:48:D6:9A:CF:CC:32
Authority key identifier: FF:E8:1F:63:4E:25:E6:89:73:98:99:DD:55:F1:41:FE:44:7C:70:0B
Certificate issuer: /CN=A913AC62/serialNumber=FFE81F634E25E689739899DD55F141FE447C700B
Certificate serial: 02
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_-gfY04l5olzmJndVfFB_kR8cAs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913AC62/65FABB4EA4F811F1B185F2B86E11F970/_-gfY04l5olzmJndVfFB_kR8cAs.mft
Manifest number: 02
Signing time: Mon 31 Aug 2026 06:19:35 +0000
Manifest this update: Mon 31 Aug 2026 06:19:34 +0000
Manifest next update: Mon 07 Sep 2026 06:19:34 +0000
Files and hashes: 1: _-gfY04l5olzmJndVfFB_kR8cAs.crl (hash: A30fFosGjdvxZKx95Ac2PNQ1KNh+P/GD8xDOj42iS5s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913AC62/65FABB4EA4F811F1B185F2B86E11F970/_-gfY04l5olzmJndVfFB_kR8cAs.crl
rsync://rpki.apnic.net/member_repository/A913AC62/65FABB4EA4F811F1B185F2B86E11F970/_-gfY04l5olzmJndVfFB_kR8cAs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_-gfY04l5olzmJndVfFB_kR8cAs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Sep 2026 06:19:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913AC62, serialNumber=FFE81F634E25E689739899DD55F141FE447C700B
Validity
Not Before: Aug 31 06:19:34 2026 GMT
Not After : Sep 7 06:19:34 2026 GMT
Subject: CN=6a951cf7-3212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:84:e9:eb:4d:86:a7:cd:6a:3a:b0:55:ee:08:
90:82:23:76:0e:14:69:d8:95:14:c2:44:80:87:54:
a4:79:0e:80:ad:6e:2d:3c:ac:29:3f:ce:71:e3:da:
bc:29:a3:e5:23:ab:f0:00:69:7b:fc:58:e6:97:51:
be:50:3b:a1:93:5b:7c:89:65:7f:3e:e2:45:06:1b:
bb:26:2d:0b:f9:b6:85:03:f7:93:b5:53:4b:42:62:
f8:1f:23:32:b5:71:9c:89:dd:42:ed:5b:ea:3c:95:
24:f5:0f:34:65:ad:5a:95:58:13:9a:47:a2:50:20:
33:60:42:ef:46:e4:21:fd:c4:c4:f1:a8:ff:81:b6:
18:1c:66:71:04:3e:c5:b1:3e:fc:4b:2b:0d:6d:ff:
dc:9f:78:4c:dd:92:f6:82:aa:3b:32:11:64:a9:e8:
08:77:4f:79:6e:2e:e4:fd:bc:eb:51:f0:27:af:f8:
e0:d2:1b:3f:67:2e:86:4f:5f:aa:d9:5a:9d:c8:c2:
c4:ac:a5:46:45:c2:6a:d0:cb:94:76:61:cf:16:7c:
cd:5f:58:ab:5f:25:19:6c:fc:41:f1:40:29:f8:a9:
9e:0f:d8:ca:fa:3b:9e:49:06:45:b5:ea:e3:b4:7d:
22:8c:64:68:30:12:0b:fa:59:56:77:a4:a8:14:c8:
9f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:7C:A9:B7:C9:A7:E2:00:0C:F4:08:D7:A8:6E:48:D6:9A:CF:CC:32
X509v3 Authority Key Identifier:
keyid:FF:E8:1F:63:4E:25:E6:89:73:98:99:DD:55:F1:41:FE:44:7C:70:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913AC62/65FABB4EA4F811F1B185F2B86E11F970/_-gfY04l5olzmJndVfFB_kR8cAs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_-gfY04l5olzmJndVfFB_kR8cAs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AC62/65FABB4EA4F811F1B185F2B86E11F970/_-gfY04l5olzmJndVfFB_kR8cAs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b8:af:8c:04:36:bd:71:e1:bc:9d:24:5d:23:dd:17:24:54:
de:5d:9c:04:c9:c8:01:71:12:c3:f9:ca:4c:84:2f:1a:f8:4c:
13:46:33:50:8d:4b:26:9e:63:b1:39:5c:c5:22:d3:dd:06:ec:
ba:e5:ed:4d:0d:60:93:d8:6a:46:91:f9:19:94:a7:78:77:50:
39:dd:0c:cf:eb:21:24:14:ab:22:1c:aa:9e:e5:36:e6:c3:85:
2b:0e:43:77:11:7d:41:c6:2b:a3:42:38:85:41:d2:51:49:f5:
76:7f:aa:cc:37:d1:05:a8:0b:e4:5d:92:03:b2:c9:56:fd:03:
b1:9d:74:c2:5f:d5:15:4a:c3:ec:8c:53:fd:91:91:78:ce:37:
fa:27:d3:15:6d:a5:11:dd:ce:1f:c9:72:e8:bb:84:c5:6c:fc:
8e:ab:d6:9d:bf:76:65:72:87:50:bf:84:75:d6:1d:3d:8f:42:
98:cc:f4:4d:ac:52:3c:c8:92:8c:26:75:44:45:8e:f0:df:88:
36:c2:79:63:24:ef:b0:ca:a4:64:9e:b5:0d:0a:f0:52:a8:fc:
0c:fa:35:40:8f:a0:5d:46:e1:d6:31:ca:0a:3a:4e:f6:57:e5:
c4:07:12:e1:72:34:14:3d:8b:92:61:6b:f1:7a:9f:8b:c2:d1:
78:e5:75:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:29:37 2026 by rpki-client