
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.mft
File: Gbq7z0yZmTAKwFnGU8KQhC9qZg0.mft (raw, json)
Hash identifier: W1GX8CTD4zrwNoftPkHcwcdzI/H29V218jm8Cy+5r38=
Subject key identifier: 08:C1:A5:97:5B:42:C0:74:C5:A1:83:20:39:92:24:E8:60:24:88:FB
Authority key identifier: 19:BA:BB:CF:4C:99:99:30:0A:C0:59:C6:53:C2:90:84:2F:6A:66:0D
Certificate issuer: /CN=A913E0D7/serialNumber=19BABBCF4C9999300AC059C653C290842F6A660D
Certificate serial: 02E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.mft
Manifest number: 02E1
Signing time: Wed 19 Aug 2026 01:36:34 +0000
Manifest this update: Wed 19 Aug 2026 01:36:33 +0000
Manifest next update: Wed 26 Aug 2026 01:36:33 +0000
Files and hashes: 1: Gbq7z0yZmTAKwFnGU8KQhC9qZg0.crl (hash: k6z5B6cvporwpWvQJEujTdUEU/9cC6bLVxLMDxYykcs=)
2: 12326B1E3ED211EDAE00DB18C4F9AE02.roa (hash: EMxgdpPufi1Og/AIiKXBzoLrbmFj4laz/LZzew8P9yk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.crl
rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 01:36:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 745 (0x2e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E0D7, serialNumber=19BABBCF4C9999300AC059C653C290842F6A660D
Validity
Not Before: Aug 19 01:36:33 2026 GMT
Not After : Aug 26 01:36:33 2026 GMT
Subject: CN=6a8508a2-a2fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:aa:8b:7b:80:09:49:d3:d5:80:27:ad:2a:72:
aa:31:a1:78:17:12:20:66:39:01:88:9e:a4:ab:5d:
2e:76:18:b1:46:46:87:d9:48:c8:79:72:d1:6e:a4:
cd:b5:b8:a6:61:39:1f:55:87:ae:1f:34:ea:d4:bd:
5e:c7:c7:b1:8e:0a:86:5e:7a:ee:90:e2:21:fb:76:
43:ea:1a:75:86:52:13:06:17:91:ae:86:31:db:10:
4d:6e:94:62:00:a9:8b:a1:ef:b1:10:db:78:47:89:
18:e2:75:1c:50:7f:31:c1:f4:24:fd:e7:ca:14:e7:
c2:59:a6:f6:78:1f:d5:6a:0b:fd:47:b6:02:ec:f9:
a0:b7:3e:8b:7e:51:9d:21:72:02:8c:53:e0:06:e8:
bb:ed:05:21:f3:5a:c9:6e:26:cf:e3:97:1d:5b:06:
0d:b2:a2:4b:17:2b:8a:5f:e0:2b:0c:5a:ff:26:36:
9b:5f:de:56:dd:13:4c:93:33:a9:3d:d1:17:8b:f5:
46:ce:86:93:46:cf:52:0a:6e:83:23:7d:88:2d:8a:
b6:09:e7:86:8c:6a:70:b5:51:97:6c:99:df:8d:8a:
a8:73:3f:6a:71:38:44:bd:b8:01:dd:ca:ea:cb:1f:
68:19:a9:20:53:d4:97:31:f8:d9:09:14:34:58:b1:
e9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C1:A5:97:5B:42:C0:74:C5:A1:83:20:39:92:24:E8:60:24:88:FB
X509v3 Authority Key Identifier:
keyid:19:BA:BB:CF:4C:99:99:30:0A:C0:59:C6:53:C2:90:84:2F:6A:66:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:13:d1:23:46:1c:53:9a:97:ef:ee:5d:8c:59:8e:fa:46:51:
f3:1b:96:66:0f:78:c1:20:d3:5d:57:81:e5:55:9d:44:9e:dc:
9a:25:82:25:c6:ca:b6:eb:3b:1a:2d:1c:d1:d7:2d:95:59:17:
ed:34:74:b7:30:08:28:fc:f6:f6:13:0a:fe:94:5f:30:bb:71:
32:d1:96:80:a5:e9:1d:cc:f0:df:28:c0:14:06:bd:c3:4e:48:
8c:8c:c5:01:83:40:d8:da:0d:ef:74:4c:d6:c9:99:49:44:c3:
ee:eb:8d:60:51:15:cf:33:c4:8f:55:35:13:e2:eb:2c:4d:e9:
ba:9f:d4:7c:33:1c:58:a3:3a:08:ce:1e:a9:fd:3f:69:1f:d8:
52:36:f6:f1:4f:cf:3d:54:ef:b8:6b:77:e3:a7:d9:80:92:e9:
c3:c4:b1:cd:b4:b1:fc:5e:b8:97:4f:3c:68:88:23:91:dd:ce:
8f:25:dc:39:20:0b:84:90:26:0a:1d:dd:b8:ad:d0:ca:0e:0d:
1a:3d:06:41:d8:ad:19:4d:32:b3:9d:9f:aa:a0:3a:83:45:4e:
91:fb:d2:c8:48:f2:55:79:71:5d:2c:fb:6d:7e:08:0c:11:a7:
4f:ba:66:08:68:14:b3:1c:fe:12:44:ea:45:77:5b:e6:4a:be:
c9:af:03:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:41:39 2026 by rpki-client