
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft
File: GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft (raw, json)
Hash identifier: 1NGdmM9qVpCX0+3cayUctv9gHNIMIOOz7RdeRH17hME=
Subject key identifier: E7:A5:7E:78:7E:89:9D:F7:98:EF:04:C0:77:61:6A:4D:F2:A9:EE:C9
Authority key identifier: 19:4C:FA:EC:07:56:11:FF:83:C4:21:CD:A8:79:7E:D3:0E:A2:D0:39
Certificate issuer: /CN=A913F4B0/serialNumber=194CFAEC075611FF83C421CDA8797ED30EA2D039
Certificate serial: 0F20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUz67AdWEf-DxCHNqHl-0w6i0Dk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft
Manifest number: 0F05
Signing time: Thu 02 Jul 2026 17:44:43 +0000
Manifest this update: Thu 02 Jul 2026 17:44:43 +0000
Manifest next update: Thu 09 Jul 2026 17:44:43 +0000
Files and hashes: 1: GUz67AdWEf-DxCHNqHl-0w6i0Dk.crl (hash: cA6EEv7OnE8Blxx6TF0Ugizd1H0U7znHMu9JiN62gKk=)
2: 192968FAA43411E9BF46490BC4F9AE02.roa (hash: f81oh/TFo3qHVNgAKwfZj9NYv7cN7F1ZMwUFU1LNjCw=)
3: 7FC2BA3ACEE211EDAF41BC25C4F9AE02.roa (hash: BHOVUhWB8Oqrgvkce7N8eoaaW6EsAxKMD/bGEq8z6S8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.crl
rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUz67AdWEf-DxCHNqHl-0w6i0Dk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 Jul 2026 17:44:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3872 (0xf20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F4B0, serialNumber=194CFAEC075611FF83C421CDA8797ED30EA2D039
Validity
Not Before: Jul 2 17:44:43 2026 GMT
Not After : Jul 9 17:44:43 2026 GMT
Subject: CN=6a46a38b-b56a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:35:8e:0c:be:a0:14:77:41:a9:bb:ef:b7:5a:
0d:89:89:ed:e6:7d:32:d0:aa:9b:d2:71:e8:e9:3a:
7c:27:d7:40:a3:38:1f:b4:ca:32:34:ea:f8:2a:c4:
e1:c1:ea:4f:a2:71:20:d4:29:ca:5a:c5:1b:b8:cf:
31:14:1c:24:e4:79:32:5a:24:2d:8c:ad:f4:8e:58:
49:7e:c6:36:d9:ae:92:05:35:1b:4d:d1:3f:c4:d5:
87:22:08:cd:a9:07:84:06:7f:58:e2:5f:d8:5a:7f:
82:38:b4:be:0b:51:85:c9:81:39:5b:98:a6:13:63:
b8:70:a1:31:7d:35:ab:7f:29:79:53:b7:ff:59:99:
b3:0d:4e:52:22:6d:4d:72:38:43:ad:e3:d3:41:26:
ab:78:25:df:3f:38:23:ab:1c:75:70:d7:cd:71:74:
f1:3c:f3:2b:65:5f:ea:88:b5:f7:34:52:e9:3d:d9:
e1:7d:20:87:ae:1d:9b:7a:e9:8b:d9:dd:89:03:02:
36:17:d1:b7:82:f6:d2:c8:68:6d:e8:a7:5f:63:7e:
cb:e7:88:87:60:21:e5:27:41:da:0c:97:d4:e3:d2:
e5:8d:69:80:e4:0a:72:0c:96:16:c6:5f:4a:97:0f:
5a:d9:01:db:67:0f:8f:a0:b1:c0:d2:87:48:f0:be:
cb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A5:7E:78:7E:89:9D:F7:98:EF:04:C0:77:61:6A:4D:F2:A9:EE:C9
X509v3 Authority Key Identifier:
keyid:19:4C:FA:EC:07:56:11:FF:83:C4:21:CD:A8:79:7E:D3:0E:A2:D0:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUz67AdWEf-DxCHNqHl-0w6i0Dk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:98:37:d7:31:bb:4c:64:20:29:6d:41:bc:43:be:76:f8:8e:
ae:d5:8a:0b:c4:1b:e6:37:df:83:43:fc:92:e6:82:ac:6c:ae:
22:3c:c4:42:bb:86:d3:ce:8e:bc:e6:4a:95:54:75:c9:6a:50:
2e:bd:ba:39:cb:8f:ac:32:6e:fe:28:c1:cf:e2:c7:b5:4f:44:
75:77:63:f8:7b:46:a0:fd:f4:05:5d:45:7f:80:a6:5f:26:2a:
ae:f9:50:7d:bc:07:d3:b6:dc:21:7f:db:4c:18:0a:44:0d:62:
48:0a:b5:43:dc:15:5d:d6:25:18:8c:f9:75:0e:56:d1:a3:d7:
3f:0b:3b:54:d9:af:56:72:d1:ba:f7:ad:de:35:03:00:f9:1e:
0a:23:2f:32:c7:3b:0f:3e:e7:d9:e2:77:bd:75:e3:34:d6:15:
c2:d5:78:98:86:63:c5:59:39:fb:7b:a4:01:a8:b3:fa:dc:9a:
81:b6:d7:1e:f7:59:1a:f9:ac:28:ff:18:f0:ad:d1:80:c5:7a:
8e:73:f1:8a:ea:aa:01:71:81:7c:49:19:55:7c:7b:b9:d6:5e:
7f:6a:1a:f5:24:8f:eb:05:17:b1:0b:fc:f2:20:80:d6:ce:68:
79:bc:83:93:22:85:87:77:f6:3f:61:39:2c:2b:a6:94:42:eb:
4b:6c:95:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 4 01:30:19 2026 by rpki-client