
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft
File: g8xy3n1cH-U_wUH4vBrCex3zA7E.mft (raw, json)
Hash identifier: ERy8KNm2euWmU8RKt+BO9NizzcN9ALnXRzDr64xodqY=
Subject key identifier: 63:49:5E:C4:95:19:02:81:87:57:05:C9:17:B0:5D:A6:2B:15:2C:2D
Authority key identifier: 83:CC:72:DE:7D:5C:1F:E5:3F:C1:41:F8:BC:1A:C2:7B:1D:F3:03:B1
Certificate issuer: /CN=A914A594/serialNumber=83CC72DE7D5C1FE53FC141F8BC1AC27B1DF303B1
Certificate serial: 0A54
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft
Manifest number: 0A4B
Signing time: Mon 22 Jun 2026 19:41:56 +0000
Manifest this update: Mon 22 Jun 2026 19:41:55 +0000
Manifest next update: Mon 29 Jun 2026 19:41:55 +0000
Files and hashes: 1: g8xy3n1cH-U_wUH4vBrCex3zA7E.crl (hash: qqJOL7Yxc1SiP7Fc5yV5lCgX4N9sPsUcvUrfooLPqik=)
2: 88F058948E7E11EA955D1E64C4F9AE02.roa (hash: 12BxNNG4r0fp+ny7K/GCAHiE9UmqCnqwlOwyKQlw0O8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.crl
rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 19:41:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2644 (0xa54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A594, serialNumber=83CC72DE7D5C1FE53FC141F8BC1AC27B1DF303B1
Validity
Not Before: Jun 22 19:41:55 2026 GMT
Not After : Jun 29 19:41:55 2026 GMT
Subject: CN=6a399004-efed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f2:bc:e8:15:d8:2e:b6:13:73:75:42:97:a1:
ce:8b:e3:ec:79:53:54:1c:00:85:e8:7a:f5:ad:d4:
fc:a6:4f:7c:d6:cc:13:d0:81:4d:1d:06:c1:6e:f4:
21:59:68:37:64:76:f2:c8:a6:18:59:00:78:d0:6c:
74:6c:29:60:fa:ce:33:59:ef:e2:2d:0a:7c:29:50:
d6:56:78:bc:ea:fa:22:b9:f2:7f:a1:19:85:05:f0:
91:56:a6:00:93:9f:98:c5:5f:ac:18:ca:7f:99:86:
df:2c:2d:0e:f9:bf:0e:d1:de:d9:05:40:55:8e:fd:
ec:94:c9:84:69:7f:d3:6e:d8:93:77:07:a3:1b:04:
f6:01:56:50:ce:9f:8d:49:0b:1f:b8:f6:ea:4d:81:
0b:e7:31:07:76:15:b4:78:d4:1f:1f:d6:21:78:8c:
20:b6:4f:02:ac:29:39:a0:57:3e:94:8b:1f:71:eb:
6c:8a:22:70:ea:db:11:6c:e5:ea:73:f7:d8:6f:44:
b0:f7:8d:7f:1d:bc:24:06:21:c3:71:ee:3e:46:16:
12:c4:92:a2:8e:de:f6:33:b4:62:92:c7:b8:97:d3:
1f:ec:66:a2:17:c2:1c:c7:ec:36:46:db:28:37:5f:
50:85:7a:b8:da:1b:1c:03:14:29:96:e7:16:f5:3b:
ba:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:49:5E:C4:95:19:02:81:87:57:05:C9:17:B0:5D:A6:2B:15:2C:2D
X509v3 Authority Key Identifier:
keyid:83:CC:72:DE:7D:5C:1F:E5:3F:C1:41:F8:BC:1A:C2:7B:1D:F3:03:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:2a:b0:f5:f0:92:37:58:44:0b:ad:eb:d4:28:e8:cf:55:f6:
e6:ee:3b:4e:18:f7:73:f0:33:82:4e:2c:a7:8d:72:61:61:db:
03:4f:5e:1d:85:50:47:9e:56:9c:fa:05:cc:ea:59:f3:b6:d8:
82:07:d9:5e:da:a2:c1:e0:8b:e0:3f:08:ba:f2:46:60:af:30:
6d:3b:50:6c:01:e4:b6:2e:72:e9:79:3f:f8:61:de:1e:91:2c:
df:5b:bd:0b:9f:84:2c:aa:e5:c4:00:7d:85:1b:87:7d:d5:8c:
08:7a:01:ef:f3:6d:8e:35:1e:9e:4a:26:c2:61:21:cc:17:9e:
d9:a3:fd:b2:77:f0:e0:10:b3:82:46:6f:1f:85:72:6c:f8:3f:
80:c9:d9:6f:32:c4:29:63:f2:86:fa:aa:ec:3f:f2:60:04:17:
db:db:0c:7e:cf:f6:fb:6f:31:cf:a0:5e:ba:52:10:72:76:0f:
63:ba:0c:f5:bc:8c:dc:c5:92:bb:e4:5f:3f:c9:16:2c:07:29:
a4:9c:06:68:0f:fc:24:08:fe:a3:8a:cf:c8:12:0c:a5:78:2b:
74:e6:b3:27:d2:0d:12:4f:02:8c:bf:fe:64:dc:34:df:b6:1f:
87:9b:70:47:98:6d:d8:d0:46:0e:45:f5:e2:8d:21:27:69:9f:
42:d8:f5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:30:51 2026 by rpki-client