
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft
File: gJ7_H3gZuBdR8XerWv7YK8wypWk.mft (raw, json)
Hash identifier: 3ocUOaYGbAFceHQuAtY+AwgLnraQoypuUoJPZetSqUs=
Subject key identifier: 41:E1:3F:83:88:F8:CD:56:AA:E9:9E:6A:98:55:62:3A:D5:6B:DF:7B
Authority key identifier: 80:9E:FF:1F:78:19:B8:17:51:F1:77:AB:5A:FE:D8:2B:CC:32:A5:69
Certificate issuer: /CN=A9158028/serialNumber=809EFF1F7819B81751F177AB5AFED82BCC32A569
Certificate serial: 06D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ7_H3gZuBdR8XerWv7YK8wypWk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft
Manifest number: 06CB
Signing time: Wed 20 May 2026 22:20:30 +0000
Manifest this update: Wed 20 May 2026 22:20:29 +0000
Manifest next update: Wed 27 May 2026 22:20:29 +0000
Files and hashes: 1: gJ7_H3gZuBdR8XerWv7YK8wypWk.crl (hash: qeto//nPNg57g597L1dXOZKwDbNepSfCkVtkKLMXGys=)
2: 687D7178B85D11EBB2E17F26C4F9AE02.roa (hash: M577gprOgopViMBlM2br8rPqwyVug+teBZ5+ccpEPA8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.crl
rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ7_H3gZuBdR8XerWv7YK8wypWk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 22:20:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1747 (0x6d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158028, serialNumber=809EFF1F7819B81751F177AB5AFED82BCC32A569
Validity
Not Before: May 20 22:20:29 2026 GMT
Not After : May 27 22:20:29 2026 GMT
Subject: CN=6a0e33ae-470a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:57:3f:c2:e1:bc:3c:89:e0:29:29:28:da:2c:
6a:9d:60:e5:d2:a9:f7:cf:6c:68:a0:7d:ff:ab:e2:
a0:63:5c:8c:6b:46:e8:fc:30:ac:2c:67:30:2e:01:
a2:17:14:4f:85:80:24:b7:9c:30:cb:39:aa:c2:47:
a8:3b:9b:19:38:b2:c9:9d:2d:d1:e5:b7:28:d2:7b:
3f:78:d7:26:d4:8a:aa:fd:0d:22:0c:1a:87:6a:b7:
77:43:69:93:7b:55:5b:a8:1a:53:9e:dd:2a:eb:39:
f1:dc:6d:b1:a2:7d:49:0b:5b:75:40:ce:cb:59:cf:
de:d7:8f:09:36:c4:e5:58:4e:d3:06:3e:4a:56:03:
9d:b0:fc:6f:73:56:81:cc:0c:fe:15:80:5e:66:6a:
0d:08:e7:3e:4f:4a:da:1f:39:ea:28:2f:63:b4:43:
6d:06:8e:99:26:10:c5:a0:6b:75:c0:36:6a:c7:77:
1c:8d:04:5e:c5:91:f1:ce:a7:49:3f:08:01:c3:8a:
e3:73:b2:89:0c:dd:fc:42:ca:c0:44:8d:c1:e8:4c:
64:52:5e:4b:6c:01:15:0e:d5:fb:12:3a:4f:97:56:
2b:c8:ff:11:60:a1:b3:57:87:1e:cc:00:9d:cb:1d:
a6:23:ad:0c:7d:85:cd:7e:ce:e7:01:75:f5:b3:56:
28:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E1:3F:83:88:F8:CD:56:AA:E9:9E:6A:98:55:62:3A:D5:6B:DF:7B
X509v3 Authority Key Identifier:
keyid:80:9E:FF:1F:78:19:B8:17:51:F1:77:AB:5A:FE:D8:2B:CC:32:A5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ7_H3gZuBdR8XerWv7YK8wypWk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:e5:0c:e0:b5:03:d1:4d:69:d3:57:27:92:f7:24:bc:99:61:
b4:64:1a:62:74:6d:5b:b3:08:cf:17:68:d7:ec:7c:8a:85:5c:
b5:ab:48:02:3e:60:64:08:cc:0b:e6:da:2f:da:3d:0e:94:2f:
4e:ce:77:d5:df:b9:a5:f9:16:f4:f6:13:09:03:15:b9:8a:e2:
d3:95:de:01:a7:d3:b5:24:e8:ce:2e:63:a3:ab:7e:f8:ef:ef:
bf:fc:c7:cd:e4:57:77:43:e5:f5:2e:5e:35:e0:63:15:9b:e0:
55:66:6e:c6:3e:c0:a9:c6:08:b2:83:ba:a7:54:e5:78:55:e3:
b1:e2:5a:30:1e:9d:8a:6f:34:51:b6:a7:f4:3f:8e:c1:92:25:
35:cc:ae:f0:9b:74:1a:a7:c8:74:ba:06:2d:52:1c:9e:cf:ad:
58:8a:a1:46:4e:55:95:bb:13:4b:59:c3:89:80:2b:b8:1d:12:
66:60:f9:22:5b:9c:26:22:88:e9:40:b3:14:55:77:de:46:57:
fc:c4:c3:e1:1e:51:e3:64:0e:1b:bd:d6:ee:c3:4f:1b:6f:81:
6e:7c:12:47:6f:96:5e:62:b6:d6:00:7a:fa:79:a5:3c:40:da:
85:dd:03:79:fc:93:92:7a:26:13:25:52:57:90:54:eb:af:51:
33:11:e0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:23:56 2026 by rpki-client