
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft
File: -GGkJMXdlLdB2BgJtff_OVVjdl4.mft (raw, json)
Hash identifier: q+ELK4YWT+2RIaRgOafGsUKiyQaCCtKTO0Zqt5c5Ue8=
Subject key identifier: AF:FE:45:CC:62:54:70:FF:41:C4:8E:E8:EA:42:42:C3:74:D3:18:48
Authority key identifier: F8:61:A4:24:C5:DD:94:B7:41:D8:18:09:B5:F7:FF:39:55:63:76:5E
Certificate issuer: /CN=A915B6E9/serialNumber=F861A424C5DD94B741D81809B5F7FF395563765E
Certificate serial: 04B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-GGkJMXdlLdB2BgJtff_OVVjdl4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft
Manifest number: 04AC
Signing time: Fri 17 Jul 2026 00:31:39 +0000
Manifest this update: Fri 17 Jul 2026 00:31:39 +0000
Manifest next update: Fri 24 Jul 2026 00:31:39 +0000
Files and hashes: 1: -GGkJMXdlLdB2BgJtff_OVVjdl4.crl (hash: 89wkV07fILwOuxV8uplCg7PT9llxg4e+KvwhB5cbv/Y=)
2: D2438C7C4B1F11EDAF41BC7FC4F9AE02.roa (hash: y9AWX9pr7/40gfTliDeYcrWRNr/D4ngulxUgREVk2K4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.crl
rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-GGkJMXdlLdB2BgJtff_OVVjdl4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 00:31:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1208 (0x4b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B6E9, serialNumber=F861A424C5DD94B741D81809B5F7FF395563765E
Validity
Not Before: Jul 17 00:31:39 2026 GMT
Not After : Jul 24 00:31:39 2026 GMT
Subject: CN=6a5977eb-1f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1b:61:86:51:19:78:85:0c:05:09:43:1e:c6:
2d:83:4e:33:23:79:78:92:1b:e7:a4:15:70:82:35:
37:01:69:18:93:ab:0d:f6:92:e9:6f:d3:25:e3:1c:
55:a6:cb:83:61:98:e1:a5:2a:d3:2a:7f:9b:b0:2f:
2d:2e:55:92:c4:38:ec:34:17:99:9e:b6:73:99:ff:
4f:6e:b8:23:49:e0:6a:dc:95:8a:da:e8:c2:3b:a3:
1c:c3:d0:95:69:88:23:fd:d3:40:f4:99:40:b7:b4:
bc:46:84:52:99:42:1a:91:9a:66:fd:ab:f0:40:0e:
d8:10:af:54:7b:5a:95:58:98:2e:20:28:71:b8:9a:
69:91:12:1a:e9:1c:19:5e:45:ed:a1:ec:28:c4:bb:
a1:02:8c:65:c4:d2:f8:1f:54:fd:a8:a5:88:4f:79:
c2:6b:71:92:f6:01:b7:e7:6a:af:08:5c:18:54:c3:
13:4e:07:1f:77:8a:96:cc:51:b9:1d:b2:97:b5:7d:
b4:de:f7:59:f4:59:74:51:2b:64:38:15:e0:24:33:
bd:7f:6e:95:d6:76:d1:ec:df:16:e4:9d:db:47:c2:
78:97:6d:50:c6:0b:ef:29:bb:62:94:4d:ba:66:b8:
ab:8c:56:ee:87:12:e1:14:2c:4d:d0:7b:77:e6:0a:
34:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:FE:45:CC:62:54:70:FF:41:C4:8E:E8:EA:42:42:C3:74:D3:18:48
X509v3 Authority Key Identifier:
keyid:F8:61:A4:24:C5:DD:94:B7:41:D8:18:09:B5:F7:FF:39:55:63:76:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-GGkJMXdlLdB2BgJtff_OVVjdl4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:32:17:39:b3:3a:7d:6a:f9:43:a2:a2:e4:dd:bd:18:ab:0f:
9f:8d:bd:a0:b5:aa:b3:43:9a:8c:fd:44:a8:f8:73:85:7e:6a:
0f:5f:35:85:9d:a9:5b:40:7a:76:b8:56:93:1e:c0:a1:d5:69:
a3:18:dc:b4:34:1e:0e:2a:e7:31:54:be:64:00:9c:08:77:cb:
4f:25:c6:36:c8:41:25:f6:d1:1c:53:5b:df:31:89:59:0e:bb:
13:21:97:03:ef:18:c1:cd:67:fd:45:09:ad:3a:e0:93:f8:1c:
93:2e:38:ee:82:17:a8:aa:a9:8d:03:c0:d4:f7:1c:f2:6e:3b:
b2:c2:99:17:f6:43:46:d5:73:9b:50:bb:ba:d7:bb:a0:a3:2c:
f4:5d:f9:ca:02:92:ac:b9:86:f4:96:de:e3:52:37:2b:81:00:
e2:9c:76:9d:da:69:ab:6e:34:9a:59:aa:ff:8f:aa:ae:37:b1:
5f:41:ce:ee:fe:13:d4:94:c9:e3:6c:7a:7a:b6:ee:7e:ed:28:
f4:a1:77:1b:ff:11:b9:df:9b:0b:b9:e3:f1:9d:73:55:52:28:
7b:e3:35:43:c3:e2:6c:36:85:23:4a:98:e0:a3:ce:68:d3:ed:
c6:75:c5:19:a4:3b:02:a4:ff:c5:0d:01:40:f4:50:bd:20:df:
39:2a:30:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:18:16 2026 by rpki-client