
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.mft
File: gJihpKZXp3CvvWalja3gGT9aHog.mft (raw, json)
Hash identifier: VOKc9JFqnr20yfnmpfWf4YWR0yMXIrcbEBrznGq4tiA=
Subject key identifier: 50:98:D1:BE:6E:48:8A:6B:4F:87:16:F3:C0:21:79:13:B9:5C:5D:9C
Authority key identifier: 80:98:A1:A4:A6:57:A7:70:AF:BD:66:A5:8D:AD:E0:19:3F:5A:1E:88
Certificate issuer: /CN=A916A6D2/serialNumber=8098A1A4A657A770AFBD66A58DADE0193F5A1E88
Certificate serial: 0624
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJihpKZXp3CvvWalja3gGT9aHog.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.mft
Manifest number: 0614
Signing time: Wed 20 May 2026 22:54:06 +0000
Manifest this update: Wed 20 May 2026 22:54:06 +0000
Manifest next update: Wed 27 May 2026 22:54:06 +0000
Files and hashes: 1: gJihpKZXp3CvvWalja3gGT9aHog.crl (hash: DZyl64/uUX/bwWXKM9pg9W9S+GwrRwEdJPzdQd1jLkE=)
2: 81C83A9ADD9711ECB450D332C4F9AE02.roa (hash: 9EVY6/bljSmGk69kgq+cWH0JVAlXlHuEraH6jeuw/7c=)
3: 9718BA74EA9E11EB8575F62AC4F9AE02.roa (hash: m3HEhEwWSLfKtQb2ikmT/BSylxepHuo5uXczBb4yR7g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.crl
rsync://rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJihpKZXp3CvvWalja3gGT9aHog.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 22:54:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1572 (0x624)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A6D2, serialNumber=8098A1A4A657A770AFBD66A58DADE0193F5A1E88
Validity
Not Before: May 20 22:54:06 2026 GMT
Not After : May 27 22:54:06 2026 GMT
Subject: CN=6a0e3b8e-af78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b2:ff:98:c3:61:e4:c9:d6:9f:4e:26:ba:a1:
94:d7:58:96:2e:33:17:e0:09:59:15:38:7d:78:37:
e2:50:38:0e:8d:3f:f9:85:35:77:09:21:d6:05:89:
bc:9d:52:e2:2c:fe:35:e5:07:6f:44:0a:31:3c:b6:
1d:9e:34:27:e4:cf:71:f0:ff:af:4d:c7:33:bd:34:
71:41:6f:5f:73:7e:fd:c1:07:85:59:e5:12:6c:14:
72:d7:f7:bb:ad:b1:41:46:69:ab:7e:a1:99:e9:2c:
1f:1d:1d:17:2f:2a:4b:ec:4c:b7:b2:94:16:5d:a9:
33:db:e3:65:cc:17:08:5f:61:d5:e3:25:35:a9:f9:
92:a5:20:53:d1:b1:cd:19:3f:37:ca:f3:07:b4:68:
0c:5c:3e:f0:68:51:14:b8:9d:e3:16:49:98:ad:7d:
57:0a:f1:47:ad:2e:fb:b0:ea:e3:97:8c:20:2f:aa:
bd:4c:c4:0f:82:c5:73:6e:75:59:82:4c:f9:5c:d5:
a7:4c:d4:b8:1a:8a:19:f3:89:6e:fa:13:ca:08:55:
03:be:99:41:9b:ba:26:52:e1:9a:63:fe:89:78:e5:
a5:63:10:e2:2f:f0:77:08:ad:9e:e7:60:16:f0:4a:
03:99:6a:f1:4b:da:3a:05:72:ef:27:a7:df:05:2e:
87:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:98:D1:BE:6E:48:8A:6B:4F:87:16:F3:C0:21:79:13:B9:5C:5D:9C
X509v3 Authority Key Identifier:
keyid:80:98:A1:A4:A6:57:A7:70:AF:BD:66:A5:8D:AD:E0:19:3F:5A:1E:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJihpKZXp3CvvWalja3gGT9aHog.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:ed:a4:3e:16:fb:cf:ca:33:99:2b:80:42:f4:c0:0d:2b:00:
98:63:07:16:83:04:fc:d8:d8:59:fd:6a:73:bd:25:fe:dd:69:
27:57:d1:80:1a:4f:72:04:cc:f5:50:b0:5d:36:4c:39:23:87:
90:20:5c:0b:7d:18:2a:64:fc:d7:b3:c6:fd:ed:ea:60:33:ce:
4c:0d:cb:86:c7:0b:26:d8:3f:65:74:43:fc:62:c7:33:b6:10:
40:3f:9c:10:0b:95:85:84:29:76:79:4d:21:6e:a8:07:52:1f:
3b:d7:4a:16:85:b7:1b:47:62:37:5b:90:e8:c1:94:e2:eb:ec:
c4:c8:4e:a6:3e:64:19:b3:36:99:72:63:1b:2e:b1:ca:cf:ac:
11:5e:38:bb:f2:d6:89:59:86:0a:1e:75:44:e8:72:89:34:1d:
1f:df:cb:b2:73:34:b9:02:46:77:e9:d3:aa:fc:64:58:34:e8:
41:93:72:09:94:a9:5c:c8:61:37:4d:c6:3c:99:8b:a8:7b:ed:
77:6b:58:a4:ce:69:d3:70:b0:fe:70:ed:e5:d2:4d:3b:99:98:
9d:59:31:a6:3c:ee:6d:13:aa:3e:59:1a:69:f1:41:98:d8:ec:
13:f5:b8:83:25:91:f4:c3:a4:04:83:d5:a4:a6:1b:1a:dd:00:
09:c8:cc:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 13:24:18 2026 by rpki-client