
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.mft
File: gmqoO74CQNE5BqurRkMX6eercO8.mft (raw, json)
Hash identifier: UQhKFLOap9vzoAnHFs2tjWXfyMg+czH4YsefOKnVGF8=
Subject key identifier: 68:22:2F:FE:60:1D:5C:B0:66:06:86:0C:B1:21:E9:B6:6C:40:57:0E
Authority key identifier: 82:6A:A8:3B:BE:02:40:D1:39:06:AB:AB:46:43:17:E9:E7:AB:70:EF
Certificate issuer: /CN=A916C473/serialNumber=826AA83BBE0240D13906ABAB464317E9E7AB70EF
Certificate serial: DE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmqoO74CQNE5BqurRkMX6eercO8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.mft
Manifest number: DC
Signing time: Sun 13 Sep 2026 06:29:02 +0000
Manifest this update: Sun 13 Sep 2026 06:29:01 +0000
Manifest next update: Sun 20 Sep 2026 06:29:01 +0000
Files and hashes: 1: gmqoO74CQNE5BqurRkMX6eercO8.crl (hash: +fRcUaDdrRcfm+r3lVxW+9P/K/RZM2CwygSiR9oNsnc=)
2: DA98BA4C5DE011F0B1CD4C75C4F9AE02.roa (hash: eC+Ca7N9y7VnPMiNtCOnwDbBNDTPawuOGNwqU/JVjQc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.crl
rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmqoO74CQNE5BqurRkMX6eercO8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Sep 2026 06:29:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222 (0xde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C473, serialNumber=826AA83BBE0240D13906ABAB464317E9E7AB70EF
Validity
Not Before: Sep 13 06:29:01 2026 GMT
Not After : Sep 20 06:29:01 2026 GMT
Subject: CN=6aa642ae-dfc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9a:4c:6d:be:94:41:3b:53:43:71:5b:0b:c4:
3d:dd:55:43:dd:82:40:b1:0b:19:54:fc:2a:1b:1b:
7a:22:ef:2b:f7:3f:62:8b:11:f5:d6:38:4d:f1:1b:
0d:46:82:24:6f:d0:fb:ec:ed:99:30:a8:62:dd:3f:
0b:e6:32:b5:0a:c6:55:f5:62:df:2a:a7:45:1c:2f:
d0:37:3e:b1:e0:15:b3:d9:f3:45:7e:97:c0:60:b8:
56:9a:aa:1b:8c:e0:ff:76:1c:f2:af:29:9c:25:bf:
66:d9:ef:e6:8c:0a:49:1f:30:5a:68:a2:a1:dc:7b:
3b:c6:f6:d9:1a:88:f5:65:4e:2c:b9:2a:d5:6a:06:
54:87:3d:e1:bb:55:6f:a9:36:19:41:c1:7f:24:aa:
7d:38:9f:32:0b:79:8a:69:a1:5d:60:ca:0f:92:3e:
8b:f9:04:b4:4a:06:e7:9f:69:4f:51:4e:e0:71:22:
ad:f9:78:a9:b9:d0:2e:16:7d:3c:12:99:8b:dc:d4:
4d:36:a2:4e:cd:55:1b:53:2d:0d:df:1f:9e:e2:ca:
79:b6:dd:44:b3:84:26:03:7d:69:fd:f9:f3:ee:29:
94:ea:0a:7d:f0:4f:3c:b9:09:0a:a0:ac:9b:05:83:
b5:f0:20:70:f1:e7:16:a7:64:ad:0d:31:a0:c4:8c:
6b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:22:2F:FE:60:1D:5C:B0:66:06:86:0C:B1:21:E9:B6:6C:40:57:0E
X509v3 Authority Key Identifier:
keyid:82:6A:A8:3B:BE:02:40:D1:39:06:AB:AB:46:43:17:E9:E7:AB:70:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmqoO74CQNE5BqurRkMX6eercO8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:cd:2a:c8:80:6d:bd:43:c5:26:2e:7c:25:3f:9c:85:63:81:
ec:4e:d0:70:17:85:73:ad:c7:97:4d:64:ae:91:4a:de:0e:9a:
49:4c:8a:55:43:6e:96:48:d9:05:59:59:5c:33:b5:ba:0a:c6:
c7:9f:3a:06:a3:80:93:f2:ec:d1:ee:be:76:7f:98:58:ab:d2:
a3:ed:39:6a:6a:d2:b3:0c:b0:85:b1:c2:73:73:5d:74:c7:7b:
89:2d:67:03:5a:ff:47:ae:74:bb:b9:b3:46:85:8e:ea:25:89:
e1:2b:12:43:1b:d5:02:ff:f0:71:33:1f:68:e2:66:e0:a9:16:
da:92:73:da:ce:bc:7b:e5:f9:ac:8c:84:d6:3b:f0:e3:17:17:
e1:d7:3d:44:ff:50:bd:c0:4b:07:8b:51:1d:7e:46:9b:2f:36:
9a:6d:ba:2d:2d:e0:c3:ae:81:65:94:64:98:59:78:d4:34:6f:
6a:51:c8:65:c9:15:87:ef:86:46:16:63:bc:83:96:b3:80:1c:
d3:ea:48:23:e6:38:98:e9:74:3c:0c:fa:5c:75:21:e7:25:20:
0a:39:5f:2c:89:44:fd:6c:49:ee:92:71:b6:6d:da:df:0c:67:
2b:e7:de:68:20:38:e4:15:09:42:0c:21:64:8e:61:8c:b9:97:
5e:2c:3f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 21:36:56 2026 by rpki-client