
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.mft
File: GrHejsiRr6LU4cka9Vg0kL-7wgk.mft (raw, json)
Hash identifier: E8R+6ABKy1AeozlhksRXzYAswMqfa/K6QkG4YwZVA3w=
Subject key identifier: A7:FC:41:7D:F3:33:04:5F:B8:39:A8:2E:F8:92:16:47:85:59:A1:8E
Authority key identifier: 1A:B1:DE:8E:C8:91:AF:A2:D4:E1:C9:1A:F5:58:34:90:BF:BB:C2:09
Certificate issuer: /CN=A916DB3F/serialNumber=1AB1DE8EC891AFA2D4E1C91AF5583490BFBBC209
Certificate serial: 1EE2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GrHejsiRr6LU4cka9Vg0kL-7wgk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.mft
Manifest number: 1ED3
Signing time: Mon 22 Jun 2026 16:00:53 +0000
Manifest this update: Mon 22 Jun 2026 16:00:52 +0000
Manifest next update: Mon 29 Jun 2026 16:00:52 +0000
Files and hashes: 1: GrHejsiRr6LU4cka9Vg0kL-7wgk.crl (hash: ZT6I+bYbSVDgeInd+In7DZCi/V22otP2tPzyokFNH2w=)
2: 7E8D9A52895411E6B3538424C4F9AE02.roa (hash: eTQyUMylY0vGU3HeddrGwU7l9VqbceQVt15/3Mvk3cQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.crl
rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GrHejsiRr6LU4cka9Vg0kL-7wgk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 16:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7906 (0x1ee2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DB3F, serialNumber=1AB1DE8EC891AFA2D4E1C91AF5583490BFBBC209
Validity
Not Before: Jun 22 16:00:52 2026 GMT
Not After : Jun 29 16:00:52 2026 GMT
Subject: CN=6a395c35-f13f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c1:bb:bd:f5:64:d4:34:8b:28:3f:59:a5:08:
a8:0c:f6:64:f1:8e:b8:2e:45:76:a2:c4:62:ac:94:
f3:a8:41:fa:3f:ec:93:43:e8:1d:11:d8:2c:4a:a1:
c9:ba:7a:41:1d:f8:18:03:c1:70:4c:0b:d3:b8:62:
13:07:b4:09:b1:d4:c3:4b:05:2a:1a:2f:38:19:57:
60:f8:8a:be:2e:36:b1:97:2b:dd:6d:92:35:68:25:
35:72:b6:00:cb:5e:f4:31:08:91:74:ab:6b:11:d6:
d5:96:69:fe:8d:90:4f:4b:5c:7c:4e:dd:2a:6b:d0:
da:10:54:b3:58:f1:42:42:3e:56:c7:6b:95:8d:09:
3d:99:fc:5d:d1:06:be:14:26:24:24:2c:f7:8c:2b:
ff:5b:55:68:67:aa:2d:41:1d:c6:0c:5f:b6:d8:e0:
b8:5a:d1:d7:f4:db:93:c1:fd:58:f7:9d:9a:e7:2d:
43:1c:10:36:b7:0f:ed:af:74:a6:47:3f:53:e3:c0:
f3:7c:d8:1d:14:b6:9a:ae:b1:44:f5:db:26:25:b8:
6c:e5:b1:2e:55:ff:cf:3b:e8:08:8e:c9:45:d9:81:
56:ea:de:c7:fb:4f:81:6a:92:09:9d:a6:32:85:94:
38:e8:7f:e3:26:45:12:9e:fa:57:b2:db:8e:d0:64:
a0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FC:41:7D:F3:33:04:5F:B8:39:A8:2E:F8:92:16:47:85:59:A1:8E
X509v3 Authority Key Identifier:
keyid:1A:B1:DE:8E:C8:91:AF:A2:D4:E1:C9:1A:F5:58:34:90:BF:BB:C2:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GrHejsiRr6LU4cka9Vg0kL-7wgk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:b7:cf:f2:f1:af:6d:db:63:6f:93:b6:ca:46:25:33:5c:13:
fe:e6:bc:21:c3:ea:d6:1a:4f:09:7b:53:cf:c6:b1:99:2f:4d:
8a:e1:c9:bb:e9:f3:26:50:d2:74:82:3b:79:73:57:54:22:ce:
68:70:df:79:89:8d:dc:cc:36:9d:90:02:ba:93:70:8d:a8:76:
38:01:40:86:2e:7d:68:e5:5f:4f:f8:cd:db:58:00:61:49:8f:
b8:ec:73:7c:e3:3b:62:6c:bd:63:65:3d:5c:d8:84:05:92:21:
f4:4a:d9:56:c6:e9:f6:bd:a0:e1:40:aa:c5:06:54:2f:9f:55:
00:c5:7f:21:56:79:6e:ea:af:40:34:69:d4:fc:1d:6e:1c:2b:
0d:a2:27:82:5b:c0:89:92:e7:ae:42:f7:cd:1d:a0:7b:33:8b:
b2:9f:3f:e7:39:35:ce:6d:89:c2:08:22:40:a7:19:bf:a4:c4:
48:7d:fd:36:eb:32:15:c9:a5:e6:a5:3b:6c:dc:a6:86:87:1d:
a7:0f:17:f8:81:28:ff:56:c7:70:68:be:d8:bc:11:36:ee:6d:
87:84:77:ac:47:c4:05:f0:06:28:00:c5:90:a4:40:6f:c7:70:
69:15:f7:6c:9f:13:32:de:44:db:3f:48:07:ff:c5:c1:71:ee:
2f:a4:b2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:19:57 2026 by rpki-client