
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft
File: gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft (raw, json)
Hash identifier: +doNCJN740kKVeRSY7/1xhEQpT7UUZ8KncIbvePa5ZE=
Subject key identifier: 6E:7F:BD:B4:72:B2:09:AF:19:4A:90:A3:E6:D3:6C:2E:41:BE:8E:0F
Authority key identifier: 81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4
Certificate issuer: /CN=A917092C/serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4
Certificate serial: 01B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft
Manifest number: 0180
Signing time: Fri 11 Sep 2026 04:49:53 +0000
Manifest this update: Fri 11 Sep 2026 04:49:52 +0000
Manifest next update: Fri 18 Sep 2026 04:49:52 +0000
Files and hashes: 1: gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl (hash: s3M4T2MrueyGPjdCjZJTLrmaXtA1XFu+R41kOUZAv/Q=)
2: 8E00FBF2777E11EF8D0ECC4EC4F9AE02.roa (hash: 9dQstXImTlCDYkWwNVOE5AaWfqt3N6M6/xI4kYS4UCs=)
3: E3C4A4EE777E11EFB3F75352C4F9AE02.roa (hash: 50bHfxKSpda4xd/0+Y70XiROBlQW8ceJ16h3JpGhCFI=)
4: E27B5862777E11EFB3F75352C4F9AE02.roa (hash: mQtFZnxqBOSE+G0rPNutjCbpOwWmI7n4xbDitTqkJzk=)
5: E1F3085E777E11EFB3F75352C4F9AE02.roa (hash: MlWkxf4J765duArgDZ2QKyAt6xI228MKLb5L4iTwob0=)
6: E3105D04777E11EFB3F75352C4F9AE02.roa (hash: DrKVDvMocLXzLgvXMZCEUVeDoIKw7Tev+2Jtiw1fDsY=)
7: 752774D616A111F0B2CDBC72C4F9AE02.roa (hash: suny3D8b6EtNlMBNr60aW4wrzdwyFWYaz0jtIBV7c9Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl
rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 04:49:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 439 (0x1b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917092C, serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4
Validity
Not Before: Sep 11 04:49:52 2026 GMT
Not After : Sep 18 04:49:52 2026 GMT
Subject: CN=6aa38871-b446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:09:3a:33:a3:49:a6:77:3f:72:9a:bd:51:43:
d6:7a:80:7d:a8:96:47:40:be:f1:c4:e6:92:5a:dc:
ad:c8:8d:10:6f:15:30:e1:74:b7:c9:2e:50:8a:97:
b9:b2:78:8f:c2:09:c0:09:04:8e:1e:6a:92:27:fd:
82:a3:89:6e:c7:77:60:0d:fd:dd:2a:53:fd:ca:62:
03:9c:a4:bb:5d:03:97:75:1a:5d:ac:3f:a5:39:a4:
c7:cf:e2:3e:68:80:cc:07:3d:c4:43:c2:93:ec:87:
b3:63:67:59:10:d2:bb:67:04:96:b3:e0:85:9f:10:
f5:b2:e3:e9:19:9d:26:5b:44:f2:1f:bb:18:5a:dd:
a1:a9:29:a8:f0:24:83:86:81:1e:85:7f:bc:a2:d9:
17:97:d3:5e:8d:c6:6a:35:24:b8:6f:07:f5:93:19:
aa:26:d5:89:27:48:6d:a5:74:cd:16:49:49:3f:00:
bb:37:bf:f1:99:29:1d:a7:9f:f4:7a:7f:88:ae:98:
89:66:62:9f:0e:bf:23:36:d6:14:e5:6c:61:cb:8c:
6d:fc:21:39:16:06:c4:a7:b0:9b:47:0e:7f:d1:40:
11:b9:4d:ec:c0:8a:96:fa:21:f5:8a:83:1e:8a:66:
b2:d1:2f:aa:33:c6:b8:e5:c1:22:14:c3:b5:09:5f:
3e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:7F:BD:B4:72:B2:09:AF:19:4A:90:A3:E6:D3:6C:2E:41:BE:8E:0F
X509v3 Authority Key Identifier:
keyid:81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:2a:34:56:ac:8d:19:f7:81:be:fe:8d:41:a6:91:4d:c7:e5:
1f:4e:a7:3c:4d:59:dd:7e:b3:39:e6:1a:1a:93:c4:19:15:37:
6c:40:8e:1b:92:2d:d1:37:7d:b1:97:d6:74:0d:01:f0:b9:98:
3a:6e:00:50:f2:5d:40:d9:da:74:d0:a7:45:2e:d5:f1:8b:b3:
cb:2a:23:b1:38:0f:6f:c9:23:59:eb:9f:29:7a:00:38:85:dd:
3e:41:e6:4a:d6:a5:da:b4:76:6c:6c:0f:80:b3:8a:27:0e:1f:
5b:77:db:ee:21:11:3e:e4:f3:9f:49:27:3f:bc:fe:cb:05:b1:
64:0f:04:d3:f9:00:9e:71:f3:bc:e0:a9:fa:8d:ff:63:7c:fd:
c4:b5:6e:af:0d:52:84:73:65:70:ac:e1:d5:d2:ff:9a:31:15:
e9:ed:2f:d1:a2:ce:b3:47:48:24:32:44:5a:ae:e3:11:d7:36:
95:ee:76:79:31:7b:7b:31:67:cc:0a:ac:7c:eb:cd:7c:b0:f7:
f5:1f:47:0b:3a:d3:f9:ea:45:ab:19:55:9e:ae:82:7c:dd:28:
c3:30:4f:39:de:32:3f:36:21:c2:c3:1b:53:08:b6:c9:54:73:
c8:86:a9:10:01:c8:df:72:3f:b2:c3:d0:2f:f2:de:0b:fd:dc:
13:4e:7b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 06:53:33 2026 by rpki-client