
$ rpki-client -vvf rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft
File: gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft (raw, json)
Hash identifier: HjqWAESvjYYeNMbmTcHnSMncfyTMHaveK+vGmIzlbFs=
Subject key identifier: 93:4A:67:B3:8F:C5:7F:40:2D:96:1C:E7:9B:84:D1:39:CF:C9:A8:84
Authority key identifier: 81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4
Certificate issuer: /CN=A917092C/serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4
Certificate serial: 016A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft
Manifest number: 0139
Signing time: Mon 27 Apr 2026 05:23:45 +0000
Manifest this update: Mon 27 Apr 2026 05:23:45 +0000
Manifest next update: Mon 04 May 2026 05:23:45 +0000
Files and hashes: 1: gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl (hash: 6iKasSv9FP2OvPb62+g6I/ai8fNmMRwLD4N5vUUmJIw=)
2: 752774D616A111F0B2CDBC72C4F9AE02.roa (hash: iGlUh9TWU4eF1gUngLKtyEqTN0brCSv48MjOIvg0+wA=)
3: E3105D04777E11EFB3F75352C4F9AE02.roa (hash: nm1Ullm2VIIXw5m4XpAUTvY39qoFFv2kQzceO6Rs4JQ=)
4: 8E00FBF2777E11EF8D0ECC4EC4F9AE02.roa (hash: zpgkPkDvpxrkSLXBoEJusQVoT2JeDQ/RaiKoNpwaUvg=)
5: E1F3085E777E11EFB3F75352C4F9AE02.roa (hash: tbOGVdr1pGEtRNIPhw+pN+6OYD1Bg4DdAHsAJbGglfo=)
6: E3C4A4EE777E11EFB3F75352C4F9AE02.roa (hash: CkipJrZk0lzhAoob2kPQd93c6/y1lAZ0Ra8Fe1utBl0=)
7: E27B5862777E11EFB3F75352C4F9AE02.roa (hash: WpLf4AaObe+N5I2HIzmO3ifOs3a8b6pFk0v9kjWfhKo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl
rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 05:23:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 362 (0x16a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917092C, serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4
Validity
Not Before: Apr 27 05:23:45 2026 GMT
Not After : May 4 05:23:45 2026 GMT
Subject: CN=69eef2e1-be31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c7:bb:f1:1e:0d:40:21:dd:3c:61:35:6f:19:
d7:e6:7e:98:66:af:43:8d:87:60:46:25:6f:f8:08:
d2:0c:b2:ae:a7:56:ca:5c:db:37:75:a6:e3:cc:69:
09:46:9a:3b:d4:d7:b0:b9:19:08:c8:4e:0b:2f:51:
f2:63:27:06:9d:25:ff:69:6a:8b:fb:d1:b4:80:e9:
1f:af:91:07:86:e2:d5:ce:a0:4e:40:bc:a0:fd:26:
d3:29:37:b4:c3:3b:0d:28:42:ff:67:5d:9a:d8:f6:
d9:88:6a:b7:3c:7f:b5:c9:eb:37:d1:e4:64:42:5e:
a8:b2:ee:79:2b:12:66:00:2b:a4:46:e2:24:9e:a1:
1c:14:40:8f:d3:6d:c1:b2:e1:6b:43:7a:8f:3b:da:
04:3f:c6:b5:20:7f:d2:ef:0f:67:e4:d7:c3:b5:81:
9c:3d:09:ec:8a:0e:d4:5c:5e:09:b8:15:ac:91:b0:
d5:68:2e:b4:91:c1:d3:60:5d:83:08:88:74:fb:91:
0b:51:ff:4d:0c:fd:b7:ad:25:bf:74:46:64:70:7a:
65:fc:b9:55:f9:ae:f9:34:42:72:e2:db:d1:da:f2:
f8:1b:34:87:63:32:31:8e:0f:5e:aa:1e:f9:ad:19:
bc:96:a0:f8:dd:84:29:e4:41:6a:18:5f:2e:c5:de:
aa:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:4A:67:B3:8F:C5:7F:40:2D:96:1C:E7:9B:84:D1:39:CF:C9:A8:84
X509v3 Authority Key Identifier:
keyid:81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:26:71:c8:9d:32:6a:b2:33:c9:22:9f:dc:bb:13:8b:f3:43:
93:89:3f:2a:4e:2c:5a:f6:f7:29:9b:6c:d5:69:1e:8e:97:e8:
33:06:bd:69:31:50:7a:54:79:62:1d:55:4a:9e:3f:8b:5d:e8:
10:05:88:d0:28:de:ff:ad:80:63:04:da:a3:da:ce:64:c9:fb:
0c:ce:32:dd:6f:e6:8e:d1:f2:e9:9b:78:d9:e0:2a:69:a9:3a:
83:e4:df:8f:78:eb:35:4c:c0:d4:74:f8:d7:8e:25:9e:1b:e3:
b8:57:b2:af:8b:66:e0:15:48:b6:20:c3:21:16:06:c5:71:24:
d8:28:33:2f:03:2c:c9:a2:78:b2:1f:6b:9f:50:da:58:5c:4a:
6f:1b:e2:67:8c:33:5e:c9:0e:52:3e:fb:ff:93:f6:a2:df:5f:
a5:8f:2f:1f:6f:0f:28:1f:bf:87:56:b9:f2:6e:51:b1:05:c3:
48:c4:ef:1a:15:f5:9a:1d:c6:d2:a7:b5:6a:92:49:67:d4:b6:
91:cf:83:30:22:d3:e9:d5:dc:f4:d7:53:c4:6e:32:73:9f:3b:
3e:1a:df:d9:ee:d2:b7:9d:71:0b:02:1f:07:9f:66:88:38:17:
d9:9f:b2:5d:d9:5f:4e:e3:09:0f:1e:78:e3:25:c0:14:7b:fd:
1f:1d:3e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:34:47 2026 by rpki-client