
$ rpki-client -vvf rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft
File: gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft (raw, json)
Hash identifier: rh0XmxS1GO7UC566qg6zJl5O4m/gfc8N51MXTYTOJbg=
Subject key identifier: BB:B9:CD:61:0F:32:40:5A:8E:77:A8:DF:C6:D4:FC:2A:4E:68:91:3C
Authority key identifier: 81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4
Certificate issuer: /CN=A917092C/serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4
Certificate serial: 019F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft
Manifest number: 0168
Signing time: Mon 27 Jul 2026 06:55:16 +0000
Manifest this update: Mon 27 Jul 2026 06:55:15 +0000
Manifest next update: Mon 03 Aug 2026 06:55:15 +0000
Files and hashes: 1: gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl (hash: SYpWI6U01GY+xNvxfNN+AcGRfNIBYQw1Tt3wwXK5JzQ=)
2: E3105D04777E11EFB3F75352C4F9AE02.roa (hash: DrKVDvMocLXzLgvXMZCEUVeDoIKw7Tev+2Jtiw1fDsY=)
3: 8E00FBF2777E11EF8D0ECC4EC4F9AE02.roa (hash: 9dQstXImTlCDYkWwNVOE5AaWfqt3N6M6/xI4kYS4UCs=)
4: E3C4A4EE777E11EFB3F75352C4F9AE02.roa (hash: 50bHfxKSpda4xd/0+Y70XiROBlQW8ceJ16h3JpGhCFI=)
5: 752774D616A111F0B2CDBC72C4F9AE02.roa (hash: suny3D8b6EtNlMBNr60aW4wrzdwyFWYaz0jtIBV7c9Y=)
6: E27B5862777E11EFB3F75352C4F9AE02.roa (hash: mQtFZnxqBOSE+G0rPNutjCbpOwWmI7n4xbDitTqkJzk=)
7: E1F3085E777E11EFB3F75352C4F9AE02.roa (hash: MlWkxf4J765duArgDZ2QKyAt6xI228MKLb5L4iTwob0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl
rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 06:55:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 415 (0x19f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917092C, serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4
Validity
Not Before: Jul 27 06:55:15 2026 GMT
Not After : Aug 3 06:55:15 2026 GMT
Subject: CN=6a6700d3-958c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:97:22:f9:bd:37:82:3a:d5:c3:4b:61:b9:a0:
1f:0d:bf:fc:15:a6:88:fa:98:ac:d0:2a:7d:2a:3f:
39:14:95:cb:22:3c:08:e2:ca:d9:39:2d:78:84:ec:
6f:94:0f:6e:e8:28:63:d1:07:bf:46:cd:1e:7b:b9:
cc:a1:5c:34:5c:b0:9f:c6:67:52:1b:14:95:aa:fd:
fa:13:90:61:6c:3d:da:3d:2b:84:91:5f:38:9e:3c:
25:ff:54:e9:7c:3f:4f:ac:b1:b6:19:9c:b0:f4:8f:
96:9c:a6:6a:6d:85:87:d6:4e:0b:cb:c3:50:84:01:
13:8c:9d:25:49:5f:8c:f5:79:bb:8f:fb:c3:1f:3b:
c7:bf:4a:99:a1:28:3f:75:5a:f5:31:4a:06:75:a8:
0c:ea:5c:51:ab:8c:49:1c:56:fd:6c:ab:0d:40:aa:
a0:ea:65:4d:73:64:dd:05:f7:a8:74:96:58:70:e0:
f1:62:e4:d6:64:16:a8:1e:3b:a0:d5:cc:b8:66:aa:
8e:a9:51:8b:e7:f8:ca:08:90:70:0d:e8:71:2c:20:
04:15:49:35:00:ba:bb:c2:47:de:2a:7a:1b:fb:6d:
50:42:d8:07:a4:af:46:c7:ad:af:af:bd:e6:8c:9e:
ca:56:2f:25:b6:9d:89:4f:b4:f1:0a:be:86:15:18:
db:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B9:CD:61:0F:32:40:5A:8E:77:A8:DF:C6:D4:FC:2A:4E:68:91:3C
X509v3 Authority Key Identifier:
keyid:81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:32:5a:c2:47:47:2d:40:eb:c1:fb:8c:ae:10:13:fb:0f:98:
7b:58:bb:9e:a5:25:c4:e0:f2:a1:34:fc:30:48:82:f8:30:f8:
d9:5b:32:ae:59:4d:7c:3d:83:06:5f:56:10:ea:89:96:06:76:
72:f7:f3:2f:b8:ab:0c:3e:aa:6e:d5:b7:87:a9:33:d0:27:a8:
b8:f0:e8:6e:8b:4c:7c:40:7a:48:eb:37:88:8f:2b:af:70:6f:
94:c3:b8:0d:08:b9:63:fb:c5:83:d7:86:4c:aa:af:4d:8e:5a:
92:64:fe:f0:1d:f2:bb:6b:cf:c8:fb:94:55:8f:21:59:13:dc:
c8:99:62:d4:61:aa:9d:5e:43:01:45:b0:53:08:6c:f9:ab:a7:
d6:61:c5:e3:86:a2:67:a5:e7:b8:b4:f4:3f:7a:3c:b6:02:17:
a9:a7:71:05:e4:66:4b:fe:e9:ca:05:50:d5:0b:9e:2a:0a:71:
ef:3f:c7:53:ad:dc:b5:4a:7d:02:1e:82:c3:bf:0a:4a:3f:b2:
3c:70:27:04:69:fd:56:cf:b6:e9:81:4d:60:24:b5:08:bb:48:
7b:73:8f:0f:29:0f:21:13:d6:82:9b:b9:fc:b5:66:88:64:3d:
56:94:ec:23:12:e8:20:a4:62:b0:5f:8c:c7:43:cf:29:a7:dc:
b9:c5:78:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:42:16 2026 by rpki-client