
$ rpki-client -vvf rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.mft
File: g1KnNOghRPMixQtyik92WjPXIlY.mft (raw, json)
Hash identifier: xldbKoAnthjoHhunTJblzrIpbp5SZGGwxj00mhf7PLo=
Subject key identifier: BD:A3:DD:76:C6:22:E6:67:05:51:40:DE:C9:96:68:8A:D5:3D:C6:74
Authority key identifier: 83:52:A7:34:E8:21:44:F3:22:C5:0B:72:8A:4F:76:5A:33:D7:22:56
Certificate issuer: /CN=A917357E/serialNumber=8352A734E82144F322C50B728A4F765A33D72256
Certificate serial: 0312
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1KnNOghRPMixQtyik92WjPXIlY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.mft
Manifest number: 07FF
Signing time: Mon 27 Jul 2026 00:36:49 +0000
Manifest this update: Mon 27 Jul 2026 00:36:48 +0000
Manifest next update: Mon 03 Aug 2026 00:36:48 +0000
Files and hashes: 1: g1KnNOghRPMixQtyik92WjPXIlY.crl (hash: e/KjaoL7eAs0ivu7jpHCy6hrMFw9qQX7WzC9rJoTpxI=)
2: D89FDE783D9611F1B175AB4BC4833773.roa (hash: I6vEAiKk2iqA5O1Fu2fdZ+iFRdW869TGPWWGjxLAqTY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.crl
rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1KnNOghRPMixQtyik92WjPXIlY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 00:36:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 786 (0x312)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917357E, serialNumber=8352A734E82144F322C50B728A4F765A33D72256
Validity
Not Before: Jul 27 00:36:48 2026 GMT
Not After : Aug 3 00:36:48 2026 GMT
Subject: CN=6a66a821-ee7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bc:a6:bf:41:0d:c7:01:79:d8:ac:e7:54:fa:
d9:97:93:a9:ac:a1:d8:4c:5c:93:dc:3a:d3:1f:45:
79:e1:d7:2b:9d:fa:1e:32:bf:e3:10:b7:11:88:f0:
ef:ad:d3:3e:91:a3:20:8e:14:76:07:52:56:54:05:
03:ee:ae:b4:bb:67:95:d3:f6:1e:c3:3a:bf:6f:95:
e9:d3:cb:30:d1:de:44:af:4f:0a:c4:0f:d9:8e:13:
c2:07:f0:db:7d:19:e7:bf:27:fb:fa:23:31:43:24:
7b:8b:6e:39:ee:ba:f7:ee:f9:3f:e4:35:43:56:84:
84:89:81:9c:66:4e:66:69:96:c8:cd:1a:e3:3d:3c:
bc:76:63:f0:d4:c4:69:dd:0f:66:8d:7f:9c:36:c5:
8b:62:e2:3a:10:92:7d:da:db:af:6b:55:0f:4c:49:
fc:80:cb:8d:25:19:53:17:0d:c7:6a:96:5c:98:94:
8e:57:5d:bb:18:1b:ad:fd:d1:13:e3:d3:e2:69:34:
1d:2f:75:25:13:8d:99:30:41:8e:89:1d:70:49:88:
f7:48:e3:41:3f:3c:62:b6:f2:8c:42:5b:5e:c6:3c:
9c:dd:00:ab:b1:11:cd:78:79:fb:ea:f5:21:16:7a:
22:fa:5c:d7:25:d8:54:ca:6c:5b:3e:fd:03:11:a6:
b8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A3:DD:76:C6:22:E6:67:05:51:40:DE:C9:96:68:8A:D5:3D:C6:74
X509v3 Authority Key Identifier:
keyid:83:52:A7:34:E8:21:44:F3:22:C5:0B:72:8A:4F:76:5A:33:D7:22:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1KnNOghRPMixQtyik92WjPXIlY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:da:9c:3a:50:28:6f:31:d9:dd:7f:7f:f3:9b:35:b5:37:46:
03:94:96:eb:f5:7a:18:29:dd:63:dd:e3:9d:14:93:7a:a3:ad:
79:88:18:c1:8c:07:b5:5e:1a:9d:05:76:0f:8e:81:c7:0c:cf:
b1:9e:80:8e:5f:fc:43:8f:fc:71:da:05:3b:51:6f:cb:2e:2a:
3a:90:03:05:bd:a8:63:97:f4:51:69:ef:0a:36:c2:2a:07:3c:
0c:7e:8f:4a:0c:88:1c:f3:dc:cb:10:46:21:c0:70:0a:ed:22:
60:2f:0e:f2:a2:22:ce:d0:36:13:1b:53:a6:30:c2:65:89:80:
e9:8c:a6:39:73:65:c3:f1:d2:3c:bb:71:c1:0f:cc:8a:5f:91:
a3:62:96:32:4e:de:b4:59:2e:46:da:98:aa:eb:b7:63:9a:8c:
47:41:14:dd:ef:11:f5:70:15:cb:64:50:3b:d5:52:de:92:ce:
ca:13:6f:1f:5e:66:2f:9e:af:18:4d:29:fd:fc:36:72:85:65:
91:48:f8:47:98:f8:50:49:9f:bb:b2:4b:d9:1f:47:57:4a:7e:
59:90:3e:7e:76:a8:80:84:1f:a0:49:e8:99:f9:45:0a:16:cb:
6e:07:03:a7:3c:a3:0d:93:e2:df:c7:ac:8c:b9:3d:c4:a6:f5:
5f:95:29:57
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAxIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzM1N0UxMTAvBgNVBAUTKDgzNTJBNzM0RTgyMTQ0RjMyMkM1MEI3MjhBNEY3NjVB
MzNENzIyNTYwHhcNMjYwNzI3MDAzNjQ4WhcNMjYwODAzMDAzNjQ4WjAYMRYwFAYD
VQQDEw02YTY2YTgyMS1lZTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyLymv0ENxwF52KznVPrZl5OprKHYTFyT3DrTH0V54dcrnfoeMr/jELcRiPDv
rdM+kaMgjhR2B1JWVAUD7q60u2eV0/Yewzq/b5Xp08sw0d5Er08KxA/ZjhPCB/Db
fRnnvyf7+iMxQyR7i2457rr37vk/5DVDVoSEiYGcZk5maZbIzRrjPTy8dmPw1MRp
3Q9mjX+cNsWLYuI6EJJ92tuva1UPTEn8gMuNJRlTFw3HapZcmJSOV127GBut/dET
49PiaTQdL3UlE42ZMEGOiR1wSYj3SONBPzxitvKMQltexjyc3QCrsRHNeHn76vUh
Fnoi+lzXJdhUymxbPv0DEaa4TQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL2j3XbG
IuZnBVFA3smWaIrVPcZ0MB8GA1UdIwQYMBaAFINSpzToIUTzIsULcopPdloz1yJW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzU3RS82MDJENzZEODVE
NzMxMUVDQTMyNDg4NTNDNEY5QUUwMi9nMUtuTk9naFJQTWl4UXR5aWs5MldqUFhJ
bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2cxS25OT2doUlBNaXhRdHlpazkyV2pQWElsWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MzU3RS82MDJENzZEODVENzMxMUVDQTMyNDg4NTNDNEY5QUUwMi9nMUtuTk9naFJQ
TWl4UXR5aWs5MldqUFhJbFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAndqcOlAobzHZ3X9/85s1tTdGA5SW6/V6GCndY93jnRSTeqOteYgYwYwHtV4a
nQV2D46BxwzPsZ6Ajl/8Q4/8cdoFO1Fvyy4qOpADBb2oY5f0UWnvCjbCKgc8DH6P
SgyIHPPcyxBGIcBwCu0iYC8O8qIiztA2ExtTpjDCZYmA6YymOXNlw/HSPLtxwQ/M
il+Ro2KWMk7etFkuRtqYquu3Y5qMR0EU3e8R9XAVy2RQO9VS3pLOyhNvH15mL56v
GE0p/fw2coVlkUj4R5j4UEmfu7JL2R9HV0p+WZA+fnaogIQfoEnomflFChbLbgcD
pzyjDZPi38esjLk9xKb1X5UpVw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 03:27:00 2026 by rpki-client