
$ rpki-client -vvf rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.mft
File: g1KnNOghRPMixQtyik92WjPXIlY.mft (raw, json)
Hash identifier: TZfErp+qUUNu7kpjkKxvwl7eqb1+yJ88n6rp1SWCfZE=
Subject key identifier: 5C:B5:13:4E:6F:8E:F8:31:E6:02:21:B6:CC:2F:4C:F6:4B:EE:BA:36
Authority key identifier: 83:52:A7:34:E8:21:44:F3:22:C5:0B:72:8A:4F:76:5A:33:D7:22:56
Certificate issuer: /CN=A917357E/serialNumber=8352A734E82144F322C50B728A4F765A33D72256
Certificate serial: 02ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1KnNOghRPMixQtyik92WjPXIlY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.mft
Manifest number: 07B8
Signing time: Wed 20 May 2026 23:49:25 +0000
Manifest this update: Wed 20 May 2026 23:49:24 +0000
Manifest next update: Wed 27 May 2026 23:49:24 +0000
Files and hashes: 1: g1KnNOghRPMixQtyik92WjPXIlY.crl (hash: lsk3EF3HLzFMq+5JJPafXeudzmk7LsJnWBvvnEqeeOc=)
2: D89FDE783D9611F1B175AB4BC4833773.roa (hash: 4wi07dE2kolx7jvAdeVv4QEH8aWYT0OYBjVpj0ack7Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.crl
rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1KnNOghRPMixQtyik92WjPXIlY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 23:49:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 749 (0x2ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917357E, serialNumber=8352A734E82144F322C50B728A4F765A33D72256
Validity
Not Before: May 20 23:49:24 2026 GMT
Not After : May 27 23:49:24 2026 GMT
Subject: CN=6a0e4885-373e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ac:4d:11:d6:90:f6:da:6d:ca:b8:6e:76:39:
8b:59:85:c5:86:96:c9:48:cb:3c:96:6c:ec:f4:9c:
a4:24:ae:57:80:e5:6b:f6:cf:3c:e0:04:8c:6b:b6:
26:20:c7:1c:27:45:35:41:94:17:19:f9:49:fb:83:
d5:d1:a1:42:84:65:99:50:56:8f:bb:04:58:3b:7e:
7b:95:a3:31:4f:12:5b:a5:27:aa:77:da:e9:86:56:
8e:7c:27:13:03:77:a3:dc:a5:d4:25:73:53:0a:d0:
40:b5:1c:6d:6a:16:36:e4:7c:ea:ba:27:7f:f7:9f:
85:54:18:98:fe:28:56:4b:41:23:5d:92:1f:f0:62:
4f:cc:22:6a:6a:4c:3b:10:2b:3f:70:e1:a1:9c:54:
f1:25:e4:90:47:cf:c4:e3:53:cf:15:29:7a:57:67:
11:31:88:b8:49:1f:2c:4b:6e:b7:f3:07:a0:fd:d3:
16:fb:46:76:31:74:63:e7:6b:40:10:8c:5a:17:5e:
37:51:43:46:d1:54:28:0e:ac:7a:31:1a:6d:af:a0:
73:d5:1f:69:4d:32:ba:14:9b:9a:18:60:63:35:07:
77:0b:fd:11:a3:bf:ea:22:14:e2:59:f6:3f:31:89:
e4:98:9e:e4:ef:81:eb:b6:c3:cd:19:4a:a0:6a:f4:
c0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B5:13:4E:6F:8E:F8:31:E6:02:21:B6:CC:2F:4C:F6:4B:EE:BA:36
X509v3 Authority Key Identifier:
keyid:83:52:A7:34:E8:21:44:F3:22:C5:0B:72:8A:4F:76:5A:33:D7:22:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1KnNOghRPMixQtyik92WjPXIlY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c7:f0:29:f9:5f:0b:ec:82:4d:03:db:1f:7d:ea:2a:d0:ae:b9:
ba:fc:c6:00:35:a7:aa:41:54:dc:64:d0:c9:9b:c0:02:b9:8d:
ce:d4:93:b0:35:24:b7:cf:c0:e9:ed:fd:87:30:36:d1:f5:1f:
92:05:b2:4f:c3:6c:ca:5b:a7:da:6c:84:f0:9a:9f:6c:bd:54:
49:50:46:e8:b4:63:20:72:07:dc:00:16:e4:f0:bc:60:87:dc:
5f:17:16:b1:61:f0:6a:02:61:7a:ad:49:04:46:f5:47:a2:f0:
a3:df:69:9a:f3:46:37:0b:01:2b:d2:9f:25:c4:7a:75:41:81:
cb:5c:94:40:00:3b:70:7d:bc:18:07:00:63:ec:a3:bd:34:e3:
ab:04:1b:80:dd:6f:e3:fb:00:c1:dc:a5:62:19:29:20:3a:a5:
91:90:7b:73:9b:52:36:6b:4d:59:bd:75:50:ec:8b:f9:52:3c:
ca:11:e2:fc:1f:cb:04:a5:06:95:7e:cc:62:c8:a3:9e:22:3a:
85:eb:68:33:d2:4c:9a:11:45:27:ff:38:e8:70:58:84:96:35:
4d:8c:a0:5d:f2:27:e0:db:4f:bd:09:69:e9:0a:96:4f:b0:6c:
ea:7a:90:c8:b3:3a:a7:cf:12:3c:d8:b3:82:9c:83:1a:47:81:
4d:1e:94:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:06 2026 by rpki-client