
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
File: gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft (raw, json)
Hash identifier: FCHmh7jXWPZccXOAkzkVKSJJyy/8+el+scy+Is9rM2U=
Subject key identifier: 00:28:DF:8A:9F:E7:90:F4:C7:CA:A3:5B:18:53:EB:14:97:E3:FE:14
Authority key identifier: 80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB
Certificate issuer: /CN=A917B4BF/serialNumber=8035090A057327E1200593C20C88C519A45C9ECB
Certificate serial: 0535
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
Manifest number: 04DE
Signing time: Wed 05 Aug 2026 00:33:23 +0000
Manifest this update: Wed 05 Aug 2026 00:33:23 +0000
Manifest next update: Wed 12 Aug 2026 00:33:23 +0000
Files and hashes: 1: gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl (hash: K9eA96d3h+2pbQDmFWr4d5y8y0w7Iq9QmIgBfGaTbyQ=)
2: A5D75708E07111ED9601E941C4F9AE02.roa (hash: g0/tJc0JW/CRmQeJicEs0HkSx3ITHzBqjIOAcBLM6FE=)
3: 44B11A52CAEE11ECBC0B2B7EC4F9AE02.roa (hash: 1ib5ZHiX2c+Ay9rYC1Z/Jru6mlw71yvanvthh2v+7bo=)
4: 64782D1E607E11ED9CD7EF0FC4F9AE02.roa (hash: eYPDqk6CiCVss4EkZuowgeG638Civi0MVQZq29pSYbk=)
5: 6873616CCAE811ECBB89015FC4F9AE02.roa (hash: naDu5Ja+nUZ+iaPxJzaO5xNctRuZdG06y3HniPa528I=)
6: 609BCC763D9311EE9B7BB945C4F9AE02.roa (hash: Z/QK88M5uL5DdEz3ATOtjxO2eM1sapV5OhRj3AH8iQw=)
7: B5BFAB442FE111F19DB441919E833773.roa (hash: P12NrwuEVi8wdx/kCABaTswenwo867fCicXtnmsvepc=)
8: 8F9CB4448F3511ECB2182782C4F9AE02.roa (hash: PEgw27of0MFqunEKz93iWKmEM4bPPmkxIAHYsCgJElI=)
9: F255CD0A5EC411ED810B8584C4F9AE02.roa (hash: IFm6rzchuTr/Ghy/abEkmajej4rQuJFBH9uiFcUCM2Q=)
10: F5B3F2F02FE111F183FB5F929E833773.roa (hash: adpxHreCn3jxtJ88fU3gS6rSVCPiga5e2uj5/vlUSuY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl
rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Aug 2026 00:33:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1333 (0x535)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B4BF, serialNumber=8035090A057327E1200593C20C88C519A45C9ECB
Validity
Not Before: Aug 5 00:33:23 2026 GMT
Not After : Aug 12 00:33:23 2026 GMT
Subject: CN=6a7284d3-1390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:44:a1:70:16:40:d5:74:b2:2f:54:22:e9:5a:
79:f5:51:8e:38:e2:c0:48:a4:7b:d7:48:15:6a:7b:
70:95:91:d8:6f:4b:c7:19:a0:06:0c:55:7a:35:87:
ae:28:08:c2:8d:f8:de:d7:86:e2:78:cf:e4:be:c7:
92:4d:67:f4:28:bf:e0:5f:35:18:7b:ee:0c:1c:87:
9a:55:dd:d8:77:1d:2f:c6:2c:2f:ff:4e:6e:6c:fe:
69:9e:fd:2c:23:bc:20:0c:b0:c5:69:0c:7c:f5:67:
70:6a:49:aa:0e:e3:c9:a0:b2:cb:0f:41:34:fc:81:
8c:c6:08:ce:20:59:03:10:4c:2d:75:9d:a9:65:5b:
ab:91:79:3c:a1:50:b4:09:7a:f0:09:25:95:87:f1:
8e:b3:1c:a4:d2:3c:80:5a:25:c1:7b:28:b5:50:6f:
64:9b:b4:88:a0:87:be:44:44:8c:7e:9b:d8:62:4c:
dd:e6:22:a9:dc:be:6d:30:b6:2b:be:84:58:1c:4b:
a5:f1:63:6e:ca:66:33:82:a8:ed:b1:0b:45:db:6b:
ca:cb:58:41:9c:39:37:9f:1e:f4:5b:76:99:b0:93:
10:43:42:d3:dd:79:b0:3d:1b:e9:6c:5a:e1:e5:19:
41:3b:6f:a0:36:54:37:36:94:d9:49:ba:85:46:b4:
29:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:28:DF:8A:9F:E7:90:F4:C7:CA:A3:5B:18:53:EB:14:97:E3:FE:14
X509v3 Authority Key Identifier:
keyid:80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:fd:0a:8f:13:fb:d9:1a:e4:a4:36:39:26:f8:76:b1:a3:28:
df:94:9c:4c:0a:bc:5d:44:32:50:e6:fc:f9:44:63:e3:85:98:
71:72:37:cf:75:78:df:eb:7e:83:3e:3d:4b:bb:cb:29:67:37:
d3:83:90:5d:b4:c7:94:3c:93:c0:5a:2f:6d:07:da:14:c3:62:
a0:07:8d:a6:5d:61:86:3d:82:cd:8a:ad:00:76:c9:22:1f:81:
78:ea:46:b4:b0:fd:d0:38:09:6d:a0:74:be:31:16:d7:e4:2a:
60:3a:c0:38:78:c8:5b:18:31:03:c0:86:c9:d1:87:ef:57:01:
ac:65:ac:94:59:9f:5d:b9:04:8e:dc:ef:30:a9:44:3c:9d:f4:
ac:3c:fb:65:8c:5a:22:fd:0e:ea:65:4a:4a:b7:0b:ff:37:f5:
1c:e8:9a:51:8d:7f:d4:c8:2f:fb:74:01:1b:8e:85:94:01:bc:
3b:0f:10:a3:7b:4c:92:f2:76:44:e4:14:75:37:2d:6f:6e:0d:
b3:30:cd:20:cf:b8:fb:ee:75:1f:a3:b1:85:12:55:8a:c4:a9:
a8:c0:0e:8f:82:7d:95:d0:f3:5b:93:23:5e:60:43:85:46:26:
14:d3:06:41:29:29:58:fb:8f:09:ad:50:e7:c6:b0:66:ad:d7:
ee:14:9e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 10:49:47 2026 by rpki-client