
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
File: gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft (raw, json)
Hash identifier: VmTcc1CvOYRSUss9ApeqxCYqC5O6ytl6vAqJXnCi8wg=
Subject key identifier: 83:18:69:05:F0:0F:15:E3:9D:BD:83:1D:FF:50:1F:A6:B9:AB:A0:00
Authority key identifier: 80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB
Certificate issuer: /CN=A917B4BF/serialNumber=8035090A057327E1200593C20C88C519A45C9ECB
Certificate serial: 054E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
Manifest number: 04F7
Signing time: Tue 22 Sep 2026 23:27:44 +0000
Manifest this update: Tue 22 Sep 2026 23:27:44 +0000
Manifest next update: Tue 29 Sep 2026 23:27:44 +0000
Files and hashes: 1: gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl (hash: 1nVTD40d7084LcZHl+THJAr4glsx+oSP/3bdRk5xR90=)
2: 64782D1E607E11ED9CD7EF0FC4F9AE02.roa (hash: eYPDqk6CiCVss4EkZuowgeG638Civi0MVQZq29pSYbk=)
3: 6873616CCAE811ECBB89015FC4F9AE02.roa (hash: naDu5Ja+nUZ+iaPxJzaO5xNctRuZdG06y3HniPa528I=)
4: 8F9CB4448F3511ECB2182782C4F9AE02.roa (hash: PEgw27of0MFqunEKz93iWKmEM4bPPmkxIAHYsCgJElI=)
5: F5B3F2F02FE111F183FB5F929E833773.roa (hash: adpxHreCn3jxtJ88fU3gS6rSVCPiga5e2uj5/vlUSuY=)
6: F255CD0A5EC411ED810B8584C4F9AE02.roa (hash: IFm6rzchuTr/Ghy/abEkmajej4rQuJFBH9uiFcUCM2Q=)
7: 609BCC763D9311EE9B7BB945C4F9AE02.roa (hash: Z/QK88M5uL5DdEz3ATOtjxO2eM1sapV5OhRj3AH8iQw=)
8: B5BFAB442FE111F19DB441919E833773.roa (hash: P12NrwuEVi8wdx/kCABaTswenwo867fCicXtnmsvepc=)
9: A5D75708E07111ED9601E941C4F9AE02.roa (hash: g0/tJc0JW/CRmQeJicEs0HkSx3ITHzBqjIOAcBLM6FE=)
10: 44B11A52CAEE11ECBC0B2B7EC4F9AE02.roa (hash: 1ib5ZHiX2c+Ay9rYC1Z/Jru6mlw71yvanvthh2v+7bo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl
rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 23:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1358 (0x54e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B4BF, serialNumber=8035090A057327E1200593C20C88C519A45C9ECB
Validity
Not Before: Sep 22 23:27:44 2026 GMT
Not After : Sep 29 23:27:44 2026 GMT
Subject: CN=6ab30ef0-1748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b3:30:6e:46:b5:f8:4d:c0:37:2a:ac:f3:5b:
ed:fb:8d:b1:8c:94:63:fd:3f:8f:71:02:8c:27:cd:
e9:bc:49:a1:19:09:6a:04:16:9d:79:cd:e0:65:92:
77:7a:07:85:a8:c8:fb:8e:96:48:4f:cc:61:58:13:
6f:86:9c:a2:08:e2:c5:04:8e:05:7a:c0:d5:6e:c7:
9a:8b:a5:9e:0c:8d:03:c0:94:74:b5:a5:a3:b7:5c:
0d:a2:8a:bb:00:e7:9f:e5:fc:a3:a6:59:e6:8c:5b:
24:31:c7:b3:15:c3:ff:77:28:f9:42:b6:c2:da:7d:
9f:2a:7a:80:04:34:74:29:39:b4:91:1d:44:b0:d6:
57:e2:69:ec:30:71:ff:54:45:c3:e8:e6:22:7f:29:
51:45:8b:55:a2:ae:c4:9f:77:52:62:dc:1e:fd:bd:
dc:2e:18:95:84:39:d9:60:a3:4d:26:7c:a9:f6:73:
86:29:b6:80:cc:aa:60:43:41:c1:0f:81:e7:ed:c3:
87:44:23:83:c7:5a:5c:ff:45:67:dc:3b:56:67:5a:
03:9f:38:97:f5:14:c6:e8:34:67:c6:ed:46:36:b0:
3c:da:a2:db:c7:07:ec:ed:3d:fb:87:b4:12:47:26:
cc:39:9d:6c:23:1a:e9:3a:52:25:d2:b2:96:c9:e3:
54:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:18:69:05:F0:0F:15:E3:9D:BD:83:1D:FF:50:1F:A6:B9:AB:A0:00
X509v3 Authority Key Identifier:
keyid:80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:0a:27:43:8c:f2:5d:94:12:07:2b:36:96:e7:23:bf:1a:1c:
c4:bd:a6:a3:cf:07:79:49:51:ab:54:5c:e8:3c:59:a1:70:b0:
75:78:3f:b6:8a:8b:38:1e:f4:3d:22:7c:52:fe:99:6d:7c:39:
c8:6b:01:2f:28:49:4b:03:da:2c:54:bb:6c:92:1c:36:e2:4b:
a8:de:c4:6d:37:cf:01:47:a1:8b:38:c9:38:63:3c:99:58:a5:
a8:75:24:68:9b:ff:a7:9b:02:e5:b5:1c:03:09:74:eb:a7:33:
5e:75:74:7a:af:49:23:09:1c:d7:1e:9b:fb:f8:e5:50:0b:a5:
19:a5:1b:73:4a:e1:d9:f6:3e:63:4d:e0:52:e7:87:a7:94:08:
5a:7d:4e:f1:9b:66:77:52:88:ba:a6:39:60:16:82:73:a0:60:
94:dc:53:0e:ea:58:99:26:d4:0a:18:ec:b8:35:d6:b8:52:57:
a0:bc:9b:e8:22:37:60:67:3a:b3:1b:3a:86:37:81:a9:93:c3:
45:ef:33:85:a3:8b:72:63:cf:7e:d6:1b:6c:e4:67:1c:a5:ef:
df:d1:12:7b:31:01:18:69:d6:6f:15:75:22:bc:c3:a7:8e:59:
b9:35:4b:24:30:a2:9a:a2:c5:eb:cc:f3:00:1b:48:61:54:b6:
ff:59:5a:64
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0I0QkYxMTAvBgNVBAUTKDgwMzUwOTBBMDU3MzI3RTEyMDA1OTNDMjBDODhDNTE5
QTQ1QzlFQ0IwHhcNMjYwOTIyMjMyNzQ0WhcNMjYwOTI5MjMyNzQ0WjAYMRYwFAYD
VQQDEw02YWIzMGVmMC0xNzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7bMwbka1+E3ANyqs81vt+42xjJRj/T+PcQKMJ83pvEmhGQlqBBadec3gZZJ3
egeFqMj7jpZIT8xhWBNvhpyiCOLFBI4FesDVbseai6WeDI0DwJR0taWjt1wNooq7
AOef5fyjplnmjFskMcezFcP/dyj5QrbC2n2fKnqABDR0KTm0kR1EsNZX4mnsMHH/
VEXD6OYifylRRYtVoq7En3dSYtwe/b3cLhiVhDnZYKNNJnyp9nOGKbaAzKpgQ0HB
D4Hn7cOHRCODx1pc/0Vn3DtWZ1oDnziX9RTG6DRnxu1GNrA82qLbxwfs7T37h7QS
RybMOZ1sIxrpOlIl0rKWyeNU1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIMYaQXw
DxXjnb2DHf9QH6a5q6AAMB8GA1UdIwQYMBaAFIA1CQoFcyfhIAWTwgyIxRmkXJ7L
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjRCRi9COENDNjkzQzg1
NUMxMUVDOEUzQ0JCNTFDNEY5QUUwMi9nRFVKQ2dWekotRWdCWlBDRElqRkdhUmNu
c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dEVUpDZ1Z6Si1FZ0JaUENESWpGR2FSY25zcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QjRCRi9COENDNjkzQzg1NUMxMUVDOEUzQ0JCNTFDNEY5QUUwMi9nRFVKQ2dWekot
RWdCWlBDRElqRkdhUmNuc3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfwonQ4zyXZQSBys2lucjvxocxL2mo88HeUlRq1Rc6DxZoXCwdXg/toqLOB70
PSJ8Uv6ZbXw5yGsBLyhJSwPaLFS7bJIcNuJLqN7EbTfPAUehizjJOGM8mVilqHUk
aJv/p5sC5bUcAwl066czXnV0eq9JIwkc1x6b+/jlUAulGaUbc0rh2fY+Y03gUueH
p5QIWn1O8Ztmd1KIuqY5YBaCc6BglNxTDupYmSbUChjsuDXWuFJXoLyb6CI3YGc6
sxs6hjeBqZPDRe8zhaOLcmPPftYbbORnHKXv39ESezEBGGnWbxV1IrzDp45ZuTVL
JDCimqLF68zzABtIYVS2/1laZA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:47:14 2026 by rpki-client