
$ rpki-client -vvf rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft
File: gaZX6qx1VMq3oaKI9bP-7dilzEs.mft (raw, json)
Hash identifier: MpHNkJcljU2G/guEG4bEMXPlCetmpcNdgAByBNHgVzU=
Subject key identifier: 01:CF:32:C8:D2:68:13:76:A2:77:CC:1F:44:AC:A4:8C:24:B4:1D:60
Authority key identifier: 81:A6:57:EA:AC:75:54:CA:B7:A1:A2:88:F5:B3:FE:ED:D8:A5:CC:4B
Certificate issuer: /CN=A917DFDA/serialNumber=81A657EAAC7554CAB7A1A288F5B3FEEDD8A5CC4B
Certificate serial: B8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft
Manifest number: B3
Signing time: Mon 01 Jun 2026 05:25:07 +0000
Manifest this update: Mon 01 Jun 2026 05:25:06 +0000
Manifest next update: Mon 08 Jun 2026 05:25:06 +0000
Files and hashes: 1: gaZX6qx1VMq3oaKI9bP-7dilzEs.crl (hash: NbXrtP830+2eUbi3JRiVPD+bYjP12FIa+O4HlsXnbsw=)
2: A78653B2561F11F09624D128C4F9AE02.roa (hash: tZlTWUfKWexoieRyMVExBKlmUH5v/oDQJXIDDrcReSc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.crl
rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 05:25:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184 (0xb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917DFDA, serialNumber=81A657EAAC7554CAB7A1A288F5B3FEEDD8A5CC4B
Validity
Not Before: Jun 1 05:25:06 2026 GMT
Not After : Jun 8 05:25:06 2026 GMT
Subject: CN=6a1d17b2-ce1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f3:c4:30:24:e1:57:fc:d1:59:5b:00:62:58:
6e:8e:1b:8d:27:90:7e:c0:1f:2a:4a:ae:ad:23:b5:
a2:86:57:7a:35:f0:f7:f9:ac:7e:e4:57:0f:38:24:
c3:6a:6e:ad:d0:db:ba:48:6d:69:f3:00:74:11:af:
cf:e6:96:39:74:96:02:ab:0b:66:cd:75:53:16:c9:
ab:60:c5:4b:5b:a2:07:f4:6e:76:c5:37:c9:42:cc:
13:1a:4a:b7:c0:e9:f8:77:98:c5:cf:62:75:3c:c3:
1a:79:ba:af:b0:22:46:50:ca:83:6c:cb:8e:2b:86:
e0:a0:7e:53:70:28:51:84:6b:92:6c:99:06:39:eb:
f5:93:00:7f:e6:22:74:d2:48:c6:0d:1b:f4:0e:13:
f8:01:24:3a:4a:ae:63:df:b7:1d:43:ee:74:53:12:
91:55:f8:0e:50:73:49:35:b3:38:e0:4e:93:6a:9a:
cb:66:09:1d:61:c2:a2:80:48:40:5d:8d:bb:ac:9d:
92:3a:9a:45:19:bb:28:28:05:5f:6e:61:39:a2:13:
d2:9b:8c:33:5d:aa:b3:dd:84:93:6f:60:8e:ea:9e:
e9:3c:45:40:a6:a9:9c:ea:44:21:d5:e3:67:48:5b:
c4:c3:91:f7:ff:ea:f1:4e:a0:45:04:ea:ef:a3:be:
d0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:CF:32:C8:D2:68:13:76:A2:77:CC:1F:44:AC:A4:8C:24:B4:1D:60
X509v3 Authority Key Identifier:
keyid:81:A6:57:EA:AC:75:54:CA:B7:A1:A2:88:F5:B3:FE:ED:D8:A5:CC:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:e9:de:e9:f7:03:ee:d9:83:be:26:2f:6e:a2:f7:0d:01:1e:
4b:d8:a2:b8:86:c3:08:6e:61:87:c5:3c:81:d3:e0:9e:48:81:
93:3e:41:8f:01:90:bc:48:84:77:e6:b7:36:ae:97:17:59:05:
b6:3a:8f:a7:fe:36:0f:29:a4:ae:f1:4a:d7:07:32:df:97:51:
f1:fc:9f:e4:8a:a2:da:33:6b:57:19:9b:25:5a:86:98:66:fc:
33:4d:58:7f:76:34:81:12:a6:26:4f:5b:f0:d0:09:f1:aa:64:
55:3a:46:4c:4a:d6:ec:04:03:7f:32:74:f5:e1:ef:e3:3e:7d:
d0:e2:b8:1f:c1:b5:a6:92:da:67:1a:9a:81:66:f8:b0:2e:92:
54:87:a8:47:17:b0:7c:82:4e:38:bb:a3:ea:b4:2e:98:29:b5:
e3:9f:0c:cf:ee:37:bd:57:9e:ad:10:cd:ea:c8:68:b8:8e:27:
2f:57:fa:05:4e:d7:65:da:e9:a1:e7:2d:02:cc:1a:92:36:71:
39:37:e3:45:78:48:10:04:5d:30:51:93:fe:5b:06:49:af:e8:
36:19:a3:b3:d0:83:5c:5c:bf:05:11:88:74:2e:12:cb:a9:4d:
37:d2:a6:82:76:a9:b0:50:30:eb:9f:83:27:95:14:bc:1a:2d:
82:d0:7a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:39 2026 by rpki-client