
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft
File: gaZX6qx1VMq3oaKI9bP-7dilzEs.mft (raw, json)
Hash identifier: 0psgq534ozMyxrT3pXJBzTTBHVhR8eCdt1NMQbPoNGw=
Subject key identifier: A6:35:45:E7:63:0A:4B:71:84:F4:2F:5A:F5:C9:D2:1B:FF:71:9F:AE
Authority key identifier: 81:A6:57:EA:AC:75:54:CA:B7:A1:A2:88:F5:B3:FE:ED:D8:A5:CC:4B
Certificate issuer: /CN=A917DFDA/serialNumber=81A657EAAC7554CAB7A1A288F5B3FEEDD8A5CC4B
Certificate serial: 0105
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft
Manifest number: 0100
Signing time: Sun 01 Nov 2026 04:54:28 +0000
Manifest this update: Sun 01 Nov 2026 04:54:27 +0000
Manifest next update: Sun 08 Nov 2026 04:54:27 +0000
Files and hashes: 1: gaZX6qx1VMq3oaKI9bP-7dilzEs.crl (hash: +v6Ts/PlWFUgvifuZ2ng+BMqWzU8HfIN4ZPedbPxzng=)
2: A78653B2561F11F09624D128C4F9AE02.roa (hash: tZlTWUfKWexoieRyMVExBKlmUH5v/oDQJXIDDrcReSc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.crl
rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Nov 2026 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 261 (0x105)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917DFDA, serialNumber=81A657EAAC7554CAB7A1A288F5B3FEEDD8A5CC4B
Validity
Not Before: Nov 1 04:54:27 2026 GMT
Not After : Nov 8 04:54:27 2026 GMT
Subject: CN=6ae6c604-4e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7d:1a:18:4d:be:41:62:58:f4:f4:69:4f:8c:
8a:3b:92:fe:72:27:6d:f2:74:73:0c:e5:12:56:d8:
b3:3b:98:58:d5:4e:54:11:9a:98:ff:ac:34:14:a7:
b6:41:23:3f:d4:b9:32:a9:b2:2d:b4:12:96:af:50:
51:8c:fa:68:1d:73:54:1a:8c:2e:7a:40:dc:1e:06:
2f:4d:3a:d9:8d:03:0f:b4:7e:76:32:3b:bb:0c:a6:
ec:4b:34:5e:13:e0:37:88:d4:2b:81:dd:98:d3:0d:
ca:9f:26:fa:6a:63:c5:97:69:d3:c5:15:e8:ae:62:
53:85:6e:55:35:58:36:2a:fc:bc:41:34:d8:07:18:
dc:0b:72:29:ba:31:5d:37:d8:78:89:ba:3f:76:97:
a9:20:f5:fa:5a:4b:35:0d:2a:24:6e:bb:d5:fb:38:
cf:04:3b:3e:0b:3d:22:12:02:9c:26:db:aa:96:d4:
ea:25:08:66:e7:9e:ca:0a:f4:86:f9:87:ba:80:0c:
0d:70:44:82:8a:d3:e0:15:bb:42:c8:93:31:ff:62:
90:b4:83:5a:dd:01:23:f0:72:0b:e1:21:50:e1:18:
1f:56:53:6c:cc:d0:9c:8e:12:5b:09:fa:b6:31:6e:
c1:ed:bf:ef:e1:58:10:50:df:de:c3:7b:c0:22:31:
3e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:35:45:E7:63:0A:4B:71:84:F4:2F:5A:F5:C9:D2:1B:FF:71:9F:AE
X509v3 Authority Key Identifier:
keyid:81:A6:57:EA:AC:75:54:CA:B7:A1:A2:88:F5:B3:FE:ED:D8:A5:CC:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ea:dd:2d:f7:fe:a5:96:10:23:c3:20:20:7a:1a:22:74:16:16:
e8:21:a4:ac:ac:79:61:3f:a3:2b:d7:b5:4a:ec:cb:c0:80:28:
af:cc:7a:44:be:9f:02:5e:65:7b:5c:ba:4a:7b:eb:7c:45:c2:
70:6a:c9:ba:93:e2:0b:83:a3:87:a0:67:da:ee:6d:db:fb:70:
ad:0e:31:19:f6:32:7e:3e:55:7c:ee:fd:74:86:f1:98:f6:2b:
b3:a1:95:16:b5:14:3b:f9:97:f1:05:d0:b9:6d:03:4d:65:38:
6c:a3:98:0b:01:d6:5f:73:ee:ac:2e:c2:b0:58:29:ff:f2:af:
32:1b:75:fe:94:32:1a:e9:c8:90:4c:82:e2:90:35:29:93:6f:
44:a9:fd:f2:d2:b2:1c:84:88:7c:96:49:9c:04:d9:e8:93:8e:
42:14:86:d6:4a:34:10:57:a8:c6:84:44:b6:ab:db:11:4a:b9:
14:eb:34:33:2e:ee:1e:8f:82:81:4e:d8:14:d0:7e:24:a6:90:
0f:86:aa:b2:60:82:08:74:26:b0:78:23:42:cc:ef:d9:ad:80:
cd:09:5f:be:56:a7:03:60:60:77:04:2b:11:95:08:cd:15:b2:
6c:5b:db:41:70:67:b0:89:a8:d4:43:90:37:b5:29:67:88:2b:
2d:f6:1b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:35:07 2026 by rpki-client