
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft
File: gaZX6qx1VMq3oaKI9bP-7dilzEs.mft (raw, json)
Hash identifier: 8U8ykxc/EZavxADF9pCPLLWFlKl4gqfd835szxju3s4=
Subject key identifier: C5:CA:91:11:4A:E5:6E:07:93:08:54:CA:12:C4:E8:31:CE:D2:11:D5
Authority key identifier: 81:A6:57:EA:AC:75:54:CA:B7:A1:A2:88:F5:B3:FE:ED:D8:A5:CC:4B
Certificate issuer: /CN=A917DFDA/serialNumber=81A657EAAC7554CAB7A1A288F5B3FEEDD8A5CC4B
Certificate serial: E8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft
Manifest number: E3
Signing time: Sat 05 Sep 2026 03:55:34 +0000
Manifest this update: Sat 05 Sep 2026 03:55:34 +0000
Manifest next update: Sat 12 Sep 2026 03:55:34 +0000
Files and hashes: 1: gaZX6qx1VMq3oaKI9bP-7dilzEs.crl (hash: U/EQXsC3yGIAvsjfzHNlwkevGEQpqvfzlCCCe4AZz/g=)
2: A78653B2561F11F09624D128C4F9AE02.roa (hash: tZlTWUfKWexoieRyMVExBKlmUH5v/oDQJXIDDrcReSc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.crl
rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 03:55:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 232 (0xe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917DFDA, serialNumber=81A657EAAC7554CAB7A1A288F5B3FEEDD8A5CC4B
Validity
Not Before: Sep 5 03:55:34 2026 GMT
Not After : Sep 12 03:55:34 2026 GMT
Subject: CN=6a9b92b6-6456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:59:2f:97:dd:a8:14:fd:30:ec:95:12:1d:5e:
af:76:e5:30:c4:ff:8f:3f:4f:ae:c5:72:38:dc:42:
b2:68:7d:24:10:55:d8:11:0a:23:23:11:7f:8a:25:
7f:62:41:52:00:4a:9b:17:d6:28:18:fc:cc:07:4b:
a7:6f:3d:29:9f:62:2d:8f:78:da:d6:78:27:da:14:
45:89:56:c4:84:fb:6f:ba:1b:c8:d1:44:6f:67:88:
23:b3:80:ad:6b:14:be:71:d8:69:a2:df:ea:60:30:
31:e7:3b:c3:a1:c5:64:43:86:a4:da:2c:fe:1d:85:
fc:fc:c6:15:54:c3:81:f8:c8:7c:6e:7e:4c:95:8c:
8a:17:c3:82:7b:5a:fa:e2:27:78:6a:28:d2:08:72:
d3:60:6f:05:00:c3:5c:50:92:6d:85:0e:9e:cf:5d:
4a:28:88:50:a2:00:c0:66:d7:e1:12:c1:eb:b4:fa:
c8:73:18:4a:f9:4a:60:87:c8:c2:0c:0d:09:a8:41:
94:69:b6:40:2d:d0:b6:33:a1:d2:1b:32:ea:f6:f3:
ef:11:5e:da:f0:66:00:4e:03:5f:d0:8f:5f:57:bf:
66:f8:7c:c2:f3:50:70:9d:35:f0:d9:08:84:63:75:
32:8c:0a:d6:cf:92:a4:55:e8:9f:52:c4:59:9b:4b:
88:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:CA:91:11:4A:E5:6E:07:93:08:54:CA:12:C4:E8:31:CE:D2:11:D5
X509v3 Authority Key Identifier:
keyid:81:A6:57:EA:AC:75:54:CA:B7:A1:A2:88:F5:B3:FE:ED:D8:A5:CC:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:4e:a2:60:be:5f:54:0c:53:e0:43:98:43:44:20:84:1b:69:
17:2d:36:40:36:61:55:c1:fb:c6:e2:30:fb:30:3f:0c:59:ca:
93:94:34:8b:ba:83:0e:4e:f0:aa:3e:5e:91:79:8a:34:53:41:
52:d6:9f:ab:d8:52:2e:c5:d8:80:99:80:7c:05:37:a9:80:d4:
15:78:97:22:cc:3c:0e:64:55:52:2b:44:6e:39:a4:6d:d2:a5:
83:7e:41:6a:14:53:1a:7d:c5:9a:f3:54:f9:f4:c0:ec:38:71:
da:56:01:60:12:b0:79:24:0a:9d:6d:84:56:f6:7c:2e:b9:f7:
a4:79:77:87:ca:23:00:05:dd:02:68:61:8d:38:aa:00:cc:1f:
8a:ed:70:73:2a:48:66:e1:3d:a1:4e:cf:df:39:ea:b5:59:d8:
69:8c:fc:28:98:ee:4e:48:40:1e:80:0e:0b:8e:c8:80:1d:65:
2e:91:c2:93:a7:b5:5c:d8:13:fd:3a:ad:df:0a:eb:e9:93:85:
e1:e8:38:d5:c9:bf:1d:b9:10:21:67:a5:e0:51:cc:00:b3:03:
e6:61:7c:74:4b:9a:41:c9:93:45:e6:0d:52:96:93:1c:7f:0f:
9e:dd:cb:0d:f6:4e:d7:e3:f7:21:00:38:1f:1c:49:be:a3:8b:
2a:7b:6b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 12:35:53 2026 by rpki-client