
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft
File: Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft (raw, json)
Hash identifier: caX9ZoKqXpNhr0Mdm2onP6tkhGreOuk/Y4qrge5h0F4=
Subject key identifier: FE:4F:C6:03:AE:DC:2F:C4:29:D0:1A:93:A6:45:03:6F:F4:D2:5C:71
Authority key identifier: 1A:0F:78:6F:11:B8:E1:7D:45:DE:1E:DC:E6:1E:16:00:DD:49:30:A4
Certificate issuer: /CN=A917E951/serialNumber=1A0F786F11B8E17D45DE1EDCE61E1600DD4930A4
Certificate serial: 0284
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft
Manifest number: 027A
Signing time: Thu 27 Aug 2026 01:44:45 +0000
Manifest this update: Thu 27 Aug 2026 01:44:45 +0000
Manifest next update: Thu 03 Sep 2026 01:44:45 +0000
Files and hashes: 1: Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl (hash: gE8c/Ef3ShlYsqaOyZrmxHFQhyS8WzIklnNO1yhuYmg=)
2: 59ADC606EBDA11F0868F86546C6F56BC.roa (hash: qZRxpIUeyrMWdNVkLIbZ0zgXRnmpkIFE5ZM4cqQSBes=)
3: 952F87FAEBDA11F082D0705C6C6F56BC.roa (hash: D0d40r76hbBLhGBP/ux7xiJsAzvMXm0Lp9fwpdqFW3s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl
rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 03 Sep 2026 01:44:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 644 (0x284)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E951, serialNumber=1A0F786F11B8E17D45DE1EDCE61E1600DD4930A4
Validity
Not Before: Aug 27 01:44:45 2026 GMT
Not After : Sep 3 01:44:45 2026 GMT
Subject: CN=6a8f968d-9352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0f:82:aa:9e:13:65:bd:90:02:77:08:0e:1e:
b6:04:c8:95:0d:74:88:04:49:75:c2:ed:71:f4:f7:
c9:5f:35:0a:24:9b:d8:0b:5d:5c:44:65:15:8d:8f:
c3:c6:c9:90:29:cf:17:b0:a6:fa:e6:6b:d7:85:ba:
85:55:7d:b2:8e:a4:4c:70:cb:da:f7:74:56:a0:f8:
53:a5:03:9d:48:d6:f6:5a:51:e9:d9:3d:d5:eb:3f:
90:a2:86:55:a9:bd:ea:ae:07:bb:c2:6d:6a:d5:f1:
31:54:b1:3a:38:d6:fb:81:a9:15:90:08:75:1e:78:
78:1e:0c:24:e9:79:29:a4:72:7a:41:d7:df:bb:f4:
38:71:f4:3f:ea:ff:19:cd:ef:74:d3:5d:37:0a:74:
8a:d8:d8:2d:d6:7b:20:fc:c4:f6:26:1a:50:e5:75:
c6:b4:dc:6a:7a:6d:93:1d:9d:82:e7:c1:80:75:fb:
bf:00:ea:fd:1a:de:3c:ed:5e:a2:16:5c:c5:0d:74:
a5:8f:5c:fa:25:78:64:00:10:6c:0a:f6:8b:1f:35:
2b:d6:d5:26:3d:03:15:a8:3e:20:b4:67:a8:d0:10:
88:0b:1e:b1:54:83:5d:f0:32:fa:33:8e:f9:db:ff:
a2:ae:5d:80:8a:0e:ed:59:47:87:f3:a8:8b:77:7c:
e9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4F:C6:03:AE:DC:2F:C4:29:D0:1A:93:A6:45:03:6F:F4:D2:5C:71
X509v3 Authority Key Identifier:
keyid:1A:0F:78:6F:11:B8:E1:7D:45:DE:1E:DC:E6:1E:16:00:DD:49:30:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:e2:54:2a:77:52:e0:8c:69:71:ca:f1:37:ef:c9:ad:5f:ff:
62:ad:d4:64:e3:94:74:70:a4:3f:ae:e9:34:c9:ac:c2:4c:69:
85:c2:b4:0f:85:5a:43:d2:bf:db:cd:36:1c:0a:35:44:ae:10:
e4:cc:9e:33:12:86:1c:72:7e:db:75:e0:64:38:55:ee:8c:29:
23:f9:70:88:df:93:7a:cb:75:65:3e:0a:72:3f:ff:b3:a9:d1:
e4:67:38:fe:89:0e:99:cf:3e:db:19:b1:8e:e3:ea:e5:70:86:
eb:07:de:2c:35:b9:2a:48:ba:c4:c7:fc:5a:c8:e5:88:f6:ad:
cb:61:b9:ba:cf:bd:02:db:8b:7d:13:88:42:59:09:36:41:e7:
a7:75:f2:8e:47:7c:3a:77:5f:94:74:56:a9:05:82:ef:d2:25:
6f:26:d6:f8:df:79:5a:8f:93:a2:6f:dd:d6:c0:ac:48:18:61:
bb:c3:83:31:1b:b4:39:1a:e5:ff:86:17:4c:7a:7f:a7:bb:78:
c8:cc:b8:fa:90:d4:c1:f5:11:28:03:62:f2:c4:ed:2c:c5:21:
4c:b5:8f:5f:00:f9:8b:15:74:49:6c:a4:5b:29:e2:68:16:aa:
a4:92:0d:60:e5:90:43:87:3b:6a:6c:6b:d7:4b:e8:28:c6:b4:
2e:59:0d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 28 02:09:41 2026 by rpki-client