
$ rpki-client -vvf rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft
File: Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft (raw, json)
Hash identifier: ypftnl13a1YIRiSEwl414beRYCGw4SBhBs+8k9m3x0w=
Subject key identifier: D5:29:BF:CE:54:3A:96:D3:7F:53:EB:1B:0F:37:E3:C7:54:80:76:08
Authority key identifier: 1A:9F:2B:BE:A5:22:F1:EE:25:92:35:9B:4B:52:FA:2B:41:A3:CD:C4
Certificate issuer: /CN=A9184017/serialNumber=1A9F2BBEA522F1EE2592359B4B52FA2B41A3CDC4
Certificate serial: 057F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft
Manifest number: 056F
Signing time: Wed 20 May 2026 23:23:57 +0000
Manifest this update: Wed 20 May 2026 23:23:57 +0000
Manifest next update: Wed 27 May 2026 23:23:57 +0000
Files and hashes: 1: Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.crl (hash: rx0+toy4PPJMzSLABvYMbyaTkRsB69TkPGdQCPz0SaQ=)
2: 0F8709542D6E11EC8327E321C4F9AE02.roa (hash: 0x9cH1BXF1oCzflKPF1qlRUnA1ksucVxQM/2AaZ9hhM=)
3: A6DC22C63C7D11ECB08DFD13C4F9AE02.roa (hash: ikBL+n1I4lTln4IeZuN3wg5X+cHKMnhhuxIqhkGyMPU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.crl
rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 23:23:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1407 (0x57f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9184017, serialNumber=1A9F2BBEA522F1EE2592359B4B52FA2B41A3CDC4
Validity
Not Before: May 20 23:23:57 2026 GMT
Not After : May 27 23:23:57 2026 GMT
Subject: CN=6a0e428d-62ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bb:30:f1:f5:0c:d9:70:fa:f6:79:65:0a:a9:
39:c9:c0:75:93:d5:fa:85:7a:dd:70:8d:7b:f0:b0:
00:f3:f3:86:57:07:52:52:28:a2:5a:a5:9c:48:ef:
fd:94:22:94:a6:15:b9:45:d5:06:70:7a:1b:d7:23:
12:47:a1:81:8a:ac:0e:32:a7:47:48:33:4d:8c:76:
c9:46:7b:46:67:e2:73:e9:3a:90:68:2d:cd:99:58:
5a:c5:b1:f7:15:b5:01:d8:d0:fc:42:23:29:ce:18:
8e:68:de:60:e8:03:86:0c:de:32:15:65:7e:01:bf:
84:3a:99:b8:9f:a4:6c:5e:a0:6c:fc:97:81:fe:43:
71:09:6c:a2:56:e3:78:14:b6:c6:8c:f4:77:69:e7:
7c:88:70:ec:d3:4a:8a:e2:4d:7e:18:b4:30:d9:6a:
4e:88:fe:da:d1:24:e6:ee:88:a9:c9:1e:4f:94:8f:
8f:f6:94:a7:d4:f7:c3:25:79:c8:fe:d9:fd:21:9b:
b8:bf:85:e5:e5:fd:3d:47:6b:c3:49:8c:0f:56:1b:
ad:ba:5e:c5:bb:1b:9e:76:bb:c8:01:6c:c7:ad:67:
b9:10:20:ef:9f:ea:e0:ca:c9:3a:c7:b5:2d:3c:90:
c3:3d:1b:2c:90:44:74:c9:01:cd:84:ca:18:37:df:
d4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:29:BF:CE:54:3A:96:D3:7F:53:EB:1B:0F:37:E3:C7:54:80:76:08
X509v3 Authority Key Identifier:
keyid:1A:9F:2B:BE:A5:22:F1:EE:25:92:35:9B:4B:52:FA:2B:41:A3:CD:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:74:7a:a3:66:6f:98:ad:59:54:b4:de:f5:d9:09:9a:10:f8:
01:60:be:ab:e4:12:f5:e5:9a:42:f2:56:d0:a1:ad:fe:1b:38:
77:41:44:ca:3f:a1:f8:f8:21:ac:d2:94:ed:a0:ee:9d:79:40:
ac:fb:76:2f:9d:13:d5:57:90:22:66:63:c4:d0:6a:67:19:d9:
09:7b:81:fc:07:38:d0:8c:35:d3:4c:16:45:b5:ab:47:dd:8e:
a7:eb:86:76:4f:20:13:2a:24:6f:77:57:63:af:b0:c0:76:d5:
46:f1:5d:3c:a1:54:0f:fc:3d:8c:7d:9c:6c:55:8a:c1:8c:27:
bb:93:12:8a:89:9a:cb:ee:17:19:ad:f4:49:3a:78:d8:01:98:
65:ab:f8:01:bb:db:dc:35:61:7d:96:62:c3:82:98:1a:40:bd:
1e:9e:da:44:8c:14:3b:97:c8:58:8f:14:5f:7c:ee:be:58:b1:
b7:ff:c4:0b:e7:88:05:1e:b1:d2:d2:bb:2d:82:3b:95:a2:c7:
06:be:79:96:08:51:82:3a:69:42:4d:7c:cc:61:bc:a7:ed:7d:
4d:16:f8:63:0c:66:ef:1c:73:78:f5:ff:61:8b:36:38:16:00:
e1:87:d3:a9:96:54:f9:5f:8b:49:39:ba:42:1b:d1:5c:40:86:
fe:5c:68:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:15:39 2026 by rpki-client