
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft
File: gH5oiqUL0-OL4xtdTE4GCATrFdw.mft (raw, json)
Hash identifier: 1ElPOORdupTzg+3vs5UwI/sDcu3/xYVg7NCFDptpX7U=
Subject key identifier: F2:50:15:91:D2:77:A7:FC:10:F5:C5:13:98:96:94:9A:3D:63:80:41
Authority key identifier: 80:7E:68:8A:A5:0B:D3:E3:8B:E3:1B:5D:4C:4E:06:08:04:EB:15:DC
Certificate issuer: /CN=A918F0E2/serialNumber=807E688AA50BD3E38BE31B5D4C4E060804EB15DC
Certificate serial: 0178
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gH5oiqUL0-OL4xtdTE4GCATrFdw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft
Manifest number: 0172
Signing time: Thu 29 Oct 2026 05:31:55 +0000
Manifest this update: Thu 29 Oct 2026 05:31:54 +0000
Manifest next update: Thu 05 Nov 2026 05:31:54 +0000
Files and hashes: 1: gH5oiqUL0-OL4xtdTE4GCATrFdw.crl (hash: iZRE1Rx34LX945JWE937PW+yl+5jpvIabxA089escsg=)
2: EF63DB0EA26B11EF8F077C3FC4F9AE02.roa (hash: JYTDrBO//S+15sV1Zo2GY8n9tQ9jUUQcP8fYX07TRi0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.crl
rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gH5oiqUL0-OL4xtdTE4GCATrFdw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 05:31:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 376 (0x178)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F0E2, serialNumber=807E688AA50BD3E38BE31B5D4C4E060804EB15DC
Validity
Not Before: Oct 29 05:31:54 2026 GMT
Not After : Nov 5 05:31:54 2026 GMT
Subject: CN=6ae2da4a-e9c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8b:b5:c5:65:19:20:18:74:3c:5a:87:bf:62:
01:03:18:0e:1c:f0:9f:ef:cc:1e:e6:9e:69:ff:65:
ff:9e:07:df:f6:7f:f6:af:07:d8:9b:9f:5f:4e:4a:
2a:ba:6b:c9:96:93:f4:dd:e5:49:50:8f:98:39:50:
b4:f4:01:7f:44:f6:9f:cb:77:a3:88:dd:8d:a7:27:
14:f9:5a:d1:39:c8:e3:30:b3:12:8e:7d:04:fb:e4:
22:99:7c:a3:09:87:1a:d6:e3:b7:ba:a8:f2:11:0f:
80:a7:d0:ed:3a:65:da:ba:41:f2:bd:6c:5d:59:0f:
33:d3:3b:6b:f7:7a:de:78:ac:e5:c2:d3:b9:7f:4e:
61:a0:d4:57:c0:0b:5c:42:64:11:33:36:7f:58:31:
2a:9d:ee:e8:2f:f6:85:e6:b9:18:63:29:42:0f:85:
4f:18:be:28:00:e3:e6:bb:97:ee:49:ed:c3:15:23:
d1:12:c4:fa:07:57:d3:53:62:59:85:cd:ac:e6:66:
5d:17:b1:00:f2:76:6f:dd:45:7f:9a:1e:f2:77:8d:
95:19:28:c4:54:c5:9b:e9:4c:36:1a:00:73:c4:e0:
ac:c6:34:e6:5b:16:11:21:92:24:e6:54:bc:ab:93:
72:ba:f3:f4:74:69:02:0e:27:21:9f:33:2f:37:ae:
73:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:50:15:91:D2:77:A7:FC:10:F5:C5:13:98:96:94:9A:3D:63:80:41
X509v3 Authority Key Identifier:
keyid:80:7E:68:8A:A5:0B:D3:E3:8B:E3:1B:5D:4C:4E:06:08:04:EB:15:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gH5oiqUL0-OL4xtdTE4GCATrFdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:f9:4b:e9:ee:f6:4b:1f:a3:66:68:e9:9d:f0:e2:10:4c:f8:
50:c3:68:6e:d2:85:e5:35:24:76:54:a0:33:5e:56:ac:78:43:
80:7a:d6:de:41:b9:a9:6d:95:22:bb:aa:7d:1b:dc:83:58:2c:
7f:d1:90:29:51:45:9a:80:b2:f5:d5:b6:92:93:78:b3:7a:01:
56:50:61:67:d4:3f:24:cd:db:81:cb:0f:d5:19:67:7e:e4:58:
83:72:5e:5f:f7:6c:cf:6c:00:7e:0c:03:01:15:f2:49:b3:7a:
d7:50:70:17:cb:0e:65:2f:fb:6a:e8:86:fd:53:e9:f4:00:a2:
eb:36:0a:3b:fa:d6:cc:ae:43:dd:6c:2a:a9:cc:9f:b8:7e:7a:
9f:c9:bf:b2:23:cb:ba:f1:a8:1c:47:03:29:17:cb:d7:0a:37:
f1:a8:90:f0:a8:94:88:5b:00:87:9a:01:27:22:75:0a:1a:b0:
71:bf:b2:57:01:02:da:7f:20:75:35:0c:9d:6b:61:dd:04:14:
54:d5:7a:38:15:ce:48:3b:3c:44:72:7a:ff:26:fc:b2:0f:ee:
20:a3:5a:6c:50:cd:69:27:22:c2:32:a3:2f:23:c7:d3:d0:44:
19:29:de:ec:d8:94:c5:6c:46:4e:4f:f1:b4:14:a8:7d:7d:b0:
fe:e7:83:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 16:01:16 2026 by rpki-client