
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft
File: _gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft (raw, json)
Hash identifier: 9HBOnBmYOlTIBy1NMaO2GdiNyGabp/Ipqm6PxHSVwZk=
Subject key identifier: 38:B7:FD:A1:F3:32:C8:84:7E:EE:09:41:BB:25:6A:A8:B4:A6:0D:FE
Authority key identifier: FE:05:EF:B7:01:25:D5:20:47:6F:63:BC:60:9F:55:4D:C4:9A:C5:9C
Certificate issuer: /CN=A919A3F0/serialNumber=FE05EFB70125D520476F63BC609F554DC49AC59C
Certificate serial: 0247
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft
Manifest number: 0239
Signing time: Tue 07 Jul 2026 03:33:44 +0000
Manifest this update: Tue 07 Jul 2026 03:33:44 +0000
Manifest next update: Tue 14 Jul 2026 03:33:44 +0000
Files and hashes: 1: _gXvtwEl1SBHb2O8YJ9VTcSaxZw.crl (hash: eJUfmUsBlQmwY9HHnNWOHFF66fyXgtOrArCT9bqXmlY=)
2: 37D03D8CC48111F0BA91643FC4F9AE02.roa (hash: cpXny2w7RispSe37kaJTfb77RVD1gIo1S5cj5Rxm/G0=)
3: 27D894E81D4011F19325F4941B3D8C67.roa (hash: HG6t6YvzBlAumemzb2gstPcteAeL39jX+YuQ75GGVWA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.crl
rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 03:33:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 583 (0x247)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A3F0, serialNumber=FE05EFB70125D520476F63BC609F554DC49AC59C
Validity
Not Before: Jul 7 03:33:44 2026 GMT
Not After : Jul 14 03:33:44 2026 GMT
Subject: CN=6a4c7398-f531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e0:52:48:56:40:42:0b:1d:12:97:f1:b2:4d:
31:54:03:7b:d4:c3:0d:6d:4d:76:a2:06:1e:c2:cf:
c9:49:7f:29:ca:84:fe:9f:7c:d8:5f:44:a0:17:c8:
81:6f:85:ab:28:0e:10:b0:45:74:9d:f5:5b:7c:81:
b4:2b:1f:95:ac:95:e0:0c:0e:0b:2f:77:db:8d:72:
d5:8b:da:7f:7f:db:c3:c4:5c:74:0c:03:4b:56:d9:
92:16:10:03:ad:09:d7:9b:9a:dc:88:4f:76:12:52:
5c:1c:e3:1a:d8:f6:f9:0d:24:7a:61:9c:fc:f6:50:
d5:e0:ba:fe:f2:12:df:05:ee:16:95:ed:f4:41:da:
e5:9b:ee:b1:0a:25:8f:45:f9:fd:43:93:c6:25:d6:
ee:d9:55:06:e2:f9:7f:96:8f:f1:4c:e3:aa:8d:e8:
e5:97:69:81:35:ae:a6:9b:ee:85:71:6a:6d:78:6d:
6b:58:5a:48:e8:7a:bc:9c:d9:a1:36:dc:fd:5c:bf:
3e:13:2b:22:35:ed:1e:32:3f:8f:b5:fb:6e:98:c6:
93:90:b2:4c:45:89:12:a0:37:df:2c:90:5f:7f:48:
8b:5b:3a:e1:68:66:b3:62:4d:45:be:a2:53:84:6c:
dd:3a:28:9a:fe:23:13:67:0a:38:c5:a0:db:cc:94:
6b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B7:FD:A1:F3:32:C8:84:7E:EE:09:41:BB:25:6A:A8:B4:A6:0D:FE
X509v3 Authority Key Identifier:
keyid:FE:05:EF:B7:01:25:D5:20:47:6F:63:BC:60:9F:55:4D:C4:9A:C5:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:16:63:4c:fe:36:8e:67:87:80:45:ea:c7:01:72:60:cf:2a:
9d:fb:c7:02:f9:6c:cb:0b:a4:de:25:af:e5:67:d5:38:95:44:
7b:e1:cc:6b:c3:ca:b2:7a:eb:74:3b:f5:e5:2f:1d:0b:06:21:
c1:5c:b0:c4:c2:cb:ee:cb:4a:ad:6b:2e:af:d0:b1:36:e9:de:
21:b0:58:f7:7d:53:cb:fd:12:7d:ba:d8:b4:bb:d7:1f:00:09:
8d:04:06:60:7f:49:66:f4:16:f9:e4:a0:35:86:64:d9:13:92:
83:e2:2a:d4:69:fb:3d:dd:2d:47:0d:82:73:93:5c:1c:80:4e:
62:7d:d3:fa:cc:de:29:6a:bd:51:89:5a:e1:2a:0a:77:d7:e2:
2d:53:cf:80:08:c2:53:78:f9:26:38:84:0c:f5:62:6f:f6:94:
53:7f:4c:d5:e9:94:c3:98:ad:3f:5b:22:67:9a:ce:f9:f5:63:
3f:6e:a5:23:85:05:8c:e2:89:4c:1a:06:4f:b8:5d:dd:3d:46:
02:81:95:4c:8a:7f:f7:36:28:aa:59:eb:55:89:81:2c:26:94:
48:2f:f4:95:b8:7f:6e:78:e8:87:e9:83:33:68:64:85:43:96:
66:e8:2d:04:8d:42:83:47:ed:12:cc:47:bd:ca:d7:04:2b:21:
2d:f1:3a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 10:43:50 2026 by rpki-client