
$ rpki-client -vvf rpki.apnic.net/member_repository/A91259CA/A9F2722E08A011F0B158565AC4F9AE02/G7ThccrEGeYWe6On1yU8dhYxoo0.mft
File: G7ThccrEGeYWe6On1yU8dhYxoo0.mft (raw, json)
Hash identifier: OjrCFO7vtfCO5Q/9s+i2xhSaEXcbClHrFBIa4BvLEuM=
Subject key identifier: AC:72:61:28:DC:4C:CC:22:11:ED:82:09:43:FE:EC:90:42:E8:70:54
Authority key identifier: 1B:B4:E1:71:CA:C4:19:E6:16:7B:A3:A7:D7:25:3C:76:16:31:A2:8D
Certificate issuer: /CN=A91259CA/serialNumber=1BB4E171CAC419E6167BA3A7D7253C761631A28D
Certificate serial: DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G7ThccrEGeYWe6On1yU8dhYxoo0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91259CA/A9F2722E08A011F0B158565AC4F9AE02/G7ThccrEGeYWe6On1yU8dhYxoo0.mft
Manifest number: DA
Signing time: Wed 13 May 2026 06:49:29 +0000
Manifest this update: Wed 13 May 2026 06:49:29 +0000
Manifest next update: Wed 20 May 2026 06:49:29 +0000
Files and hashes: 1: G7ThccrEGeYWe6On1yU8dhYxoo0.crl (hash: yvsoua+SuBJ+4NIbyLZ874X47a6j15vdz6xBh3S56MA=)
2: 2031308808A111F09B131E5BC4F9AE02.roa (hash: bfZHmy0//lzWJ0TH2iq1RiILBXFH7y1Z1TmJFXwbV9c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91259CA/A9F2722E08A011F0B158565AC4F9AE02/G7ThccrEGeYWe6On1yU8dhYxoo0.crl
rsync://rpki.apnic.net/member_repository/A91259CA/A9F2722E08A011F0B158565AC4F9AE02/G7ThccrEGeYWe6On1yU8dhYxoo0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G7ThccrEGeYWe6On1yU8dhYxoo0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:49:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222 (0xde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91259CA, serialNumber=1BB4E171CAC419E6167BA3A7D7253C761631A28D
Validity
Not Before: May 13 06:49:29 2026 GMT
Not After : May 20 06:49:29 2026 GMT
Subject: CN=6a041ef9-f978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c4:80:26:e1:ae:7e:0b:b3:43:61:f1:f3:fa:
8d:28:34:41:68:ac:20:7c:57:ce:47:08:5c:8a:f9:
37:dc:76:7c:d1:6f:06:d8:cf:df:04:4f:04:9e:c7:
da:cc:d4:0e:17:3c:81:2c:22:71:1a:cb:9f:74:84:
3a:2d:0d:59:b9:5c:6d:94:a7:bb:8e:10:8a:1c:93:
fb:6c:fc:48:4b:5d:1f:b6:a1:80:83:97:6c:df:b8:
9c:48:86:be:b8:ea:08:a7:ce:e1:0f:11:9a:1e:51:
ff:a4:bc:34:b6:6c:82:c4:ae:8f:0d:f6:4c:bb:69:
a3:1e:93:c9:08:a0:35:a7:e3:ec:1b:87:7c:49:7a:
a5:d4:ab:03:cd:1a:97:04:38:44:70:45:f5:fb:e3:
da:cd:b5:ec:e5:8d:83:5a:02:45:89:0b:3a:05:b9:
7f:fc:9e:2a:b5:02:20:76:78:f5:f8:f7:28:c0:e8:
40:47:2e:85:e8:15:a3:ec:c7:67:6e:d1:05:49:2c:
94:7d:57:9c:6b:db:af:bc:b3:30:e8:fb:fa:c6:87:
cd:dd:73:11:86:df:6d:42:73:ca:e2:da:03:4a:64:
0f:0f:70:ce:99:58:5f:ed:3b:38:23:1c:db:e1:47:
a8:11:fd:7a:10:bb:d0:bc:7b:b1:54:7b:72:1c:47:
d4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:72:61:28:DC:4C:CC:22:11:ED:82:09:43:FE:EC:90:42:E8:70:54
X509v3 Authority Key Identifier:
keyid:1B:B4:E1:71:CA:C4:19:E6:16:7B:A3:A7:D7:25:3C:76:16:31:A2:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91259CA/A9F2722E08A011F0B158565AC4F9AE02/G7ThccrEGeYWe6On1yU8dhYxoo0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G7ThccrEGeYWe6On1yU8dhYxoo0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91259CA/A9F2722E08A011F0B158565AC4F9AE02/G7ThccrEGeYWe6On1yU8dhYxoo0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:d0:22:95:9a:f9:dc:44:ca:27:4a:e5:d7:4e:9a:97:cb:ad:
50:78:5f:c2:91:fc:08:33:d4:f7:9b:68:ae:14:3f:24:b4:40:
fa:c0:64:82:7c:3d:dd:56:ab:74:2f:df:92:b9:62:15:f2:83:
52:ab:4b:69:21:18:5a:78:6f:d3:40:5e:27:0c:08:16:49:d1:
c5:e1:45:96:e3:d0:92:53:ee:79:38:72:4c:db:6f:9d:03:a6:
6c:68:bd:46:04:87:ee:d8:e5:2d:7f:0e:15:9e:5a:50:29:b9:
28:5d:fd:1e:5b:2c:c3:9e:5e:af:8e:eb:61:cd:79:ad:50:12:
f9:e7:75:4c:bf:1f:71:47:3d:90:4d:7b:cd:bf:22:f4:95:46:
78:1a:2b:89:a5:ed:23:11:01:13:c2:2f:d1:b8:98:9c:a3:22:
0e:eb:43:cf:08:08:b5:32:58:79:6c:71:b4:0e:9b:80:c4:7e:
2e:58:53:40:e2:15:94:1d:f7:46:87:d6:c2:37:b5:85:1a:90:
73:b9:32:82:33:62:ed:96:fc:13:82:95:8a:74:8c:04:3e:3d:
50:17:4f:0e:8d:49:99:f3:cf:55:bb:86:11:5f:87:13:30:eb:
ed:39:21:c3:01:56:9d:d2:73:7f:79:4e:60:f1:e4:ee:37:a5:
74:db:f3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:34:06 2026 by rpki-client