
$ rpki-client -vvf rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.mft
File: grMfodzgxL8vZjl3hqbAjkfGuP4.mft (raw, json)
Hash identifier: SnDUcKeuHn2PVJDt7yWDZmuXdAvFVvdhWS+gsy6VEM0=
Subject key identifier: B2:16:1C:7C:04:F5:87:97:D8:02:D9:63:51:58:0E:3A:3C:95:99:72
Authority key identifier: 82:B3:1F:A1:DC:E0:C4:BF:2F:66:39:77:86:A6:C0:8E:47:C6:B8:FE
Certificate issuer: /CN=A91294F7/serialNumber=82B31FA1DCE0C4BF2F66397786A6C08E47C6B8FE
Certificate serial: 05E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grMfodzgxL8vZjl3hqbAjkfGuP4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.mft
Manifest number: 05D9
Signing time: Tue 12 May 2026 23:06:50 +0000
Manifest this update: Tue 12 May 2026 23:06:49 +0000
Manifest next update: Tue 19 May 2026 23:06:49 +0000
Files and hashes: 1: grMfodzgxL8vZjl3hqbAjkfGuP4.crl (hash: 2k6hGRT+oCwEmJxknka3lJK5LjrMX1IgcwStLem2i5g=)
2: F7307C08FFCA11EB93268E6DC4F9AE02.roa (hash: T+BAMElZYCx7kGTbdasdTT95R9yeWdnx6k5VpkPYG2I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.crl
rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grMfodzgxL8vZjl3hqbAjkfGuP4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:06:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1504 (0x5e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91294F7, serialNumber=82B31FA1DCE0C4BF2F66397786A6C08E47C6B8FE
Validity
Not Before: May 12 23:06:49 2026 GMT
Not After : May 19 23:06:49 2026 GMT
Subject: CN=6a03b28a-759a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:60:c5:ae:44:fa:a2:86:9a:f0:80:f9:a8:cb:
0c:ee:f4:93:36:65:c7:c2:3d:1d:ef:39:7b:7b:01:
60:44:04:45:e6:4a:49:b2:41:0d:a2:5b:87:95:30:
d4:1a:6a:6d:46:d1:05:ef:f5:df:0d:3b:44:fc:71:
61:5a:88:e6:89:8e:0b:fc:cd:16:0a:57:51:ee:e0:
b3:d0:9c:2d:71:37:cc:40:5f:bd:1d:d5:78:7a:5f:
fc:48:be:ad:1a:0f:f5:45:ef:91:30:41:c6:61:bd:
db:47:4c:7e:88:f3:aa:10:a7:1c:c7:cb:e5:1f:45:
09:1a:5f:a6:5d:33:02:10:a4:98:0e:67:4a:66:67:
48:58:2e:61:98:5f:61:b8:32:c7:a0:16:93:ad:04:
3d:33:cd:47:8e:ab:03:31:ff:82:eb:b2:97:20:fd:
92:70:6d:b4:20:20:34:6e:12:91:c0:ba:e7:66:9f:
e9:0f:11:bc:f4:87:0b:26:ba:27:2c:39:49:2c:ab:
29:0a:a5:d7:c5:11:9e:55:af:01:64:20:5e:59:a4:
7a:e1:5d:3e:52:92:ec:44:ba:1c:68:34:22:7c:e2:
8a:5c:5f:48:1a:6e:e7:fc:6d:33:a9:e5:6f:88:d6:
51:f0:37:4d:30:15:2f:e8:a1:a1:60:b7:b3:24:d8:
5d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:16:1C:7C:04:F5:87:97:D8:02:D9:63:51:58:0E:3A:3C:95:99:72
X509v3 Authority Key Identifier:
keyid:82:B3:1F:A1:DC:E0:C4:BF:2F:66:39:77:86:A6:C0:8E:47:C6:B8:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grMfodzgxL8vZjl3hqbAjkfGuP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:c4:a9:5e:36:5a:75:cb:e9:b4:fd:40:e8:24:dd:2a:37:9c:
b0:6e:6c:b1:dd:65:9d:6a:41:61:a4:80:cd:82:99:cc:c7:07:
1f:69:16:7f:56:76:77:bf:b4:e6:1e:de:46:3e:f1:ce:38:f8:
20:8a:b5:de:60:ed:f9:ce:d6:af:ac:b9:05:74:f8:a6:e8:ed:
9e:3c:64:c6:01:d2:10:cf:ad:1f:86:1a:c9:71:7b:ac:e9:eb:
85:ff:6d:78:53:b6:46:ec:7f:c5:e7:1e:24:98:d4:4a:4a:e6:
cb:c7:e2:e7:77:de:54:7b:a3:4b:34:d2:4a:8b:68:d6:b1:03:
df:9c:74:45:4d:b5:8a:57:a7:5f:b7:99:48:6d:50:9a:e3:d1:
bf:54:a8:f5:c7:7b:3e:43:d5:8a:dd:63:c1:99:37:05:6d:d0:
f2:63:75:02:72:b9:b1:81:59:45:cf:26:0a:4f:32:4a:b5:f3:
69:20:30:66:d0:63:67:17:53:08:28:f1:b5:41:1b:5d:1f:be:
86:77:4a:57:ee:67:e6:4a:f9:6c:14:fa:ce:2c:ce:c7:3b:d2:
ef:c9:f0:42:ca:38:6e:23:b0:ae:f3:7d:22:08:f8:55:0c:d8:
32:0f:aa:99:53:99:d5:4d:83:7a:c8:78:26:4b:a3:d8:91:9a:
33:4b:03:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:05:27 2026 by rpki-client