
$ rpki-client -vvf rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft
File: GuuZUbWE4eIbv8UszokJQRPG_Kc.mft (raw, json)
Hash identifier: rnlF0UFmzvCYnxxu9qdn7vH1Dl/qon+edp2C5p2qzJ4=
Subject key identifier: A9:1D:37:4A:19:DA:9B:0C:B6:5D:7B:F5:BF:A8:0C:3F:C9:11:30:4A
Authority key identifier: 1A:EB:99:51:B5:84:E1:E2:1B:BF:C5:2C:CE:89:09:41:13:C6:FC:A7
Certificate issuer: /CN=A912CDC5/serialNumber=1AEB9951B584E1E21BBFC52CCE89094113C6FCA7
Certificate serial: 0730
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft
Manifest number: 0723
Signing time: Sun 10 May 2026 21:57:21 +0000
Manifest this update: Sun 10 May 2026 21:57:21 +0000
Manifest next update: Sun 17 May 2026 21:57:21 +0000
Files and hashes: 1: GuuZUbWE4eIbv8UszokJQRPG_Kc.crl (hash: e/FJ5d1scLCl7MWMiK4CdPKvfYiVzNgRs8Rb3zUEpQU=)
2: 753CE1E6814411F0AF823466C4F9AE02.roa (hash: yzIzUBPrHypmilwZ97hmXQLxuQTPjTDzfB9emwk1+Is=)
3: 4F69940080B811EBBEE2CA7FC4F9AE02.roa (hash: ru7koRfv5BK76e7LZX8DgS3H7EAsvoHWWsynZ+iius0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.crl
rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 17 May 2026 21:57:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1840 (0x730)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CDC5, serialNumber=1AEB9951B584E1E21BBFC52CCE89094113C6FCA7
Validity
Not Before: May 10 21:57:21 2026 GMT
Not After : May 17 21:57:21 2026 GMT
Subject: CN=6a00ff41-5a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3e:7e:b8:48:e0:87:99:47:7f:fc:e3:8c:fb:
ef:ed:8b:e9:ed:81:5d:5a:a4:9b:04:08:b1:07:e2:
e0:18:01:a1:7f:97:8d:99:a0:53:2e:69:1b:f7:b7:
35:25:60:06:7f:58:cc:06:c3:f7:bc:dc:9d:33:31:
51:30:c8:7e:a8:c7:e4:1e:33:38:09:55:33:1d:d2:
f6:b6:ee:ff:f4:be:51:c5:d9:0a:3f:45:b0:c0:d0:
d7:db:8e:13:19:9e:1c:88:68:78:b6:30:b3:b5:3e:
5c:4d:64:9f:85:3b:2e:d1:9f:49:eb:db:03:2b:64:
1a:bd:5a:38:cd:69:a8:a3:71:ff:e5:0c:e9:da:14:
b3:ed:dc:e7:59:8e:a7:92:3c:99:c8:bb:f7:19:b4:
c3:04:f3:e3:3a:93:5e:7e:0f:47:9b:d1:96:d6:74:
6f:6e:d5:dd:3a:c9:a4:36:5a:f9:fd:86:25:14:2d:
6d:ba:0a:6d:5e:38:1c:8c:d2:56:2c:89:48:13:2b:
2d:11:39:eb:1d:be:9a:cb:4c:6f:15:69:d1:a6:7f:
9f:56:25:19:15:35:f5:f5:0a:02:28:5e:28:db:15:
b2:64:79:39:18:a0:f2:02:5a:11:7d:6a:2e:5d:b5:
d5:ea:38:d9:f7:0a:2c:02:16:63:be:12:5f:aa:1f:
61:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:1D:37:4A:19:DA:9B:0C:B6:5D:7B:F5:BF:A8:0C:3F:C9:11:30:4A
X509v3 Authority Key Identifier:
keyid:1A:EB:99:51:B5:84:E1:E2:1B:BF:C5:2C:CE:89:09:41:13:C6:FC:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:6b:90:ae:a6:24:b2:06:58:86:b1:ac:59:15:73:f5:8f:c8:
47:55:15:d0:ec:c5:08:60:97:f9:09:d4:6a:be:df:78:02:85:
83:b1:f7:88:31:46:bd:f3:c6:b1:31:6b:ef:56:22:89:1b:14:
10:0a:72:6e:d4:81:07:28:f5:87:1d:15:2e:02:a4:71:15:96:
13:fd:48:51:02:61:c0:19:01:96:2e:d4:18:da:2d:db:7e:d1:
3e:ce:4d:e5:de:43:8e:2a:3c:1e:20:4e:31:90:c5:94:bd:76:
7e:07:a0:cc:03:0a:8b:ba:94:63:37:dd:f5:28:da:0f:48:12:
83:ff:a6:42:1c:73:3e:d0:7e:a4:82:1c:b8:c6:d4:7e:6c:b9:
c0:27:1a:c1:e2:9b:a3:52:d1:50:76:0b:18:2e:d5:d0:fd:4c:
62:6b:8c:52:0a:c5:41:40:dc:20:ab:e6:01:c0:a9:35:00:b0:
df:e7:b4:86:94:99:6b:cb:d8:91:03:2c:8f:1d:03:b7:e5:a3:
3a:99:7b:fc:78:65:cd:8f:9b:03:80:8d:79:6a:53:1f:ab:a7:
ae:06:05:0c:e6:07:71:2e:27:bc:14:e5:d5:61:ae:41:c3:e3:
10:c1:4a:53:09:44:d6:42:28:ca:7b:8b:7e:63:80:02:75:87:
15:ba:1a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:28:10 2026 by rpki-client