
$ rpki-client -vvf rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft
File: G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft (raw, json)
Hash identifier: o7eYc/P6DF/lIfmhFlUhFmO1ulMEaead5uCq5lpT/vk=
Subject key identifier: B6:CA:0C:D9:FD:F9:E1:90:39:03:10:ED:45:B0:8D:92:41:B4:81:81
Authority key identifier: 1B:8A:E7:C7:43:01:72:9D:85:C3:15:95:24:9C:3B:48:F1:B9:15:1E
Certificate issuer: /CN=A91340D8/serialNumber=1B8AE7C74301729D85C31595249C3B48F1B9151E
Certificate serial: 02FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft
Manifest number: 02E9
Signing time: Wed 13 May 2026 01:26:26 +0000
Manifest this update: Wed 13 May 2026 01:26:25 +0000
Manifest next update: Wed 20 May 2026 01:26:25 +0000
Files and hashes: 1: G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl (hash: qEGuY9fQJltW0bMikzmkvva+XZqLMVtYixo7OCB2dHk=)
2: BDDB04B633DC11EF82BB2E27C4F9AE02.roa (hash: dkeJym/v87RKiKKUryyLDWvUYJU8ndSZ66o3idoC4+8=)
3: BE608B1833DC11EF82BB2E27C4F9AE02.roa (hash: yGjZ2qr+BhGngGtcisuW8nAIXic6S3m8loWau7p/bRY=)
4: F2257AC0289011ED8AEEB43CC4F9AE02.roa (hash: vLKPklVP43k6OROJ42PijdvI9ys2gzzUNgh6DMpb1V4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl
rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 762 (0x2fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91340D8, serialNumber=1B8AE7C74301729D85C31595249C3B48F1B9151E
Validity
Not Before: May 13 01:26:25 2026 GMT
Not After : May 20 01:26:25 2026 GMT
Subject: CN=6a03d342-77c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e9:84:d2:28:f8:98:cc:5b:4d:09:51:e3:b2:
40:c5:ca:7f:5f:15:d2:59:23:08:97:fe:c9:62:88:
ea:05:23:61:39:2c:fc:08:cd:71:f1:36:92:41:8c:
96:a5:89:d6:a8:70:00:5f:67:bf:ba:f1:1f:72:a5:
5c:0d:ab:86:44:5b:4a:cb:94:61:80:4d:c1:af:ba:
e9:0d:8f:e4:61:7b:79:1a:6a:af:78:69:87:22:8e:
7d:21:3b:a8:0d:a3:27:ea:42:f5:4a:26:b6:70:d3:
90:87:2a:75:f8:ea:d6:a4:92:ee:2c:3d:86:7b:7d:
6c:8b:32:52:85:d4:b9:a5:06:ce:d8:ef:09:cd:11:
e6:00:7c:2d:3d:17:f6:eb:9c:f2:7a:c2:3a:8b:2c:
b6:78:46:59:17:c3:f9:2b:fe:d0:d8:23:e3:a2:89:
7f:51:ff:b1:9a:7a:65:cf:cb:5a:36:f6:b9:cb:ee:
7a:cd:c0:ad:6b:a4:58:f8:fe:05:d5:5c:16:17:25:
1f:31:e3:20:6d:39:15:7a:f5:8f:92:72:78:7b:6e:
b4:8b:f7:f2:56:26:17:bc:a9:08:be:3a:e1:b3:8e:
45:b2:62:5c:45:0e:44:14:48:ee:82:d7:09:fa:42:
3e:26:c8:69:13:9f:b7:8a:15:3a:b9:ce:88:ec:8a:
ab:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:CA:0C:D9:FD:F9:E1:90:39:03:10:ED:45:B0:8D:92:41:B4:81:81
X509v3 Authority Key Identifier:
keyid:1B:8A:E7:C7:43:01:72:9D:85:C3:15:95:24:9C:3B:48:F1:B9:15:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:b2:98:33:d0:b8:53:6c:09:84:fb:86:c0:7b:a3:76:2b:bb:
ec:a9:a3:c3:47:0f:65:a3:a9:33:64:13:af:0b:38:dc:2d:8b:
dd:92:85:5b:a2:91:71:48:5b:48:04:8b:f9:49:13:90:57:ab:
4d:85:63:71:ad:56:7f:c5:ea:69:e3:07:59:d6:91:ab:7b:e4:
b8:35:d3:ec:b0:76:28:ad:3e:d9:cb:f2:f7:84:60:77:66:6f:
ae:f9:09:0a:4a:2a:cf:f5:3d:a0:c0:a1:d2:dc:9b:55:ea:cf:
ec:1e:58:1b:65:a4:47:e6:a3:5f:18:5a:99:b3:91:4b:68:26:
65:47:bc:0b:e3:99:84:f2:13:d3:93:1b:3f:32:98:a5:24:74:
af:40:6c:7b:21:04:88:5b:e9:2d:fe:44:39:fe:38:ae:ea:07:
65:cf:5b:9a:71:29:5e:a7:35:03:26:32:c3:91:9e:a6:07:08:
bb:ae:89:e6:8c:6c:a0:33:1b:21:a6:c7:59:a9:b8:99:ab:71:
43:c9:ad:16:58:10:b0:c3:f2:7e:9e:d5:f4:a8:e8:38:84:bb:
51:35:0c:40:89:ab:c1:ad:df:b0:af:e8:cd:8e:f6:3a:e1:74:
11:52:2c:20:85:ab:86:bf:85:4f:c4:f0:57:04:07:e2:21:26:
39:6f:e9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:14:03 2026 by rpki-client