
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.mft
File: gBf49rHsAjxINqRXp7BYQqBxnyg.mft (raw, json)
Hash identifier: KrhB77Yig05nXCoqMOofT2W8qgKjN/h8UUoeYIpRR6c=
Subject key identifier: 6D:51:1A:41:F5:9F:3E:E8:F4:ED:EF:7E:F7:C2:CF:86:A3:79:85:AB
Authority key identifier: 80:17:F8:F6:B1:EC:02:3C:48:36:A4:57:A7:B0:58:42:A0:71:9F:28
Certificate issuer: /CN=A913B088/serialNumber=8017F8F6B1EC023C4836A457A7B05842A0719F28
Certificate serial: 0C02
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBf49rHsAjxINqRXp7BYQqBxnyg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.mft
Manifest number: 0BF5
Signing time: Tue 12 May 2026 18:55:23 +0000
Manifest this update: Tue 12 May 2026 18:55:23 +0000
Manifest next update: Tue 19 May 2026 18:55:23 +0000
Files and hashes: 1: gBf49rHsAjxINqRXp7BYQqBxnyg.crl (hash: 6twIx1MGSumRC9Lj6yTEsDVjXMKNIi+iEJDmm+LtQ68=)
2: 6DEDEF66387A11EA9450A37CC4F9AE02.roa (hash: VN5zrdXN/i/ZLANozzwqTXK0Kty6SSXFZessLQ7bY9g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.crl
rsync://rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBf49rHsAjxINqRXp7BYQqBxnyg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:55:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3074 (0xc02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B088, serialNumber=8017F8F6B1EC023C4836A457A7B05842A0719F28
Validity
Not Before: May 12 18:55:23 2026 GMT
Not After : May 19 18:55:23 2026 GMT
Subject: CN=6a03779b-a19b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e7:b8:32:e2:3b:68:32:43:57:de:21:e1:0d:
20:ca:ab:e4:bf:f3:cc:82:a8:48:47:23:65:b7:59:
b2:14:a9:b2:fe:61:0f:c1:ab:e6:6a:43:65:10:45:
95:38:d7:0f:ad:05:91:30:39:7a:9e:f9:1b:a3:f0:
7a:78:6a:ec:9d:8a:d4:1e:63:b0:e2:5e:5b:52:03:
94:bc:2e:d1:bf:e3:4a:56:d2:bf:ac:e3:c4:75:5f:
f5:f2:b5:55:23:e1:df:9f:e2:12:7d:47:83:e8:7c:
ea:ab:10:d9:53:b9:6c:82:44:0f:bb:6b:f1:a6:ae:
96:8e:e9:f6:37:1d:4e:f4:ba:a6:46:e2:45:ce:93:
87:32:7d:df:57:e0:1f:00:64:7d:da:7b:c7:60:b9:
07:e1:ec:be:13:66:ff:05:92:13:ab:ef:ff:ef:56:
79:5f:6e:35:b2:33:20:50:b8:cd:ad:fc:85:60:54:
a2:8e:a8:a0:b3:91:0b:9a:1c:63:4f:be:2c:a1:13:
76:3a:1a:f2:c4:38:c0:76:bb:ab:93:42:4d:30:f6:
81:cb:c2:4c:e1:c5:5a:3b:60:8d:25:e2:0c:d0:6c:
6e:dd:2f:3e:6e:c3:73:a8:74:78:73:14:a4:a6:45:
f9:c4:44:44:c3:09:df:3b:7f:3b:00:8a:bb:ff:bc:
46:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:51:1A:41:F5:9F:3E:E8:F4:ED:EF:7E:F7:C2:CF:86:A3:79:85:AB
X509v3 Authority Key Identifier:
keyid:80:17:F8:F6:B1:EC:02:3C:48:36:A4:57:A7:B0:58:42:A0:71:9F:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBf49rHsAjxINqRXp7BYQqBxnyg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cf:76:a1:6f:f3:17:a8:37:e0:34:03:0c:a6:91:cd:a1:cc:00:
1b:66:56:60:46:e3:81:95:88:e8:36:aa:04:ef:68:7e:b5:73:
20:d8:38:86:b5:b3:3f:e3:fd:9f:46:e9:74:59:35:29:34:63:
1d:9d:86:89:b7:85:72:33:e9:15:8a:0d:60:5b:83:2b:21:d8:
b6:c2:ca:65:00:44:1b:c9:c1:24:58:d6:79:3a:ab:b0:ed:d4:
6f:7f:11:e1:0d:ee:53:01:f1:21:59:93:d1:94:95:ee:64:c8:
4a:9d:16:d6:68:e4:31:bd:21:d7:8c:c5:df:90:08:58:23:15:
05:00:c0:50:29:cf:15:9a:82:49:0a:af:cb:a5:0a:5a:27:e8:
e9:9a:44:dd:d6:5b:a4:ea:2e:72:f6:a8:6e:b2:c9:46:5f:6f:
d0:f4:e8:41:ef:99:65:d9:e8:e5:2f:0a:c5:40:32:97:e4:bb:
8c:9a:24:16:09:da:6c:53:00:86:18:ab:08:78:0f:3f:07:70:
52:71:49:24:c3:87:d7:b2:e6:8a:55:28:48:ee:61:b4:91:84:
02:bd:d7:52:bb:e0:bc:f2:10:f0:9c:cd:31:29:80:b5:a2:84:
f3:3b:6c:ca:ff:3c:74:60:e7:b1:ab:bc:0f:69:94:6e:71:c0:
7e:ae:66:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:19:07 2026 by rpki-client