
$ rpki-client -vvf rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft
File: GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft (raw, json)
Hash identifier: j3Ub0dU77YOk5xcbJvZw8j6vFHpNwf9ndr7+iJ2syEg=
Subject key identifier: 5C:49:3A:62:20:1C:5C:81:6B:18:67:3C:AF:8D:51:F7:CE:41:12:57
Authority key identifier: 19:CA:97:F9:EC:B5:0C:58:4D:1B:FB:D6:B7:45:02:41:39:A0:15:22
Certificate issuer: /CN=A91475C0/serialNumber=19CA97F9ECB50C584D1BFBD6B745024139A01522
Certificate serial: 13AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GcqX-ey1DFhNG_vWt0UCQTmgFSI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft
Manifest number: 138D
Signing time: Wed 22 Jul 2026 17:04:26 +0000
Manifest this update: Wed 22 Jul 2026 17:04:25 +0000
Manifest next update: Wed 29 Jul 2026 17:04:25 +0000
Files and hashes: 1: GcqX-ey1DFhNG_vWt0UCQTmgFSI.crl (hash: MOvMaGoLG4i5RFCK0onlTUFydHXfT0WN5lf+tpCE9qw=)
2: 13F37A72C14C11E888561034C4F9AE02.roa (hash: ZepnDMLI7akL9lrHf//wNWHbShyWaRdIrZLN9o/UpTg=)
3: 1341A108C14C11E888561034C4F9AE02.roa (hash: /uY8RUP8tuD7wGWCpK0VPeMOJdExgcHrWUqm1vAPuRY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.crl
rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GcqX-ey1DFhNG_vWt0UCQTmgFSI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:04:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5035 (0x13ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91475C0, serialNumber=19CA97F9ECB50C584D1BFBD6B745024139A01522
Validity
Not Before: Jul 22 17:04:25 2026 GMT
Not After : Jul 29 17:04:25 2026 GMT
Subject: CN=6a60f81a-8210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:51:46:68:ab:1e:3a:6e:07:b9:57:5b:e3:fa:
cc:74:70:b5:c6:63:8b:ed:45:41:f9:7e:22:7a:27:
67:25:04:ca:62:e7:81:61:84:29:f2:ea:3d:63:e1:
0f:92:0f:0a:4c:05:a7:81:49:73:e6:f9:28:df:bd:
f6:55:24:a0:7c:a0:3e:41:df:73:be:36:55:fb:a8:
b5:0a:a9:04:7a:d2:a9:e5:20:ad:1a:5f:13:09:7c:
4c:5e:b3:de:27:74:7c:04:8c:c9:d3:af:58:1b:c2:
b9:e3:fc:a4:26:52:95:0f:2a:43:c4:05:2b:8e:b5:
7c:d0:7f:e2:49:0e:f6:e1:9e:36:62:08:87:11:94:
71:28:10:f8:ce:63:c0:0d:01:69:41:a4:cc:9a:16:
24:25:ef:3a:c2:45:d7:73:4b:a5:2d:41:82:14:f5:
99:7b:29:f9:cf:9b:db:f3:4a:74:9f:7e:9a:b9:3f:
98:0e:79:d1:4c:07:75:dd:23:07:f0:ba:5e:a8:a8:
61:45:ac:6d:99:ef:25:5d:e3:f7:7c:11:e1:9b:44:
2b:8f:ed:7f:4b:61:a3:41:52:56:d7:0e:b9:f7:9d:
63:27:90:99:a0:78:df:3d:6f:06:c3:5a:3a:5d:74:
d2:7d:dd:d3:7c:f1:b1:1c:84:d4:7f:c6:e6:8a:e5:
e5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:49:3A:62:20:1C:5C:81:6B:18:67:3C:AF:8D:51:F7:CE:41:12:57
X509v3 Authority Key Identifier:
keyid:19:CA:97:F9:EC:B5:0C:58:4D:1B:FB:D6:B7:45:02:41:39:A0:15:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GcqX-ey1DFhNG_vWt0UCQTmgFSI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:06:21:60:3a:66:71:1a:67:d3:89:df:0b:93:74:5b:9f:95:
55:0f:38:7f:9f:13:0f:d5:52:b0:03:eb:60:40:fb:bb:10:c9:
84:83:3d:9a:c4:bb:a6:1a:5d:08:7a:29:19:ad:63:91:2a:c0:
2c:a9:e1:ab:8f:a5:82:24:53:f8:bb:1e:cb:e3:c8:af:01:7b:
cb:bb:5c:1a:8d:70:63:cc:ad:9d:65:e0:54:62:18:b0:cc:0b:
72:1d:85:e8:eb:d4:7b:16:99:0e:92:83:c9:3f:24:69:ee:6d:
96:0b:66:8f:d3:78:af:32:6d:e7:c6:8a:1d:2a:ea:c6:03:48:
f6:2d:c8:56:57:66:81:8c:07:7f:f1:33:bf:cf:ee:0a:1b:29:
fd:8c:66:e9:ec:53:97:10:93:a7:d8:06:e9:d6:97:07:b0:09:
d7:44:0f:ce:6c:e3:c8:de:b5:90:bc:35:09:cd:eb:bf:3b:8b:
8d:23:98:a4:33:d5:ea:c2:0c:8f:66:28:92:aa:0f:85:61:b3:
e6:d3:af:55:0f:e5:6d:27:4d:67:aa:4b:02:9b:fd:eb:e9:26:
65:56:31:98:2f:b4:f7:a5:97:d5:3f:d0:7a:4b:d7:86:bd:93:
c0:4f:93:06:9d:84:f9:0a:ff:13:d8:36:3a:50:c3:dc:07:9b:
09:8b:54:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:18:17 2026 by rpki-client