
$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft
File: -gRcYwK4c-iDZfqaAhSZtPPFhog.mft (raw, json)
Hash identifier: F+CsOCavcEnpi7+9Ygr+jCfHxeXyp0TmYxS3O4sJ3Zo=
Subject key identifier: 5F:A2:EE:F0:91:E0:3A:5B:A4:9E:BB:E6:22:20:A6:E4:B0:16:A7:C9
Authority key identifier: FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88
Certificate issuer: /CN=A91853D3/serialNumber=FA045C6302B873E88365FA9A021499B4F3C58688
Certificate serial: 061A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft
Manifest number: 05FA
Signing time: Tue 12 May 2026 23:07:40 +0000
Manifest this update: Tue 12 May 2026 23:07:40 +0000
Manifest next update: Tue 19 May 2026 23:07:40 +0000
Files and hashes: 1: -gRcYwK4c-iDZfqaAhSZtPPFhog.crl (hash: ievf8iVIdHk3TfQ6Hb4mA913Gfxi2ybaRwMrFTXXSk4=)
2: 52A1A77A6ECF11F0B2785815C4F9AE02.roa (hash: 99SBr5WJIbWwpgEc6hwr9lvi4BLubRre2gvekG03kuo=)
3: 36C4FAAAA9FC11EEBEF3E64AC4F9AE02.roa (hash: sXo/EfCy1P1hXgj+XVBKjDkQi4E974lDfTItj2KXQOc=)
4: 5C9E3A00E83111F0B570A08B79EE528E.roa (hash: ME2B8uuD8K+ZGXPv64QmrsnI4TiGRtKbpWpIh4aJJVc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.crl
rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:07:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1562 (0x61a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91853D3, serialNumber=FA045C6302B873E88365FA9A021499B4F3C58688
Validity
Not Before: May 12 23:07:40 2026 GMT
Not After : May 19 23:07:40 2026 GMT
Subject: CN=6a03b2bc-4379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:df:55:d6:b6:86:f8:a8:5d:4e:dd:30:85:49:
aa:75:14:e8:a7:d0:58:cc:6e:da:7e:14:ef:4d:d6:
b2:91:19:41:87:a8:83:47:ab:b7:46:b3:73:13:82:
50:83:ad:b0:1b:1e:76:ae:e4:b0:aa:c6:4f:bd:00:
d9:83:e7:85:c1:db:ad:e2:21:26:74:f9:db:0d:b8:
bf:01:52:4f:6c:8b:9e:03:53:5a:17:e6:a4:54:5c:
fd:3e:a6:4e:8e:27:92:5b:7d:a2:bf:e2:4b:a4:ee:
7c:65:37:dc:cd:46:ed:97:a9:e5:d3:b1:dd:0d:83:
e4:e8:74:ce:d5:67:41:89:d8:05:92:b8:ac:0f:99:
be:5c:79:6e:a9:79:3c:63:ec:5c:cd:d9:1b:92:ea:
a8:f8:54:ee:9b:b7:48:03:52:eb:2f:51:ec:ae:1f:
e9:d9:41:a4:75:08:ad:a6:1c:54:59:e3:c7:af:a8:
f8:d4:88:96:1a:09:f3:89:e9:b8:0a:30:8f:0c:a4:
cb:66:7e:c9:fb:35:68:5c:b9:6c:04:13:3c:36:4f:
9c:91:3a:81:01:a8:3c:ed:57:1d:39:6d:68:02:42:
0a:85:e8:91:dc:2e:f4:ce:4d:ba:6e:46:6c:04:3f:
f8:30:64:09:ae:34:28:46:c3:ee:cb:f1:dc:c1:2a:
93:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A2:EE:F0:91:E0:3A:5B:A4:9E:BB:E6:22:20:A6:E4:B0:16:A7:C9
X509v3 Authority Key Identifier:
keyid:FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:5c:4d:6d:d6:80:f1:4f:3f:ff:1c:e3:ca:ca:06:ea:9b:80:
7f:fc:e6:cd:ac:1f:6a:ee:b2:b7:ab:77:24:16:3c:26:c5:9a:
74:74:c7:fa:eb:47:23:35:70:35:87:2b:06:fb:0b:b8:94:c3:
84:a6:53:ea:1c:bb:bb:f6:a3:70:90:24:9f:27:5d:52:61:9b:
8a:cb:02:0d:42:e2:5d:e2:d4:f1:8d:6c:32:a2:43:dc:48:9e:
06:ac:6f:5a:31:27:b3:cf:87:a4:18:79:68:30:47:e8:d2:75:
2a:28:e9:60:5a:ca:39:ef:f7:aa:77:46:c6:0b:f2:a5:e2:71:
67:78:b0:2f:67:f3:d9:98:48:0e:d5:d4:8b:9c:d1:4e:4e:1e:
f5:6b:bb:29:9f:58:09:cf:05:d2:17:a5:c3:93:8e:60:e3:0d:
84:e6:7e:a7:40:6b:c6:3f:3b:13:4b:46:b7:f6:c8:3a:6e:93:
c4:6d:9a:22:7d:8a:49:51:52:50:77:af:1c:b4:62:67:cb:02:
39:cf:38:e9:c4:3e:fa:51:c2:8d:51:24:e6:56:f1:12:9a:66:
1c:3f:6d:97:cf:00:42:4c:3f:83:48:7a:0b:e7:42:01:26:91:
59:92:d5:d1:6a:7d:90:e6:2b:0c:c8:50:c8:ef:11:ca:9f:7a:
62:1a:49:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:13:49 2026 by rpki-client