
$ rpki-client -vvf rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft
File: gqdp3XRsgx9MTbKdamXeCNatle0.mft (raw, json)
Hash identifier: mcHaG6ytW1VlBO45BQsYa6CLscN16t+jla22X+Pe6b8=
Subject key identifier: 86:87:51:1D:56:C2:F3:23:2D:15:74:D4:6A:BF:0F:CF:BB:D8:CC:21
Authority key identifier: 82:A7:69:DD:74:6C:83:1F:4C:4D:B2:9D:6A:65:DE:08:D6:AD:95:ED
Certificate issuer: /CN=A91921AE/serialNumber=82A769DD746C831F4C4DB29D6A65DE08D6AD95ED
Certificate serial: 012C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqdp3XRsgx9MTbKdamXeCNatle0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft
Manifest number: 011B
Signing time: Mon 11 May 2026 06:02:55 +0000
Manifest this update: Mon 11 May 2026 06:02:54 +0000
Manifest next update: Mon 18 May 2026 06:02:54 +0000
Files and hashes: 1: gqdp3XRsgx9MTbKdamXeCNatle0.crl (hash: dwFOGKVdZIJonLP33k6SrXLkeSsfFif0lRc16bnQAtg=)
2: DC76F25EBCFD11EFAF51D253C4F9AE02.roa (hash: fKB1wROuPCiOAs2iiH8T0iD/fbxHacro6VdzGc7766Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.crl
rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqdp3XRsgx9MTbKdamXeCNatle0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 300 (0x12c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91921AE, serialNumber=82A769DD746C831F4C4DB29D6A65DE08D6AD95ED
Validity
Not Before: May 11 06:02:54 2026 GMT
Not After : May 18 06:02:54 2026 GMT
Subject: CN=6a01710e-3895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b4:be:49:01:89:75:e2:be:50:d1:a5:13:43:
b6:a9:f6:13:87:73:75:3a:56:47:ef:9c:b5:38:14:
9e:fd:c6:ef:cb:64:58:13:c7:b4:7a:ed:a1:aa:83:
bf:00:bc:f2:20:85:8d:45:c0:d4:d2:8f:3b:c1:d8:
59:db:33:b2:ad:e7:35:98:d4:5b:75:10:ab:61:4d:
c0:90:b5:c8:19:84:f4:c4:ac:ea:ac:d3:05:6d:61:
e2:cf:90:44:cc:74:74:d3:e3:b5:52:0f:1a:58:c8:
c1:32:03:6d:5b:37:94:77:80:e7:a5:6f:86:9e:54:
7f:73:d1:61:08:23:ce:7d:1d:83:a5:fc:c5:82:5c:
a3:32:71:98:81:b3:cc:4c:b9:ae:2c:99:7c:14:ec:
cc:e3:9c:0c:35:b0:5b:d3:47:99:44:dd:f2:43:ec:
e6:4c:47:2e:1d:0f:79:0b:61:ea:59:c0:44:ca:a4:
11:e9:03:29:bc:e1:7d:b5:eb:0a:e8:3b:b4:ad:99:
52:64:15:1d:40:e1:50:f2:a0:9e:cb:d2:a9:00:53:
13:fa:a8:6d:d2:ee:17:42:b7:66:81:68:23:3b:8a:
eb:9d:90:1e:b9:90:a2:27:bc:d8:54:9b:33:50:dd:
5b:b6:25:15:f9:2d:5a:c9:02:17:a0:53:53:16:b2:
3f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:87:51:1D:56:C2:F3:23:2D:15:74:D4:6A:BF:0F:CF:BB:D8:CC:21
X509v3 Authority Key Identifier:
keyid:82:A7:69:DD:74:6C:83:1F:4C:4D:B2:9D:6A:65:DE:08:D6:AD:95:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqdp3XRsgx9MTbKdamXeCNatle0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:80:de:9c:bf:c0:c6:d8:d7:88:cc:17:f4:70:fc:0f:7f:df:
e9:02:13:ee:6f:f6:b0:3b:c0:66:04:80:94:66:fd:75:fa:ad:
a8:cf:b0:5d:45:80:93:d6:de:43:32:40:0e:cf:93:10:8d:9a:
21:1b:24:4d:99:bb:99:b2:4a:74:a2:9a:d0:e7:38:07:e3:7c:
cd:be:cf:bd:a2:a5:f7:77:1b:06:87:c8:9d:e2:3b:ce:1a:9f:
d6:e8:81:be:1c:70:83:f7:b7:5c:1d:4e:35:52:65:68:1b:9d:
d4:9d:9e:13:73:97:60:0d:79:6f:9c:d9:82:dd:8c:54:a7:af:
43:aa:c3:57:39:6c:49:c4:2e:0e:c2:3f:0c:6d:71:2c:3b:7e:
cb:9c:c5:72:26:59:3b:1c:8c:37:38:54:b0:0b:99:88:5b:22:
ca:b1:07:9f:8b:f0:40:92:fa:9d:d6:2d:b9:c8:0d:d1:c5:c7:
96:7b:b8:fa:7e:d3:8f:5f:77:78:f1:a9:de:2a:e5:43:c7:64:
24:ba:fd:e6:9b:de:8e:a4:68:20:93:bd:6c:02:28:e8:cc:fb:
33:e4:f7:c7:10:bf:8c:8b:2b:b7:a7:bc:f3:b1:8a:cf:14:de:
65:a7:96:fa:40:5f:19:e5:94:40:82:1b:85:e4:fe:4a:8f:a4:
3a:c3:40:f4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTIxQUUxMTAvBgNVBAUTKDgyQTc2OURENzQ2QzgzMUY0QzREQjI5RDZBNjVERTA4
RDZBRDk1RUQwHhcNMjYwNTExMDYwMjU0WhcNMjYwNTE4MDYwMjU0WjAYMRYwFAYD
VQQDEw02YTAxNzEwZS0zODk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0LS+SQGJdeK+UNGlE0O2qfYTh3N1OlZH75y1OBSe/cbvy2RYE8e0eu2hqoO/
ALzyIIWNRcDU0o87wdhZ2zOyrec1mNRbdRCrYU3AkLXIGYT0xKzqrNMFbWHiz5BE
zHR00+O1Ug8aWMjBMgNtWzeUd4DnpW+GnlR/c9FhCCPOfR2DpfzFglyjMnGYgbPM
TLmuLJl8FOzM45wMNbBb00eZRN3yQ+zmTEcuHQ95C2HqWcBEyqQR6QMpvOF9tesK
6Du0rZlSZBUdQOFQ8qCey9KpAFMT+qht0u4XQrdmgWgjO4rrnZAeuZCiJ7zYVJsz
UN1btiUV+S1ayQIXoFNTFrI/8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIaHUR1W
wvMjLRV01Gq/D8+72MwhMB8GA1UdIwQYMBaAFIKnad10bIMfTE2ynWpl3gjWrZXt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjFBRS83NDkxMkIyQ0FD
NzMxMUVGQTNDQkQxNEFDNEY5QUUwMi9ncWRwM1hSc2d4OU1UYktkYW1YZUNOYXRs
ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dxZHAzWFJzZ3g5TVRiS2RhbVhlQ05hdGxlMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MjFBRS83NDkxMkIyQ0FDNzMxMUVGQTNDQkQxNEFDNEY5QUUwMi9ncWRwM1hSc2d4
OU1UYktkYW1YZUNOYXRsZTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkIDenL/AxtjXiMwX9HD8D3/f6QIT7m/2sDvAZgSAlGb9dfqtqM+wXUWAk9be
QzJADs+TEI2aIRskTZm7mbJKdKKa0Oc4B+N8zb7PvaKl93cbBofIneI7zhqf1uiB
vhxwg/e3XB1ONVJlaBud1J2eE3OXYA15b5zZgt2MVKevQ6rDVzlsScQuDsI/DG1x
LDt+y5zFciZZOxyMNzhUsAuZiFsiyrEHn4vwQJL6ndYtucgN0cXHlnu4+n7Tj193
ePGp3irlQ8dkJLr95pvejqRoIJO9bAIo6Mz7M+T3xxC/jIsrt6e887GKzxTeZaeW
+kBfGeWUQIIbheT+So+kOsNA9A==
-----END CERTIFICATE-----
Generated at Wed May 13 08:21:09 2026 by rpki-client