
$ rpki-client -vvf rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft
File: gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft (raw, json)
Hash identifier: V0f80jpxP6iUBI4IKh+WIJZJXaraWcCX+7DSlj1GJXE=
Subject key identifier: 60:39:95:78:47:18:00:F0:39:C3:3A:0A:53:D6:5A:F1:1E:BD:04:26
Authority key identifier: 80:21:B1:6B:92:42:1F:77:B7:26:0E:97:E6:AD:8C:1D:24:BD:29:9A
Certificate issuer: /CN=A91936BE/serialNumber=8021B16B92421F77B7260E97E6AD8C1D24BD299A
Certificate serial: 08D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft
Manifest number: 08B6
Signing time: Tue 12 May 2026 20:34:04 +0000
Manifest this update: Tue 12 May 2026 20:34:03 +0000
Manifest next update: Tue 19 May 2026 20:34:03 +0000
Files and hashes: 1: gCGxa5JCH3e3Jg6X5q2MHSS9KZo.crl (hash: BEpK5pZqybISvrDzKtskrDZ4P3/QlU2N728aPUDd9SE=)
2: 538866F6E44B11EAA31DD984C4F9AE02.roa (hash: a1CNS+aw2qVdCSuRRm//a5IPz4YXPjTaG+Ec6by8sVk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.crl
rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:34:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2257 (0x8d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91936BE, serialNumber=8021B16B92421F77B7260E97E6AD8C1D24BD299A
Validity
Not Before: May 12 20:34:03 2026 GMT
Not After : May 19 20:34:03 2026 GMT
Subject: CN=6a038ebb-181a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:cf:da:3f:5a:77:36:47:de:37:22:38:78:3a:
c8:c3:21:a0:11:95:40:93:f3:e9:33:79:2d:40:14:
4c:ac:9c:43:85:10:a7:de:07:b6:ae:53:22:cd:75:
d6:32:03:32:a1:14:7f:5c:6b:66:58:75:ec:fe:7c:
27:b6:b4:12:ec:61:ce:8f:b5:e8:51:b9:e3:25:2e:
1f:66:1e:cd:7b:e5:94:1b:e0:8c:2e:08:34:b1:10:
fa:b4:87:f4:a7:b1:82:fd:f9:18:3f:67:4c:9b:ba:
83:e5:1b:d7:a3:7e:36:59:59:29:89:1d:1a:6c:a1:
3a:37:9d:01:60:13:8d:7c:25:60:52:ff:f0:9e:48:
b1:76:54:a8:6a:3f:a9:98:71:c8:07:39:61:f4:19:
09:eb:c8:1f:37:4a:f8:05:c1:c8:cc:c5:07:b4:26:
2e:d1:1d:d0:1f:10:4e:cf:20:0c:70:b9:07:62:95:
bd:ff:fc:5a:8b:f4:06:00:6f:8e:bd:87:32:41:7e:
a0:d0:05:98:7a:e5:0f:9a:d0:1f:d2:c2:a5:42:16:
7e:e6:da:92:56:4d:b0:36:88:dd:18:91:1b:d1:ca:
97:56:15:a2:fd:43:ff:af:05:c8:da:3f:2b:23:2e:
c3:8b:87:f8:61:87:15:53:b8:c6:72:92:72:3c:1b:
28:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:39:95:78:47:18:00:F0:39:C3:3A:0A:53:D6:5A:F1:1E:BD:04:26
X509v3 Authority Key Identifier:
keyid:80:21:B1:6B:92:42:1F:77:B7:26:0E:97:E6:AD:8C:1D:24:BD:29:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:3f:0d:0a:d9:e7:bd:59:0e:e7:d6:b1:05:bc:c0:73:7a:9c:
fc:35:ff:cb:75:d7:b2:d7:06:c7:3f:d9:32:f5:cd:ec:eb:5a:
92:22:dc:4d:a5:04:24:42:fd:6e:c0:ce:41:59:47:c3:6b:8c:
86:d5:b8:98:f4:b2:e7:a2:bc:d9:59:08:21:fa:33:66:fe:3d:
be:5b:ff:9c:70:a3:36:1b:3b:32:c0:c2:f7:48:89:5f:ec:f5:
fe:a3:3a:4e:76:af:b6:97:d7:c4:a1:71:f6:2d:0c:57:1b:3c:
37:de:d1:9e:01:95:6d:a3:31:a8:4b:52:d0:02:dd:15:ab:34:
81:c2:1b:f3:60:62:a3:7a:28:17:89:e8:2b:2a:8b:c7:c2:c0:
22:b0:13:eb:30:94:00:e7:15:5a:ad:b0:a7:da:e6:6f:81:3f:
9d:ac:a7:22:d1:c2:ce:87:a4:8a:a7:ba:42:47:3f:7e:7b:72:
73:fa:6f:37:5d:03:94:3b:18:23:98:de:df:18:53:77:55:5d:
c7:dd:2b:ac:27:60:5a:ad:68:58:b5:5a:f7:83:ea:97:d9:01:
79:9b:37:8a:34:79:cf:22:2e:0e:db:7a:20:c1:43:98:00:26:
3c:d9:bd:34:c5:4a:b6:95:a0:90:81:e2:df:0d:f5:31:99:e7:
ab:64:f0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:04:43 2026 by rpki-client