
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft
File: 509GTECGWe0lidtmTOjvamxgDEc.mft (raw, json)
Hash identifier: g+fScF4P+OXfZ1brBM8+xZlZb8ekD+ndBIw0cR6Cjg0=
Subject key identifier: E1:A8:11:C8:BF:BF:7F:96:9E:E5:99:A5:79:68:4F:C3:DB:AD:1D:AC
Authority key identifier: E7:4F:46:4C:40:86:59:ED:25:89:DB:66:4C:E8:EF:6A:6C:60:0C:47
Certificate issuer: /CN=A91A06F2/serialNumber=E74F464C408659ED2589DB664CE8EF6A6C600C47
Certificate serial: 0BEB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft
Manifest number: 0BD8
Signing time: Tue 12 May 2026 18:59:22 +0000
Manifest this update: Tue 12 May 2026 18:59:22 +0000
Manifest next update: Tue 19 May 2026 18:59:22 +0000
Files and hashes: 1: 509GTECGWe0lidtmTOjvamxgDEc.crl (hash: xf6Sp1lOP53h6la02LmOHY4wdBmk7H633zbCiG5Gu3Y=)
2: D40428EC3D5511F18320D810A8833773.roa (hash: GiqC1fPItzwUUjM6WaOHq6c0vxZNE0S017OV+sd3TxQ=)
3: 8B37D2C40D2511EFA2E4D985C4F9AE02.roa (hash: Nnnq4X2pr12xKRIifzfba52zTnL3E4FSIZx5q2aHomI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.crl
rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:59:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3051 (0xbeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A06F2, serialNumber=E74F464C408659ED2589DB664CE8EF6A6C600C47
Validity
Not Before: May 12 18:59:22 2026 GMT
Not After : May 19 18:59:22 2026 GMT
Subject: CN=6a03788a-80d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:64:48:dd:64:a9:7b:69:c2:1f:8a:a8:00:cc:
2b:49:56:9f:53:d8:c9:cb:03:f8:b7:4e:3d:cb:9f:
67:7c:57:f7:0e:d9:e7:a3:48:f9:a9:54:17:11:19:
6f:8a:4c:6b:76:2d:d9:e0:dc:b3:51:2a:0a:e9:29:
b5:7d:dd:4f:9f:02:c1:8d:e1:08:65:a2:8e:07:9b:
34:3c:50:2e:69:48:14:db:bf:1f:41:c1:21:2e:08:
f5:1b:f4:49:a0:d7:f8:fa:79:43:0f:66:11:60:6f:
31:55:21:0b:87:4c:e8:49:61:e4:69:5d:f0:ff:5a:
ea:9f:41:38:b2:ff:39:74:07:bc:ce:5b:d6:f2:1d:
7b:0f:76:21:46:16:df:6c:86:b7:6a:86:8a:94:e5:
da:09:90:12:2d:b0:fc:f2:a2:43:68:40:0c:a8:bf:
c1:2a:9d:e8:33:3a:65:66:40:b5:f3:0c:3c:66:bb:
9e:1c:0f:7b:25:bd:45:b1:8d:aa:f4:38:d0:64:7a:
77:32:cc:6d:15:5c:38:da:99:a7:f0:83:18:65:a7:
19:9d:1c:ff:b1:57:bb:fe:c3:5d:b9:d0:e6:a7:3b:
de:e7:c3:5d:5b:4e:b5:b0:da:c5:39:1f:9a:96:fb:
f0:55:68:95:96:38:e6:a9:a6:4c:e5:e1:b2:b6:6c:
a3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A8:11:C8:BF:BF:7F:96:9E:E5:99:A5:79:68:4F:C3:DB:AD:1D:AC
X509v3 Authority Key Identifier:
keyid:E7:4F:46:4C:40:86:59:ED:25:89:DB:66:4C:E8:EF:6A:6C:60:0C:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:cc:ba:a4:06:e4:1b:39:6e:71:e5:5b:55:69:24:06:6e:df:
86:21:ac:73:29:ac:fa:d5:08:3f:c1:bc:ab:dd:69:ee:c7:b6:
a7:78:b0:93:c6:f6:b7:02:57:da:e5:78:b7:7e:2f:d9:16:f1:
46:0b:14:26:74:2e:6b:21:65:7d:62:df:58:03:77:10:68:7e:
d6:8d:15:4b:06:ec:eb:c4:be:d7:0b:9c:e5:ae:74:83:45:71:
66:66:90:b0:0a:2b:7b:bd:0d:33:2f:3e:12:1f:02:80:6c:bf:
ac:e2:25:b2:1e:cb:e9:c8:1d:91:cf:8f:9a:af:13:ea:ea:c9:
eb:80:85:a0:8c:a1:c9:d1:15:be:3a:23:3e:b0:ae:c7:3c:56:
ef:02:93:16:8b:5b:46:87:14:74:94:a4:4c:49:d2:2e:bf:66:
c5:d2:1e:d9:59:0c:b1:e0:17:f4:ce:a0:95:b0:13:f8:ce:7f:
ba:2d:e7:29:f8:ae:26:e1:65:30:16:64:c0:e6:30:4f:65:0f:
7e:e5:6d:99:22:3b:69:11:1d:4a:d9:3a:58:2e:e1:52:73:03:
63:7d:9c:ee:7f:12:d9:d1:b7:3d:77:9e:bf:8b:d2:79:83:cb:
bb:2d:a6:9b:8a:33:0a:4a:db:57:48:31:b7:9e:2e:0d:d5:75:
13:98:fe:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:38:33 2026 by rpki-client