
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft
File: g1GgqJRYpHQmpXCgKQH45lQuguI.mft (raw, json)
Hash identifier: iNrbRfoftmTLgpe7ZCD2FpwoJh9AcW575jKULHbpbSM=
Subject key identifier: CA:81:60:51:7C:07:E5:27:6C:9F:35:A6:63:BE:3A:5B:0C:A0:53:32
Authority key identifier: 83:51:A0:A8:94:58:A4:74:26:A5:70:A0:29:01:F8:E6:54:2E:82:E2
Certificate issuer: /CN=A91B7D3D/serialNumber=8351A0A89458A47426A570A02901F8E6542E82E2
Certificate serial: 0503
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft
Manifest number: 04EC
Signing time: Tue 12 May 2026 23:55:47 +0000
Manifest this update: Tue 12 May 2026 23:55:47 +0000
Manifest next update: Tue 19 May 2026 23:55:47 +0000
Files and hashes: 1: g1GgqJRYpHQmpXCgKQH45lQuguI.crl (hash: Oqic1lvMZcrf8acERfJIGnCvvgHqBc5F01fS8mLKv24=)
2: D3E15ECEA1E611EDABFD7D7FC4F9AE02.roa (hash: kPi4zM9MhBs1Z7XrTJy2yFMDPKRgd24Q9Ibk3GjMnUw=)
3: D516EA2AA1E611EDABFD7D7FC4F9AE02.roa (hash: vxznBiBVR6YDAJK7LuojHusJdEYCXrwVVLv7TWoRtB8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.crl
rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:55:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1283 (0x503)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7D3D, serialNumber=8351A0A89458A47426A570A02901F8E6542E82E2
Validity
Not Before: May 12 23:55:47 2026 GMT
Not After : May 19 23:55:47 2026 GMT
Subject: CN=6a03be03-4bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:22:c3:26:37:3c:2b:ad:cb:ea:89:90:25:99:
48:6c:85:ec:e5:e6:cc:00:89:46:18:6f:4f:96:81:
69:d8:52:ad:ca:61:60:eb:b3:a4:6c:08:25:12:f3:
d7:b4:68:fb:eb:e5:1c:52:cc:86:80:a4:ae:b1:df:
ec:04:c5:3f:e5:27:a3:b2:d5:0c:34:60:e4:94:dd:
70:74:2e:4b:83:e5:2b:21:f9:f0:db:4a:e5:86:f5:
46:d2:03:40:cb:5e:54:42:cb:11:e5:e6:57:39:4a:
93:de:9b:43:1b:9b:bf:f7:ad:ff:f9:f3:fd:ad:e1:
d1:ee:a0:5f:54:68:05:d6:ea:2d:26:71:c3:a2:d7:
4a:c3:6c:ff:3c:6e:e6:04:1e:17:24:87:6e:0a:b1:
66:84:55:0b:8b:28:6b:f9:ca:18:28:d0:24:7a:b7:
54:3e:09:c3:52:47:4f:ed:95:50:db:6f:e8:bb:c7:
ec:96:ab:ac:22:02:00:bd:e0:8e:62:cb:c4:89:ed:
f3:97:2f:1f:e7:a8:c1:38:d2:12:dc:ba:81:4f:c7:
c6:b1:3f:6a:ec:74:e4:e4:8e:62:64:d7:7e:36:43:
ab:41:44:0d:f0:32:56:2a:d7:0b:0d:2f:ca:55:84:
aa:c7:81:c8:f9:18:87:e3:02:4c:22:a7:51:97:95:
30:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:81:60:51:7C:07:E5:27:6C:9F:35:A6:63:BE:3A:5B:0C:A0:53:32
X509v3 Authority Key Identifier:
keyid:83:51:A0:A8:94:58:A4:74:26:A5:70:A0:29:01:F8:E6:54:2E:82:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:29:0f:16:55:37:14:a1:6f:cb:e3:c1:e1:14:5a:10:fd:cc:
4e:e0:c1:15:da:8c:bb:91:26:d8:63:9a:8a:e4:9b:7a:ef:2f:
29:d2:0f:a0:9d:6b:5d:7f:3b:db:b8:50:b8:b1:e9:16:bd:de:
9d:f3:7b:43:a4:64:72:0c:98:3d:13:f1:55:b5:ad:8a:c3:dc:
6c:66:24:24:ec:c9:0c:35:e2:a4:e0:fe:d2:23:0d:d6:71:60:
c8:a4:fb:5f:8d:0a:47:8b:8c:83:51:d1:0f:bc:7d:78:bd:c7:
49:25:f3:77:11:8e:f6:41:b2:15:ef:0e:da:30:a9:9c:82:26:
d1:79:dc:e7:a1:00:67:6a:b9:96:93:5f:1b:ca:be:81:ab:fa:
af:4a:30:01:f8:95:95:05:17:43:4d:4b:dd:1e:ca:d6:d0:85:
85:76:35:01:99:8b:ce:c0:5a:01:6c:c9:8b:2d:57:10:5e:49:
ef:9b:7d:35:96:12:c6:51:31:14:e2:d1:6b:09:a1:43:2d:f4:
25:a3:4f:0b:1e:20:ad:bd:bc:44:53:34:5f:b8:f4:7f:a2:68:
5d:a3:e2:36:86:38:86:35:6c:d9:ff:8d:fe:1b:ff:96:7b:ef:
b1:fa:50:e0:a9:03:33:e0:db:71:59:41:ee:78:7c:f4:d5:39:
a5:ae:f4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:49:30 2026 by rpki-client