
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft
File: gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft (raw, json)
Hash identifier: jRtMa85b/yRok4d80JLPPhB7G7tkCgT/cWmGC5FcTb0=
Subject key identifier: 05:B3:11:A4:83:E4:E9:3A:A1:40:87:9D:91:6D:1E:26:EB:55:D1:22
Authority key identifier: 81:99:49:3A:D2:65:AD:2D:C7:33:96:F6:BA:0B:6E:D6:CC:41:E1:0B
Certificate issuer: /CN=A91CDC32/serialNumber=8199493AD265AD2DC73396F6BA0B6ED6CC41E10B
Certificate serial: 0155
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft
Manifest number: 014B
Signing time: Mon 11 May 2026 05:16:22 +0000
Manifest this update: Mon 11 May 2026 05:16:21 +0000
Manifest next update: Mon 18 May 2026 05:16:21 +0000
Files and hashes: 1: gZlJOtJlrS3HM5b2ugtu1sxB4Qs.crl (hash: laN5JpVI6GJl1ZJyrw/h9u9cubrha7gDIxUl9WiURuo=)
2: 997D587CABD011F0AA576211C4F9AE02.roa (hash: LUO2DzJZDb3MFhgAFK7nfr+kdeF429YVOmQYxveo+6g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.crl
rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 05:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 341 (0x155)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CDC32, serialNumber=8199493AD265AD2DC73396F6BA0B6ED6CC41E10B
Validity
Not Before: May 11 05:16:21 2026 GMT
Not After : May 18 05:16:21 2026 GMT
Subject: CN=6a016625-4b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:68:54:0e:a3:10:15:e2:8d:a9:05:ea:bf:0b:
d7:95:7b:bd:1d:fd:9d:d0:dc:9e:f3:74:f0:5c:09:
6e:c2:cd:b0:4a:d4:41:f6:0f:a6:68:08:6a:4e:50:
c1:73:9a:5f:ef:42:1d:71:ae:8a:26:4a:db:d7:26:
86:8c:2b:46:e1:cf:32:b9:d2:ad:65:bf:c1:98:52:
2c:2f:2f:9c:08:b2:f9:10:e3:cd:e5:40:2b:55:9b:
8b:20:28:9b:19:da:40:63:bb:8b:a3:c9:3d:55:a9:
b9:56:e9:b0:b4:da:a2:7f:a3:fe:47:d2:1c:a4:f0:
82:29:e3:50:33:c6:d2:02:1e:95:b0:23:b8:44:24:
a9:5a:cb:a9:c4:ab:9d:58:d2:c4:62:09:f4:df:3b:
36:55:23:5c:6e:8b:8d:92:d2:3c:de:c1:58:7a:d4:
c8:a8:c1:e6:52:f8:c4:1e:94:b8:85:39:38:b2:01:
20:83:29:68:8e:ec:7f:c0:6f:5b:e2:74:48:be:00:
65:60:9d:4f:e7:b1:af:dc:25:10:3d:a2:25:57:30:
e7:a5:92:38:c4:fb:36:4c:08:1a:d4:79:44:12:0f:
3f:2d:e2:61:2c:91:9e:b1:19:ef:f6:c8:c2:a0:34:
1b:a0:54:e8:89:2c:50:8b:e5:64:7e:e2:c9:0c:b1:
8b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B3:11:A4:83:E4:E9:3A:A1:40:87:9D:91:6D:1E:26:EB:55:D1:22
X509v3 Authority Key Identifier:
keyid:81:99:49:3A:D2:65:AD:2D:C7:33:96:F6:BA:0B:6E:D6:CC:41:E1:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:3d:e3:dd:cc:64:4e:7d:3f:68:ee:44:e8:52:80:c1:1a:82:
0f:c1:8c:a2:25:2b:3b:04:9d:86:57:2e:80:2b:2d:0d:ba:5f:
61:53:4b:1b:23:a1:0c:d5:8a:5d:2f:0c:45:43:55:eb:60:fd:
e1:18:15:b8:ef:64:34:9a:2c:df:20:9b:f8:88:30:30:2f:a1:
e3:b9:f1:5b:bd:c0:3b:e7:e8:b7:08:3a:36:c0:18:b8:8b:08:
b5:c3:ea:99:a9:6a:7c:b0:96:1c:81:46:8f:69:39:e9:df:bf:
be:cc:bb:d9:eb:d9:05:18:e5:11:80:65:26:d4:0e:12:4a:cd:
ad:d8:a9:84:8b:06:cd:89:fe:ec:15:5d:2b:46:3f:bd:ed:83:
bb:36:47:03:0d:4a:af:95:21:c7:7c:ab:eb:b1:b5:22:34:f9:
d4:9f:44:90:d8:3f:e5:eb:c1:1b:2d:3a:d9:1f:c0:5a:e7:46:
93:46:c6:7f:99:83:6e:32:1b:96:a2:ae:ce:1a:53:bb:50:be:
bc:48:fc:02:12:e8:df:93:03:82:6b:3f:de:6b:7f:c4:ae:08:
b2:49:b1:6b:ba:1b:af:e0:67:58:7e:02:1e:c3:d3:89:9a:de:
15:e1:92:82:42:cb:12:7d:f4:fa:e3:50:fe:1c:53:39:8c:6f:
e7:bf:02:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:35:20 2026 by rpki-client