
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft
File: _GiPuVzFIF4D5wpgXJlMXUlaszI.mft (raw, json)
Hash identifier: Vv6F7Xyxwny/+Y56RRhl3vc1c7aMWR9oHSxbu1ochzE=
Subject key identifier: 02:64:9E:CB:9D:A9:1A:58:AE:27:63:86:AF:8B:60:4E:6F:C4:6A:48
Authority key identifier: FC:68:8F:B9:5C:C5:20:5E:03:E7:0A:60:5C:99:4C:5D:49:5A:B3:32
Certificate issuer: /CN=A91CFD43/serialNumber=FC688FB95CC5205E03E70A605C994C5D495AB332
Certificate serial: 03B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GiPuVzFIF4D5wpgXJlMXUlaszI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft
Manifest number: 03AC
Signing time: Wed 13 May 2026 00:50:20 +0000
Manifest this update: Wed 13 May 2026 00:50:19 +0000
Manifest next update: Wed 20 May 2026 00:50:19 +0000
Files and hashes: 1: _GiPuVzFIF4D5wpgXJlMXUlaszI.crl (hash: IXq4uNR8X3li09A88XEISKXAaFab/PfNfKm+Czo5NL8=)
2: 4E8DA224547711EF9EDD014DC4F9AE02.roa (hash: r5gelgjZp5B3j7+l6m368Vdh062KkVezcOMS+HcP7j0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.crl
rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GiPuVzFIF4D5wpgXJlMXUlaszI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:50:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 947 (0x3b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFD43, serialNumber=FC688FB95CC5205E03E70A605C994C5D495AB332
Validity
Not Before: May 13 00:50:19 2026 GMT
Not After : May 20 00:50:19 2026 GMT
Subject: CN=6a03cacc-6e66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9b:f4:56:e3:38:5f:24:c4:ae:a4:c0:9c:64:
5e:91:47:ae:01:5b:11:c6:e4:bb:04:a9:2e:c9:35:
c0:30:a7:4e:cb:77:e7:10:49:87:ad:67:ed:ac:8b:
c7:7c:d4:06:ec:7f:0b:d0:f2:50:14:b9:0d:91:86:
4a:ac:72:af:73:01:68:aa:a5:aa:e6:c6:26:f0:64:
8d:f5:ae:f8:95:a8:d7:a3:a8:08:78:b0:74:3b:10:
b1:ad:eb:b6:06:f4:bb:cb:ef:c6:88:ea:35:b6:d7:
a7:18:d3:41:cf:24:2d:83:1e:8f:98:c0:39:f2:d3:
5a:8b:89:76:92:0c:6d:0e:a1:f5:f6:0e:40:e4:b3:
78:47:96:08:72:19:e9:db:bb:cc:3c:2d:bb:dc:6f:
7a:b8:c1:ce:bf:b5:92:7a:10:c9:3c:f6:4f:a6:79:
68:af:87:0a:0e:56:32:21:b6:65:22:86:8a:23:01:
6d:a5:84:ad:0f:f2:87:e9:88:7a:c6:3a:3b:0a:f7:
76:07:db:37:4c:f1:d7:9d:24:55:36:10:4e:7f:66:
a7:3e:aa:fd:6f:70:cf:83:a3:58:dd:75:6e:a1:0a:
b3:b5:6f:9b:ca:c8:23:4c:c6:58:6d:97:3c:5f:de:
3f:d5:8b:d0:83:77:e6:6c:e5:45:b4:df:6d:eb:17:
07:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:64:9E:CB:9D:A9:1A:58:AE:27:63:86:AF:8B:60:4E:6F:C4:6A:48
X509v3 Authority Key Identifier:
keyid:FC:68:8F:B9:5C:C5:20:5E:03:E7:0A:60:5C:99:4C:5D:49:5A:B3:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GiPuVzFIF4D5wpgXJlMXUlaszI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ea:37:70:33:f4:38:99:6f:3c:a7:b9:a2:02:99:2c:40:f6:
bf:7c:04:68:c3:08:5d:1b:e2:7d:f6:f8:ae:bc:c2:91:ee:6d:
a7:d9:c5:b3:ec:aa:d6:44:41:60:d1:d2:ab:a5:b5:4f:2b:47:
c8:99:66:c8:d2:73:d3:7b:d2:77:0d:91:9e:7d:68:ce:9a:03:
75:23:70:b5:0a:4a:3c:1b:04:3a:95:79:a7:a0:bb:dd:58:39:
87:1c:50:a2:23:6d:fc:67:02:b3:12:41:15:3a:ab:83:d5:74:
ec:91:2b:b8:37:1e:b4:01:bc:98:5f:2c:5f:37:12:62:f2:c1:
bf:2f:b1:e6:14:33:d6:b6:e9:d9:9f:a1:03:ba:43:c7:9c:09:
3d:12:a7:a8:33:c0:3c:54:7e:25:6e:9e:40:f9:49:6b:94:dc:
40:41:21:9a:1c:8d:29:ff:c6:90:5f:20:bc:c8:d3:01:09:e4:
f1:e5:a0:7f:9a:70:f3:b4:ab:c0:c8:ab:b9:2a:89:4f:93:0c:
e4:8e:53:a3:5e:fd:4b:d3:47:11:b1:67:4a:21:f6:54:50:60:
23:69:37:50:f5:ba:12:75:6e:45:71:80:5b:67:99:2a:b2:59:
38:2f:9e:63:54:ee:af:15:cc:d1:28:df:9a:c3:ad:4d:a1:05:
c5:a1:4c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:01:39 2026 by rpki-client