
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.mft
File: gOknW25uvGrXWF12r7akALUULD8.mft (raw, json)
Hash identifier: YiWbX2RAijy7f5KcY59nxvNHlMyleeg46iJDYVqZleA=
Subject key identifier: E4:FA:3F:07:09:C0:10:82:D9:32:3B:CE:65:11:30:97:CD:5A:2B:E5
Authority key identifier: 80:E9:27:5B:6E:6E:BC:6A:D7:58:5D:76:AF:B6:A4:00:B5:14:2C:3F
Certificate issuer: /CN=A91D313B/serialNumber=80E9275B6E6EBC6AD7585D76AFB6A400B5142C3F
Certificate serial: 015B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gOknW25uvGrXWF12r7akALUULD8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.mft
Manifest number: 0156
Signing time: Mon 11 May 2026 05:10:37 +0000
Manifest this update: Mon 11 May 2026 05:10:37 +0000
Manifest next update: Mon 18 May 2026 05:10:37 +0000
Files and hashes: 1: gOknW25uvGrXWF12r7akALUULD8.crl (hash: Yd+D4BUJ1CQYBvh8FmoDaAWxge298SRoxZc5CF81Yu0=)
2: 3446813047DC11EFA05E932EC4F9AE02.roa (hash: K4s4bQ+AZEMbINRSOhh8kAqaJQUKtCHKATxaJcI+fSc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.crl
rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gOknW25uvGrXWF12r7akALUULD8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 05:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 347 (0x15b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D313B, serialNumber=80E9275B6E6EBC6AD7585D76AFB6A400B5142C3F
Validity
Not Before: May 11 05:10:37 2026 GMT
Not After : May 18 05:10:37 2026 GMT
Subject: CN=6a0164cd-5f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9e:10:56:df:eb:b3:86:db:59:c2:82:4b:29:
41:25:92:c8:93:b9:6f:b8:16:81:d4:19:52:eb:e9:
b0:9b:ed:bd:83:94:c8:a4:9a:d6:29:ed:d6:0c:b0:
e3:6c:6d:db:55:b8:65:51:9c:f4:14:da:20:9d:dc:
6f:a8:c1:9c:1f:a3:3b:ec:22:4f:af:53:54:c3:e5:
b2:28:a3:da:65:3e:0d:cc:c4:1a:3d:8e:2b:1d:1f:
4b:82:30:44:1b:52:8f:93:e0:9b:11:95:ab:5a:08:
83:6b:62:76:e2:71:70:70:99:2a:5d:20:80:08:70:
79:f9:cd:7a:74:d0:70:4b:87:fc:ee:96:36:57:e7:
af:de:8d:42:e1:55:77:cf:e1:25:c5:76:53:79:e2:
46:54:62:3c:7b:0d:51:71:33:ed:2e:5d:a9:8f:f0:
ff:7a:8b:98:07:d1:53:1a:29:36:ae:f5:de:b3:7d:
f6:ab:94:7e:f2:c9:98:f3:5a:37:f0:7b:ca:4d:3e:
2f:68:05:7a:a4:18:a8:88:1f:ea:18:2e:d7:86:bb:
36:65:f2:8e:60:20:b3:a8:34:74:8b:e4:89:5a:84:
36:b0:bd:32:fb:a0:13:c9:fa:6b:be:0d:04:9a:c1:
0e:a1:4c:57:89:73:55:3f:7e:98:d9:d5:fe:e3:80:
37:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:FA:3F:07:09:C0:10:82:D9:32:3B:CE:65:11:30:97:CD:5A:2B:E5
X509v3 Authority Key Identifier:
keyid:80:E9:27:5B:6E:6E:BC:6A:D7:58:5D:76:AF:B6:A4:00:B5:14:2C:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gOknW25uvGrXWF12r7akALUULD8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:94:3f:e4:44:b6:0c:b0:14:5a:49:5c:24:00:62:c2:f0:6d:
7a:b6:9d:1d:e4:13:a0:11:e7:da:22:bf:e2:5c:5b:38:33:c4:
3b:97:0f:36:0f:42:70:36:8f:32:94:37:69:0f:1d:b7:cb:c4:
98:43:07:e6:2e:be:60:d8:f8:4e:f1:ab:8e:ac:13:fb:62:a7:
e2:e4:35:81:c8:f5:06:f6:1a:73:94:33:0e:aa:43:47:81:e4:
84:61:05:87:75:68:17:d0:7e:0b:a7:af:99:1a:0a:5a:1b:bf:
02:f1:9e:33:63:3a:77:6f:ea:ad:22:7f:a4:f5:72:00:7b:b4:
86:b1:fe:ee:a1:7d:c2:35:78:23:c8:2d:06:9e:5e:86:2b:61:
d3:1f:b7:88:76:51:31:46:be:d6:48:31:35:90:87:8e:93:ef:
00:e6:08:01:ed:6a:f2:4a:c8:c1:bf:b3:38:60:a5:ba:65:4c:
06:3b:37:c4:ad:f8:5d:8b:72:d8:96:e2:d4:0b:61:c3:98:98:
9d:24:3a:49:67:7a:fc:dc:53:99:16:5d:60:7d:3c:42:2e:9f:
6a:c6:61:f9:71:d7:e7:0f:8c:74:ae:9e:d8:43:ac:b9:46:a2:
93:fa:30:a2:a4:ae:e0:07:63:0f:cb:51:34:5e:77:55:8f:26:
a6:4a:1c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:11:30 2026 by rpki-client