
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft
File: g-S8t2O4ztA2UZDnKA8KajSzW1E.mft (raw, json)
Hash identifier: XbgccqzaXmZnANZLaOt/rGYH3ebpsixBidgW6TZDOX4=
Subject key identifier: B4:C5:1C:58:35:FB:F5:EB:B5:EB:95:6B:BF:AD:98:50:44:54:B0:4F
Authority key identifier: 83:E4:BC:B7:63:B8:CE:D0:36:51:90:E7:28:0F:0A:6A:34:B3:5B:51
Certificate issuer: /CN=A91D4A3A/serialNumber=83E4BCB763B8CED0365190E7280F0A6A34B35B51
Certificate serial: 019A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g-S8t2O4ztA2UZDnKA8KajSzW1E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft
Manifest number: 0192
Signing time: Wed 13 May 2026 04:28:08 +0000
Manifest this update: Wed 13 May 2026 04:28:07 +0000
Manifest next update: Wed 20 May 2026 04:28:07 +0000
Files and hashes: 1: g-S8t2O4ztA2UZDnKA8KajSzW1E.crl (hash: OBo6dAg5idK9ngmtbfvnD5/jVAXI+3/rhwLIxn7qUuQ=)
2: 8A5FC86AECB511EE8DC7B937C4F9AE02.roa (hash: wFV3hxZNMimHCra0GUvVj+qhSpRLii8tAhy60erdhQE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.crl
rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g-S8t2O4ztA2UZDnKA8KajSzW1E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 04:28:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 410 (0x19a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4A3A, serialNumber=83E4BCB763B8CED0365190E7280F0A6A34B35B51
Validity
Not Before: May 13 04:28:07 2026 GMT
Not After : May 20 04:28:07 2026 GMT
Subject: CN=6a03fdd8-f6fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:55:60:76:6c:e6:a5:f8:3f:1d:86:d3:2b:fe:
c2:a2:7d:db:08:10:ca:ba:f6:d0:56:0d:e3:bb:8f:
be:ef:a0:4f:32:82:d4:37:6b:50:ca:eb:7c:50:5a:
79:d6:d5:36:07:76:e3:d2:86:a2:46:38:c8:8f:29:
2a:b7:84:3f:c0:52:d7:e3:9e:5b:de:14:0d:fd:a6:
54:23:9d:ab:84:24:e0:df:89:55:c9:99:41:f8:20:
ca:7a:66:3b:aa:f8:00:be:5b:e1:c8:f1:bf:13:3d:
2c:96:e3:6b:3f:ea:2e:5d:df:79:17:68:6a:c1:9f:
a7:f7:23:4f:fa:f7:9d:64:77:82:1f:30:b2:83:71:
62:c9:04:08:e2:5c:fe:f1:c6:12:ae:05:74:27:c9:
e6:33:3b:6b:c4:ad:5a:a8:0a:ea:8e:3b:ea:79:d4:
aa:8e:49:29:d4:c0:61:43:17:82:d1:ee:1c:62:82:
49:c7:bd:3d:65:98:77:c4:2b:de:bc:aa:dc:14:f5:
57:37:a9:b6:e3:50:6e:8a:53:56:d7:44:07:8d:ec:
7c:7a:d1:45:36:e4:7a:4f:14:b1:4d:cc:6e:fa:f9:
61:f8:99:97:3a:72:ac:81:c7:44:db:9b:db:6f:d9:
2d:c2:16:77:b3:71:37:6f:a4:4c:89:ac:29:c7:a0:
1c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C5:1C:58:35:FB:F5:EB:B5:EB:95:6B:BF:AD:98:50:44:54:B0:4F
X509v3 Authority Key Identifier:
keyid:83:E4:BC:B7:63:B8:CE:D0:36:51:90:E7:28:0F:0A:6A:34:B3:5B:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g-S8t2O4ztA2UZDnKA8KajSzW1E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c4:55:87:fc:be:c3:8b:19:01:25:3c:36:df:49:2b:c9:eb:90:
b5:9e:a7:6c:b3:bd:63:06:c4:d4:99:eb:11:36:1a:65:e5:67:
f5:64:61:45:4c:1b:fb:64:ed:15:1c:49:cd:71:e4:b0:38:fa:
a4:91:56:a2:58:0b:7b:a7:d2:1d:4f:d9:81:c0:c4:e2:08:a1:
16:c9:7a:6a:a9:fb:21:b2:30:29:4c:72:d9:6f:59:c3:b2:9b:
8c:d8:69:f0:cf:32:aa:08:6b:ad:cb:39:77:3d:b0:b5:be:29:
40:fa:1b:8c:46:c1:ba:3b:6f:df:95:7a:b8:d8:9c:53:b2:fa:
ff:a0:5a:fb:fb:30:a1:dd:97:be:d4:bc:6a:dc:74:33:7f:7e:
0a:48:17:df:ff:89:7c:96:72:3d:1e:60:87:be:48:4b:11:cf:
e3:f3:78:eb:92:2c:a4:c8:66:aa:2c:22:7f:f2:70:16:29:40:
16:3a:57:f3:1a:50:29:fc:17:e9:27:e2:33:94:06:fe:84:8b:
b2:be:bb:ab:ca:90:03:e1:a0:0a:c1:c6:4b:9d:7f:7f:c9:aa:
56:ba:bb:66:19:2a:28:18:50:a9:f8:8f:18:86:b0:6d:e1:c1:
c3:c4:36:96:c2:1d:69:9a:f5:86:81:80:46:0d:e2:42:7e:b4:
58:43:55:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:10:45 2026 by rpki-client