
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9CAE/FED5A2A8412E11ECABF7F566C4F9AE02/gYkRn4AeKAprTdViZT7xA2lh0Js.mft
File: gYkRn4AeKAprTdViZT7xA2lh0Js.mft (raw, json)
Hash identifier: IrW/QsWj6NutJHMei65tbWCdXeu4Fd53ujg7+2yWgno=
Subject key identifier: 22:D2:24:3B:C0:58:09:AB:B3:96:04:F1:C4:66:13:8F:17:6C:95:A2
Authority key identifier: 81:89:11:9F:80:1E:28:0A:6B:4D:D5:62:65:3E:F1:03:69:61:D0:9B
Certificate issuer: /CN=A91D9CAE/serialNumber=8189119F801E280A6B4DD562653EF1036961D09B
Certificate serial: 053B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYkRn4AeKAprTdViZT7xA2lh0Js.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9CAE/FED5A2A8412E11ECABF7F566C4F9AE02/gYkRn4AeKAprTdViZT7xA2lh0Js.mft
Manifest number: 0534
Signing time: Tue 12 May 2026 23:36:45 +0000
Manifest this update: Tue 12 May 2026 23:36:45 +0000
Manifest next update: Tue 19 May 2026 23:36:45 +0000
Files and hashes: 1: gYkRn4AeKAprTdViZT7xA2lh0Js.crl (hash: f7So7nELtyTo9PVRlkL5RaEhyP1zPu3nucs2o0USmV4=)
2: D30098F6413111ECB71E086AC4F9AE02.roa (hash: yrbFlXX+Q20ODJMbiysSXJ6ACMYRj3dlttqVySrHsBg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9CAE/FED5A2A8412E11ECABF7F566C4F9AE02/gYkRn4AeKAprTdViZT7xA2lh0Js.crl
rsync://rpki.apnic.net/member_repository/A91D9CAE/FED5A2A8412E11ECABF7F566C4F9AE02/gYkRn4AeKAprTdViZT7xA2lh0Js.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYkRn4AeKAprTdViZT7xA2lh0Js.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:36:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1339 (0x53b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9CAE, serialNumber=8189119F801E280A6B4DD562653EF1036961D09B
Validity
Not Before: May 12 23:36:45 2026 GMT
Not After : May 19 23:36:45 2026 GMT
Subject: CN=6a03b98d-0105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0c:0b:bf:77:d0:4c:dd:79:cb:de:11:1f:f9:
b5:03:c7:5a:f8:96:f4:b2:62:5c:c2:cc:bc:16:98:
be:a5:dd:7f:ef:a0:12:9b:e1:15:3c:9c:d0:0c:ab:
c2:d9:5e:fb:6f:03:30:77:1b:60:7b:6b:ee:7b:a7:
2f:3f:51:47:28:73:a4:f0:5a:89:c7:2a:32:5e:88:
b7:7a:11:70:5e:e3:cc:d0:6f:1f:8f:5f:f3:b2:62:
13:2e:bf:55:15:fd:11:0d:cc:45:70:a3:6b:94:bc:
de:37:9f:d6:93:ea:f3:1c:f1:e5:58:ca:c6:f4:45:
e0:a5:d0:4f:69:58:c7:02:44:4c:6d:1d:8d:22:22:
a1:ef:9b:47:ce:77:47:0d:de:17:74:da:fb:6c:6e:
d0:e8:3d:6d:bd:92:50:80:9a:02:85:0b:b8:bb:0f:
43:bb:b3:97:28:57:77:3b:15:6d:64:c4:8f:55:04:
5a:30:0b:b0:e1:a1:56:84:e4:8a:50:d2:f8:d8:b9:
26:7d:88:60:85:22:d0:3a:01:8c:4b:0d:48:8f:a3:
30:c5:72:9a:22:11:0b:39:26:42:d4:6d:2e:f2:ef:
df:ba:37:e1:0a:ba:79:4e:f0:44:a1:45:d4:eb:ea:
f9:ac:cd:62:41:c1:ac:a6:a1:53:6e:2e:e8:14:f6:
15:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D2:24:3B:C0:58:09:AB:B3:96:04:F1:C4:66:13:8F:17:6C:95:A2
X509v3 Authority Key Identifier:
keyid:81:89:11:9F:80:1E:28:0A:6B:4D:D5:62:65:3E:F1:03:69:61:D0:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9CAE/FED5A2A8412E11ECABF7F566C4F9AE02/gYkRn4AeKAprTdViZT7xA2lh0Js.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYkRn4AeKAprTdViZT7xA2lh0Js.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9CAE/FED5A2A8412E11ECABF7F566C4F9AE02/gYkRn4AeKAprTdViZT7xA2lh0Js.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:67:27:f4:fb:de:32:bd:60:9d:a6:f7:9c:24:75:1d:d8:58:
fb:9d:6a:67:47:53:a6:26:43:54:8d:e4:e7:c5:15:15:03:b4:
04:8e:ae:71:00:d8:e6:8e:73:8e:06:1b:25:53:8f:a4:20:e0:
7b:a8:d3:26:6d:8d:2f:ed:84:c5:24:2a:a8:c0:36:db:a2:01:
99:eb:a6:df:84:9e:47:af:19:72:12:bc:64:2b:05:de:b7:f7:
f0:4e:c6:7c:33:07:e1:92:c0:35:d1:1b:9e:1d:9b:23:f6:21:
28:63:77:80:b2:1e:f2:6d:10:ae:e7:e7:c8:99:c0:df:c0:79:
5f:b7:bd:15:a7:62:53:c6:2e:58:80:bb:cc:bd:be:18:4a:03:
86:70:0f:3f:d4:a8:ce:56:d7:60:51:58:82:9d:e0:11:51:0d:
05:2f:b1:54:78:24:9e:44:19:49:31:5a:5d:9a:3e:42:17:93:
69:04:57:3d:bd:0c:2d:76:36:db:e0:16:23:de:ab:3d:5a:9f:
2e:0f:a2:b2:ed:cc:2f:7f:b5:1d:bd:03:eb:95:93:0d:58:31:
f8:c9:6b:0d:bc:d0:42:f3:7a:3d:61:99:b8:49:eb:79:09:24:
4b:09:e1:0c:db:88:9f:4d:a3:61:56:cc:18:4f:e3:02:b0:9b:
71:fb:1b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:17:31 2026 by rpki-client