
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft
File: GlXbYnoqLksmZy7g4ddRL4ZBToM.mft (raw, json)
Hash identifier: m0XYYBbaq+1V8nSJQILrC51TyjxHT7mDwcQwUtq9iKY=
Subject key identifier: CF:7F:CE:FA:E4:9B:5F:95:3A:92:2A:98:18:01:F5:A2:B9:93:2A:CF
Authority key identifier: 1A:55:DB:62:7A:2A:2E:4B:26:67:2E:E0:E1:D7:51:2F:86:41:4E:83
Certificate issuer: /CN=A91DA898/serialNumber=1A55DB627A2A2E4B26672EE0E1D7512F86414E83
Certificate serial: 3575
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GlXbYnoqLksmZy7g4ddRL4ZBToM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft
Manifest number: 3559
Signing time: Tue 12 May 2026 14:37:08 +0000
Manifest this update: Tue 12 May 2026 14:37:07 +0000
Manifest next update: Tue 19 May 2026 14:37:07 +0000
Files and hashes: 1: GlXbYnoqLksmZy7g4ddRL4ZBToM.crl (hash: P+n43E6+gUMFwUIPDhBhGahaeN+sl7svCp026Q1bCik=)
2: AB9A0D320D6011EDA50DFA25C4F9AE02.roa (hash: tJ8Z7JmN38ewagG4q09uJOSNlnpYV6I5xzkgsPx/uek=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.crl
rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GlXbYnoqLksmZy7g4ddRL4ZBToM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:37:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13685 (0x3575)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA898, serialNumber=1A55DB627A2A2E4B26672EE0E1D7512F86414E83
Validity
Not Before: May 12 14:37:07 2026 GMT
Not After : May 19 14:37:07 2026 GMT
Subject: CN=6a033b14-c8fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:89:a8:fc:6c:34:7a:cc:ba:4e:91:e0:53:48:
62:31:b2:b2:5d:ab:12:a1:81:4a:33:4f:bd:8a:35:
e2:32:84:36:ea:aa:77:60:78:9b:11:8e:af:3b:f9:
69:ba:7e:d7:97:e6:8a:9b:e0:20:1e:34:fc:bb:21:
1c:2b:e1:d4:84:14:9e:1f:80:c4:bf:be:f1:d5:fd:
b0:96:5c:57:15:d6:0d:c3:92:40:ba:68:87:db:43:
10:15:51:6d:1e:30:70:e8:ee:79:c8:9d:cf:40:cb:
11:f0:97:d9:6c:df:cb:3b:90:9d:81:c7:0f:23:b7:
72:dc:e6:94:b6:a0:f6:25:07:8b:c1:83:4f:6c:e8:
02:6a:61:83:b2:6c:33:00:c5:af:c6:12:fd:00:57:
50:6f:fe:c4:fd:68:a0:40:09:a0:bd:b8:08:e8:53:
5b:cd:b1:b0:9a:52:c7:52:c9:7b:43:ec:b7:52:2f:
e2:57:a1:0e:71:6a:d4:53:e1:63:9a:ea:f7:f2:97:
17:cc:f2:76:12:2d:7e:5e:c8:85:fb:d6:df:7d:dc:
ac:c8:60:10:91:8d:34:30:03:4d:ea:69:14:e0:ba:
7d:07:c0:4f:74:5e:7f:89:41:26:58:40:04:c5:73:
a5:53:d4:35:b8:20:83:2a:82:9d:33:97:34:fa:bf:
2e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:7F:CE:FA:E4:9B:5F:95:3A:92:2A:98:18:01:F5:A2:B9:93:2A:CF
X509v3 Authority Key Identifier:
keyid:1A:55:DB:62:7A:2A:2E:4B:26:67:2E:E0:E1:D7:51:2F:86:41:4E:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GlXbYnoqLksmZy7g4ddRL4ZBToM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:d4:f0:72:86:ac:bd:6d:4f:00:dc:1c:96:f6:f8:3d:39:db:
4d:03:58:38:05:6b:d9:8c:f5:e2:2d:1c:79:0c:1d:79:5f:2e:
45:57:dc:43:8b:04:1c:ba:99:f8:38:74:94:af:55:9c:eb:30:
a9:88:be:bf:04:c4:3b:b7:cd:eb:1b:15:e5:cf:8b:26:3a:be:
ec:52:65:ef:b2:aa:66:9e:8c:3e:80:04:b9:42:77:7d:72:d7:
aa:f2:70:7a:66:3e:d7:9b:1a:8c:98:2c:85:8e:b3:10:ee:a2:
71:0d:4a:87:3d:4a:9e:fc:b4:a4:e4:1b:47:c3:2e:12:85:30:
b4:90:b3:ec:e5:68:8d:65:eb:6c:ed:2b:bf:00:da:11:da:ab:
5b:bb:d0:6a:91:0e:f7:4a:c3:4e:3a:fd:d8:3c:8e:2d:76:62:
a0:f9:15:c9:63:66:af:93:dc:92:e5:52:a7:f5:35:de:2c:d6:
14:92:f0:b2:4a:55:50:39:4c:15:ac:1d:96:7e:38:15:26:0f:
24:fa:d9:c1:ad:ce:cf:3e:fa:17:33:7a:6e:62:d4:90:07:57:
90:46:28:06:01:12:32:a9:3d:5d:b1:6a:a6:f1:59:2c:71:24:
eb:12:4b:c5:3e:10:24:26:61:2f:2f:09:5b:ce:99:45:c3:e5:
6b:ce:74:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:07:29 2026 by rpki-client