
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft
File: GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft (raw, json)
Hash identifier: mc31HfcSA/R7jWZtRfmc13vSen+6OoCt5ucyly0JQqY=
Subject key identifier: DB:14:C4:DB:C1:FC:2C:97:56:1B:9D:74:77:79:6E:F1:9B:6D:45:6B
Authority key identifier: 19:8C:43:64:CF:03:2C:73:0D:95:85:83:49:82:09:6D:50:A7:52:C9
Certificate issuer: /CN=A91DC931/serialNumber=198C4364CF032C730D9585834982096D50A752C9
Certificate serial: 019C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft
Manifest number: 018A
Signing time: Mon 11 May 2026 04:31:20 +0000
Manifest this update: Mon 11 May 2026 04:31:20 +0000
Manifest next update: Mon 18 May 2026 04:31:20 +0000
Files and hashes: 1: GYxDZM8DLHMNlYWDSYIJbVCnUsk.crl (hash: TVWRZpz7ggJd7JgjVb7drwjPluf/U51u+eAcJPRhhRc=)
2: 24EF88B8F56011EEACB7CB3CC4F9AE02.roa (hash: RetnXjaAIegseVpCIhrfkDQ+YhlmNRwZaGBLZrkdtzk=)
3: 2575F02EF56011EEACB7CB3CC4F9AE02.roa (hash: E/Bp+DLGRsM68zJIAcm7TyJqnOn+olB8QysLXRwz0bI=)
4: BBE9AEC0F55F11EEB6F1153CC4F9AE02.roa (hash: aYugIyHCZJwAmq9KTfLv5V2NclVJEThsuFyltYOyWPM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.crl
rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 04:31:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 412 (0x19c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC931, serialNumber=198C4364CF032C730D9585834982096D50A752C9
Validity
Not Before: May 11 04:31:20 2026 GMT
Not After : May 18 04:31:20 2026 GMT
Subject: CN=6a015b98-2bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:62:e4:fb:b6:29:85:0c:62:81:d0:79:10:47:
1d:ee:f9:cb:5d:06:85:14:d5:45:8f:d0:6e:ba:ac:
31:b2:6b:95:cf:50:fa:a3:a1:17:da:7a:52:d0:24:
83:d6:c8:75:eb:3c:67:75:35:44:83:1d:ef:ab:68:
c3:77:4c:c3:e4:c7:d6:d1:18:6a:2e:d2:48:05:3a:
6c:d8:b3:02:7c:c0:f7:e7:d3:79:9c:71:93:e6:82:
a9:b3:20:fe:e3:c2:2e:26:5f:41:a5:67:63:6d:5b:
b7:4e:52:f0:e1:13:34:c1:0f:d3:5d:37:83:83:29:
09:ba:a1:da:d5:9b:cb:03:95:c4:23:d4:e8:58:2e:
fb:e0:5e:7a:47:cb:df:08:28:07:1a:82:b8:21:36:
19:6f:51:06:02:0a:6a:b9:4f:48:61:73:65:bd:1a:
05:3f:93:05:2e:1d:7b:e1:52:bd:e6:a8:5e:db:fa:
1a:b3:9f:12:78:d7:a3:77:eb:67:12:22:47:e5:85:
e6:19:2e:69:6d:05:29:e7:5e:db:54:01:d4:b3:04:
6a:89:a0:f2:1d:61:d4:b5:01:ec:5e:31:dd:d2:7b:
07:44:56:2c:34:c4:0d:41:4e:ad:5a:78:8a:46:1d:
48:81:18:72:d5:26:e0:c1:b3:2f:9a:ae:03:bf:23:
8d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:14:C4:DB:C1:FC:2C:97:56:1B:9D:74:77:79:6E:F1:9B:6D:45:6B
X509v3 Authority Key Identifier:
keyid:19:8C:43:64:CF:03:2C:73:0D:95:85:83:49:82:09:6D:50:A7:52:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:f8:7a:a6:f9:8a:66:f3:48:90:90:de:0e:84:a6:86:a7:3c:
c7:29:4c:3f:97:0b:a0:b9:5c:c2:99:0a:ba:47:a3:5d:db:51:
db:39:85:cd:77:70:ce:76:36:85:3b:2e:f6:b0:a1:d8:3e:37:
a0:0b:c3:4b:12:1c:a8:4d:97:da:7e:96:46:b8:78:8c:ea:a4:
23:8c:1d:d8:d1:4e:13:67:21:dd:bb:6d:1b:b6:44:46:99:2d:
e1:ba:4c:af:18:5e:cd:a2:b3:6d:1f:49:12:62:e3:f7:bd:de:
9b:71:f6:66:9b:8a:d1:c1:a1:71:46:bb:7a:5b:e7:92:fe:48:
6f:3d:c3:ea:b8:c6:3f:d7:b4:52:4d:82:bc:a0:dd:e6:f4:1d:
39:34:73:52:ab:61:0b:8d:7b:76:d3:6f:bb:19:1e:6f:a2:21:
a8:97:fb:5e:be:3c:fb:c9:a6:3e:77:7e:4a:d6:4c:bd:35:ac:
6d:6b:2c:96:a9:08:2b:28:41:81:8a:31:68:54:92:e4:0d:ab:
79:dc:44:c1:a5:43:27:1d:34:e2:cf:45:59:33:fe:16:8a:3b:
df:44:b5:23:9b:0d:d6:9e:7d:23:60:92:12:bc:4a:12:fe:32:
4e:cb:bf:d7:4e:f4:e0:07:e8:b2:a8:4f:34:72:5a:35:27:60:
e5:fe:8d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:26:06 2026 by rpki-client