
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft
File: GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft (raw, json)
Hash identifier: Gno18OYnZxwxhFMrijm+B2kn8kD5ukwSKFY6Zjubh6k=
Subject key identifier: 53:0B:42:37:64:6D:47:7E:E7:DB:B1:FD:41:E1:61:EB:79:4B:E1:FB
Authority key identifier: 19:8C:43:64:CF:03:2C:73:0D:95:85:83:49:82:09:6D:50:A7:52:C9
Certificate issuer: /CN=A91DC931/serialNumber=198C4364CF032C730D9585834982096D50A752C9
Certificate serial: 01C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft
Manifest number: 01B0
Signing time: Thu 23 Jul 2026 05:27:49 +0000
Manifest this update: Thu 23 Jul 2026 05:27:48 +0000
Manifest next update: Thu 30 Jul 2026 05:27:48 +0000
Files and hashes: 1: GYxDZM8DLHMNlYWDSYIJbVCnUsk.crl (hash: UCXMpfInqDwOrMbQuG6eLCTMMopzNT6eDWP4CPCF6R8=)
2: 24EF88B8F56011EEACB7CB3CC4F9AE02.roa (hash: DRXv7vPLVKQBIraGJ8NFDu0iOvB7l2HKmWgm7Z1q3AA=)
3: 2575F02EF56011EEACB7CB3CC4F9AE02.roa (hash: 88AqObIBBzuANbCRPz6OiBYJg8pYF1gdY5j9sq+Zgpo=)
4: BBE9AEC0F55F11EEB6F1153CC4F9AE02.roa (hash: L2ypY1/FMYp1ka3501+7Vp8ri3193NW4RTlWuErp4og=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.crl
rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:27:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 453 (0x1c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC931, serialNumber=198C4364CF032C730D9585834982096D50A752C9
Validity
Not Before: Jul 23 05:27:48 2026 GMT
Not After : Jul 30 05:27:48 2026 GMT
Subject: CN=6a61a655-8a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:68:e3:38:ff:42:48:51:f2:02:9a:51:2c:f9:
eb:19:87:01:12:2b:f8:2b:1d:63:57:71:ba:9e:d6:
e0:5c:50:cb:91:18:ea:72:6a:29:59:9a:19:10:95:
bb:14:d8:87:37:be:cc:e8:cd:d8:63:19:16:37:17:
75:6d:46:35:11:5e:36:df:70:cc:fd:7b:d4:0e:92:
b2:d1:6a:73:55:bd:49:4d:6c:57:39:63:49:9a:e7:
66:61:ab:4b:f9:a2:12:fe:2e:0a:10:ee:bf:f6:a3:
e8:63:53:d0:fd:0e:19:da:e8:1e:99:6e:f9:d6:4c:
ea:95:83:f8:87:85:5b:ee:5c:c2:62:05:ec:65:62:
4c:c4:c8:cd:47:4d:18:a6:b5:88:b7:fb:94:38:00:
85:cb:e4:4c:ea:2e:9b:49:7c:6f:6f:9c:1b:bd:fa:
b6:b7:b8:ed:bf:03:b9:db:be:b7:e3:01:b8:0c:f8:
0a:bf:f7:f8:1e:7e:e2:16:ed:b4:67:81:4c:5a:67:
11:f0:50:37:55:c9:89:1f:57:d8:cf:fb:99:8b:ca:
e6:40:13:02:20:39:35:8a:6a:89:d2:19:b6:d9:18:
59:6a:1e:e9:1e:e7:42:a6:bc:49:8e:5c:17:93:01:
32:6b:46:0b:75:e5:27:72:45:68:42:5b:de:87:06:
18:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:0B:42:37:64:6D:47:7E:E7:DB:B1:FD:41:E1:61:EB:79:4B:E1:FB
X509v3 Authority Key Identifier:
keyid:19:8C:43:64:CF:03:2C:73:0D:95:85:83:49:82:09:6D:50:A7:52:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:3f:7d:56:43:04:4a:3f:8d:8c:c7:8e:4e:63:b8:b1:b8:d6:
b0:b8:88:5f:bb:12:10:7a:2c:ad:69:0f:a3:78:30:38:e7:e2:
61:30:c9:09:fc:05:37:92:1e:7b:c7:14:84:a4:67:9f:2c:7c:
81:f2:59:5f:ae:25:6e:15:af:64:72:9f:8d:e4:2c:e6:76:6c:
8e:e0:ee:89:a5:f0:c7:10:4c:ad:82:d3:ed:bb:95:bb:be:99:
53:28:75:28:89:99:74:66:ee:a9:d8:00:03:ab:6d:17:9a:46:
10:9f:dd:8b:17:f3:67:48:19:cf:d3:c7:55:3c:f2:22:40:57:
e0:6c:6a:21:93:81:6b:00:e1:6b:5e:0f:26:ca:9b:82:d4:9c:
08:cd:d8:f6:19:10:78:20:a9:dc:6a:f7:2a:09:2d:d2:f3:0c:
ee:19:f9:06:9a:49:b4:35:81:5a:22:ef:9e:6f:26:a1:f4:e7:
b3:8d:28:44:fa:f0:b8:07:b9:52:fd:96:94:8f:5b:10:5b:d9:
0a:61:a0:98:1e:3b:80:51:ac:cf:0b:6b:b2:67:be:41:6a:b8:
61:15:d2:4a:05:36:4f:eb:02:34:46:4d:ec:eb:ab:df:ae:b9:
c2:af:10:77:63:f2:df:9e:b4:d8:33:db:82:b3:92:30:0d:8c:
a1:47:f6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:54:49 2026 by rpki-client