
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft
File: G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft (raw, json)
Hash identifier: wb5HICXVK3OF80n5veTCT/Z2Gr7hv/B9DkPvQ5FZ+9s=
Subject key identifier: 8D:D2:31:A2:D9:05:2F:5E:01:BF:C4:15:74:7D:A0:DE:7E:4C:51:31
Authority key identifier: 1B:A5:AC:FE:4E:CE:99:EA:BB:6E:54:14:65:32:FD:13:73:5C:EF:40
Certificate issuer: /CN=A91DF352/serialNumber=1BA5ACFE4ECE99EABB6E54146532FD13735CEF40
Certificate serial: E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6Ws_k7Omeq7blQUZTL9E3Nc70A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft
Manifest number: DE
Signing time: Thu 23 Jul 2026 08:18:59 +0000
Manifest this update: Thu 23 Jul 2026 08:18:58 +0000
Manifest next update: Thu 30 Jul 2026 08:18:58 +0000
Files and hashes: 1: G6Ws_k7Omeq7blQUZTL9E3Nc70A.crl (hash: d9z7iiEEALDVg7k5si9fW0B/RmM0GVlSwKskPwrV9uE=)
2: BA3FE218315611F0951A037DC4F9AE02.roa (hash: 3K/uHX9v7w+FtMri9upNrCYZ3azhB0XpxwpN3xcyhfs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.crl
rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6Ws_k7Omeq7blQUZTL9E3Nc70A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:18:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 225 (0xe1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF352, serialNumber=1BA5ACFE4ECE99EABB6E54146532FD13735CEF40
Validity
Not Before: Jul 23 08:18:58 2026 GMT
Not After : Jul 30 08:18:58 2026 GMT
Subject: CN=6a61ce73-c7dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0b:7a:b1:03:b0:23:d2:fc:8d:6e:95:da:b3:
6c:66:7f:12:69:f0:27:59:16:8d:88:e2:8f:e7:e8:
fe:c0:e4:93:9b:68:33:d3:44:a7:a8:38:ba:1d:b6:
b8:46:48:13:58:a3:b8:a2:9d:00:d3:5b:8d:5a:89:
ef:53:cd:d2:b3:58:fe:c9:e6:4b:27:a0:ee:78:b1:
a8:3a:af:b1:b2:de:26:92:13:17:a3:b3:bc:7c:97:
5a:86:33:3b:d4:bc:a7:f1:09:c1:d6:50:2e:f0:9b:
7e:c9:7b:22:a4:ff:bd:43:2d:02:f7:36:cb:0a:31:
ae:4e:d1:8b:f1:9b:db:8d:7e:ca:f4:10:4a:99:d4:
ee:69:07:47:cd:0c:75:a8:82:d9:a8:67:91:82:03:
e9:9a:ea:53:b5:1a:4e:34:5f:77:01:9a:bb:aa:f8:
11:c0:2f:8c:7f:7e:fc:82:b4:18:f2:24:7f:64:01:
f7:14:63:6e:1d:b0:7b:99:f9:f9:1e:b6:07:67:3b:
e6:7b:47:32:13:ce:4e:ba:5c:9a:e2:b8:6b:0b:d9:
2d:7b:58:b7:59:70:cf:9f:a2:9b:15:c5:13:2a:06:
75:1a:6e:7a:29:2f:99:90:9f:8c:9d:2a:0b:5a:4c:
5a:a0:d8:8e:17:9a:2d:25:00:62:a5:1e:70:7b:78:
3a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D2:31:A2:D9:05:2F:5E:01:BF:C4:15:74:7D:A0:DE:7E:4C:51:31
X509v3 Authority Key Identifier:
keyid:1B:A5:AC:FE:4E:CE:99:EA:BB:6E:54:14:65:32:FD:13:73:5C:EF:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6Ws_k7Omeq7blQUZTL9E3Nc70A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:e3:28:d5:73:f8:6e:41:34:04:86:a8:8e:18:4d:87:da:64:
13:74:8e:41:6f:0a:ce:6f:69:b0:59:95:51:c8:39:19:24:0e:
b1:e0:96:2e:f0:b3:20:32:9e:59:83:23:e4:cd:0f:fe:30:fa:
19:4c:06:d5:58:17:22:94:2a:0c:db:b3:1e:b8:99:d6:ce:fe:
3c:48:6c:bd:96:69:21:54:8a:60:8b:a1:6a:0a:45:58:7c:50:
62:99:c2:37:3f:a3:c5:9c:15:11:d3:60:d4:e9:97:1d:8a:b6:
90:86:67:54:a0:a3:0c:0d:d5:89:a1:aa:4c:fa:cb:3b:dd:61:
63:53:d0:2c:03:8d:cc:e3:cd:05:d9:a8:ca:1f:3d:e6:4f:34:
b6:c6:4c:7e:40:ff:f0:d8:55:ee:b0:49:1f:4c:aa:b1:c8:60:
43:12:d5:2e:c9:22:fe:fa:b3:be:9d:98:9c:dd:8f:8d:a5:a4:
25:dd:04:24:19:f1:90:5b:e1:00:69:73:bb:05:24:6a:57:c0:
a4:2a:a4:b2:16:ba:80:68:4d:da:61:93:9f:99:c6:43:d9:ec:
d6:3f:84:cd:88:13:50:32:4f:fd:42:ac:45:72:16:64:d3:c3:
7b:7a:d0:c1:e2:0f:80:a4:66:30:1f:8f:ca:23:a4:49:44:26:
55:b1:d6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:50:25 2026 by rpki-client