
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft
File: GNdIiJK3LFSvZOLdI4thnIm3LWg.mft (raw, json)
Hash identifier: IIgE+eq2zXo2iLAotd4751g8SV1+z6bMqImkoyuV87o=
Subject key identifier: 70:18:62:83:E7:91:AB:61:5A:97:C9:DA:8F:81:23:33:57:27:4E:1F
Authority key identifier: 18:D7:48:88:92:B7:2C:54:AF:64:E2:DD:23:8B:61:9C:89:B7:2D:68
Certificate issuer: /CN=A91E17BF/serialNumber=18D7488892B72C54AF64E2DD238B619C89B72D68
Certificate serial: 034B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft
Manifest number: 0342
Signing time: Wed 13 May 2026 01:09:08 +0000
Manifest this update: Wed 13 May 2026 01:09:08 +0000
Manifest next update: Wed 20 May 2026 01:09:08 +0000
Files and hashes: 1: GNdIiJK3LFSvZOLdI4thnIm3LWg.crl (hash: vUUJO5wGHnFLa/HSBho6EVZBiXukPIa+OXccPRDQb5E=)
2: 83D6FAEE077511EDBD013D37C4F9AE02.roa (hash: XduLMfOTlu5b31dWGwP8GqlgYSkiZV7iaoNBfx7mKds=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.crl
rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:09:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 843 (0x34b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E17BF, serialNumber=18D7488892B72C54AF64E2DD238B619C89B72D68
Validity
Not Before: May 13 01:09:08 2026 GMT
Not After : May 20 01:09:08 2026 GMT
Subject: CN=6a03cf34-e059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:48:92:20:a0:99:ab:34:5b:6e:5a:24:c8:a6:
54:c8:4c:73:f0:ce:a9:4b:97:22:b1:6a:d8:64:cc:
83:89:40:e5:c8:e9:7a:60:e2:4f:42:13:e3:42:d3:
c4:5f:87:f4:0d:27:a8:12:39:4b:1f:ae:72:0b:e7:
56:f1:da:1f:74:1b:7a:4a:6d:04:f5:f3:12:02:d7:
d6:55:5f:5c:07:9b:17:c1:3a:2f:53:b6:08:41:77:
85:e9:3c:2d:fb:0b:2f:c6:1d:cf:af:25:14:db:d4:
b1:40:a8:c2:38:65:a4:7c:89:e5:f5:81:3b:bf:8d:
d9:4a:af:a2:eb:22:ef:83:66:3d:ee:3a:68:8e:d7:
4d:27:ce:e0:3c:d4:2b:55:2a:ed:bc:44:e9:3b:42:
58:1e:0d:09:01:51:90:fd:71:51:ef:97:13:1d:02:
bd:68:d4:98:30:94:c9:b6:84:97:d9:2b:78:bf:11:
86:cf:bf:69:3f:27:ba:e9:5b:e1:3b:16:df:95:8a:
93:80:e9:d0:00:47:59:36:ee:91:2f:33:d2:91:5e:
de:06:98:a9:6f:86:92:ee:21:12:3a:71:e7:61:2b:
c0:e7:50:99:81:2e:96:f8:b8:aa:91:32:aa:8a:1c:
c7:71:d7:67:79:1d:b0:1e:fa:d2:4f:4a:79:aa:52:
35:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:18:62:83:E7:91:AB:61:5A:97:C9:DA:8F:81:23:33:57:27:4E:1F
X509v3 Authority Key Identifier:
keyid:18:D7:48:88:92:B7:2C:54:AF:64:E2:DD:23:8B:61:9C:89:B7:2D:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:63:00:6f:19:dd:6e:c8:2b:9c:23:d9:b5:6c:52:ce:1d:b6:
b4:40:85:14:bb:ae:5b:11:ba:a7:46:11:9d:3f:4f:9a:25:d7:
3b:06:d2:99:2a:9b:6f:42:c0:7b:3a:cf:6b:4f:9b:7a:d5:0d:
c8:46:43:f7:4b:64:ea:10:30:24:11:1d:a9:7f:8d:75:8b:f8:
37:1b:8d:d1:b2:f6:86:03:04:45:5f:a0:f7:ff:cb:68:59:06:
d8:98:5e:d2:2e:f3:a2:3b:f5:0b:57:33:48:a7:2b:09:25:69:
88:ca:a9:e4:8f:02:1d:4d:0b:eb:49:22:99:ff:c3:ac:15:0b:
5c:4d:bc:b3:13:f1:16:a6:f3:a3:24:1d:20:6e:ba:34:43:dc:
2d:f1:b4:e6:91:a7:83:72:78:86:be:e8:40:d5:fa:a8:7e:ba:
09:a0:0d:58:05:68:ae:8f:4d:e9:4c:2b:d9:36:4b:58:96:e4:
04:0f:ab:4d:2c:bf:92:e2:76:87:ca:f4:c8:1b:4e:c4:2c:c4:
37:c0:6a:d1:c8:eb:29:80:03:3e:2f:c3:21:69:db:75:de:bf:
38:0d:40:93:9a:cb:92:f7:40:c0:9f:da:25:88:e2:ee:0d:40:
78:8a:0f:b9:70:d0:e6:d7:06:70:d0:38:fe:e4:6c:8e:d7:25:
b0:c1:d6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:40:34 2026 by rpki-client