
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft
File: fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft (raw, json)
Hash identifier: eHeDnmDBJSpKmLvVz+11ihrSxNg0aoydwztHgNaLkCA=
Subject key identifier: D7:46:7A:B2:43:B0:C5:5D:60:C3:A1:C3:3B:A7:CF:52:65:F2:52:C6
Authority key identifier: 7C:63:B2:83:D9:B8:A0:6E:EA:D0:62:1B:82:3E:D0:F4:E6:99:DD:F4
Certificate issuer: /CN=A91E2AE5/serialNumber=7C63B283D9B8A06EEAD0621B823ED0F4E699DDF4
Certificate serial: 1587
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft
Manifest number: 1574
Signing time: Tue 12 May 2026 15:32:25 +0000
Manifest this update: Tue 12 May 2026 15:32:24 +0000
Manifest next update: Tue 19 May 2026 15:32:24 +0000
Files and hashes: 1: fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl (hash: AGdaq0yS0pkTRwNrpAzEIdGL7kGYVcxqc4KSUwhjzgQ=)
2: C163B1881A4711EDA547FE24C4F9AE02.roa (hash: u9MFRcdbqfRuHXnWgmZPMWeGTqzUW3xkFzMNAHNNk68=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl
rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:32:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5511 (0x1587)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2AE5, serialNumber=7C63B283D9B8A06EEAD0621B823ED0F4E699DDF4
Validity
Not Before: May 12 15:32:24 2026 GMT
Not After : May 19 15:32:24 2026 GMT
Subject: CN=6a034809-23c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:59:2d:a6:11:f1:c4:30:aa:5a:3b:6a:87:b0:
54:9a:0a:7c:7a:9b:7e:47:04:c7:84:f1:6d:96:9a:
94:a7:ed:e1:8a:76:c4:83:4a:cb:b5:e5:cc:db:e1:
25:bf:fe:73:56:61:db:d8:a6:ca:e0:22:e4:91:bf:
6a:c0:54:17:da:74:6a:a3:17:c7:28:fd:3e:57:ed:
c5:9b:69:18:18:ac:e1:e5:d3:47:cb:c1:55:4c:4d:
ca:ed:24:e5:d9:a0:73:51:6f:a4:91:79:76:3d:09:
9a:71:5f:41:79:6d:18:b6:db:fe:8c:ab:d7:82:d2:
7b:dd:88:f4:aa:a9:16:dd:4a:dc:e1:04:48:3c:79:
c2:72:28:16:0f:e8:e5:22:49:6b:74:22:fe:6c:26:
a2:ec:c0:2f:c7:84:a4:37:03:84:89:78:68:65:f5:
57:26:52:c2:61:fc:e0:55:7a:ce:94:21:51:54:cd:
ed:79:fa:a2:80:24:26:ef:dc:71:17:46:85:f3:d1:
0d:84:2b:58:30:b8:ea:35:8b:a4:35:8e:5f:8b:f9:
60:54:63:27:46:86:af:b0:22:e3:4e:9c:f3:bf:fe:
be:a4:0a:27:70:97:84:c7:17:e7:0d:48:6f:2b:85:
8a:c7:7a:bf:23:f4:5e:82:6b:b0:8e:af:6a:b4:6f:
74:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:46:7A:B2:43:B0:C5:5D:60:C3:A1:C3:3B:A7:CF:52:65:F2:52:C6
X509v3 Authority Key Identifier:
keyid:7C:63:B2:83:D9:B8:A0:6E:EA:D0:62:1B:82:3E:D0:F4:E6:99:DD:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:42:a5:ef:31:5f:a1:1e:96:fa:74:86:5b:78:e8:f5:d4:fa:
64:d5:ab:d5:5b:ae:bf:95:95:11:1b:80:f5:85:b0:44:62:28:
dd:5d:03:5a:0c:ec:30:ff:ca:f8:8d:db:05:29:3b:ed:f3:49:
8c:db:2f:1a:bd:fb:6b:2c:91:d3:6a:58:d1:63:1f:e2:46:c4:
05:b2:12:92:bc:6d:af:75:8b:e2:60:e5:dd:03:6e:4b:6c:ef:
73:0b:70:a9:50:f3:e8:74:9c:89:9e:01:a2:90:d1:ae:a5:b6:
af:a0:f4:70:89:b6:22:b2:95:51:73:52:f0:a9:81:df:0f:10:
54:4f:f1:7f:c2:64:df:38:6d:4f:1d:8f:45:65:4b:68:eb:07:
2a:ca:5b:8f:1b:1b:05:31:d1:ca:d6:d8:82:08:d4:b2:cd:14:
df:f9:00:5b:63:72:7e:18:5d:5a:12:76:50:4d:f1:a9:48:55:
11:38:fd:cb:02:64:12:e7:81:8d:46:b2:e7:11:2d:3e:49:fc:
bf:41:90:48:af:94:48:17:b8:ce:4e:5f:4e:65:c2:32:c7:42:
01:f8:cf:18:0c:a2:51:3d:61:cf:f9:c7:3d:76:01:11:49:48:
d1:0c:f8:ad:3a:f4:d2:34:1d:7f:95:20:22:bb:29:4d:6c:5b:
0e:4f:23:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:31:17 2026 by rpki-client