
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft
File: GSl33aoJW0B37g12I4Rj8bb0Cu4.mft (raw, json)
Hash identifier: 9wWEUZeKXWXMAuVEAZjpMgOizCEwAtdBnazQRvyBf7w=
Subject key identifier: 13:31:79:F4:08:4E:C6:B2:19:50:F0:E4:9C:73:D5:0B:78:C1:8E:F0
Authority key identifier: 19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE
Certificate issuer: /CN=A91F58C9/serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE
Certificate serial: 048A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft
Manifest number: 046D
Signing time: Mon 11 May 2026 00:12:09 +0000
Manifest this update: Mon 11 May 2026 00:12:09 +0000
Manifest next update: Mon 18 May 2026 00:12:09 +0000
Files and hashes: 1: GSl33aoJW0B37g12I4Rj8bb0Cu4.crl (hash: lcXFdNhpUrGzIzZwENb0Hi3epxOM09rZ7Yb8lgX2PXc=)
2: 9FC8CE38936E11EC92AF8421C4F9AE02.roa (hash: vwUFyzVHyN9gmRMfJMr4a16IV2f6KAmtlJCbMeEKz3c=)
3: 2B46EF64951211F0A6C6AF5AC4F9AE02.roa (hash: c7Rbo+oNT+V1uajSdDgXAF7Hq3CeSaeGd4C51hV9pYE=)
4: AF6BB6C21F5A11F0BA7E6961C4F9AE02.roa (hash: oNvJ2OTvgFATATyEIxgWTVA+K6CHCRNnOEmYPy6CiuQ=)
5: AEFCCA501F5A11F0BA7E6961C4F9AE02.roa (hash: y5ImLQShXTdYNOJzkUx9fF2JnCdfm6BVJ7HEJ2KJnqQ=)
6: 18DBE7C624D711F18CA70BCEAB833773.roa (hash: /k5VdAsRv/RZU2O03cM57G3EDORpAmdEgBgLhS+cBqI=)
7: AFDE92321F5A11F0BA7E6961C4F9AE02.roa (hash: 0WUhBcrZvRWIxNkRVA7Hsg9MfdhdUkLTVgCI3Sna5Fs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.crl
rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 00:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1162 (0x48a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F58C9, serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE
Validity
Not Before: May 11 00:12:09 2026 GMT
Not After : May 18 00:12:09 2026 GMT
Subject: CN=6a011ed9-51cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a1:db:3b:3e:fd:ae:d7:95:e1:47:ce:46:48:
ab:a4:11:e2:30:02:d7:46:31:90:1e:80:9a:79:45:
48:ea:35:33:47:1e:e0:68:2c:28:a9:f7:22:94:64:
1f:ee:eb:fb:20:2a:ce:f1:59:7c:40:41:81:5f:8e:
74:f7:5b:77:dc:08:32:2e:9f:7b:3f:90:f0:1c:08:
15:99:de:dc:70:79:14:02:9d:23:24:39:b4:47:de:
63:28:db:4a:b2:ff:a8:ea:f6:2d:70:c9:85:f9:3b:
d3:2b:b0:e4:af:94:b2:bf:b6:5b:09:2f:b6:de:52:
af:da:9e:6b:98:93:3c:6d:59:4e:bf:ad:22:49:a9:
7e:88:be:bf:03:95:d9:10:8c:9d:fd:5c:52:11:97:
31:75:14:d4:a0:74:17:17:d6:62:fa:89:13:eb:76:
c8:0a:59:4c:48:7c:d4:81:0a:9a:78:98:c1:7c:6f:
48:f9:a9:7f:1f:af:b1:cb:6e:f7:48:4b:0b:18:78:
03:77:3d:2a:2e:0a:55:4a:7e:16:d4:b7:ac:ff:4c:
b4:b8:48:05:6a:13:8f:fd:a2:6d:0d:39:50:d8:dd:
bf:6a:81:24:7a:d7:2f:40:36:ff:8a:30:56:af:72:
f6:1e:35:ce:92:c0:aa:e8:1b:6c:4e:83:90:c2:9f:
f6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:31:79:F4:08:4E:C6:B2:19:50:F0:E4:9C:73:D5:0B:78:C1:8E:F0
X509v3 Authority Key Identifier:
keyid:19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:6d:95:59:21:0a:b4:fc:a8:f0:42:75:df:e8:e2:7f:bc:e2:
8e:9e:61:61:19:13:12:51:fb:7a:71:f9:33:a8:4a:ae:f6:37:
7e:43:a4:e3:cc:c3:eb:b5:df:ce:0d:7a:7e:c6:60:c5:ad:b1:
8d:b6:5f:e1:df:87:b6:14:56:a5:aa:b8:f5:cc:36:6b:9e:3d:
71:5d:d1:fa:df:6d:fb:86:19:61:82:6b:db:68:1b:47:0c:c4:
95:63:2e:9d:fc:cd:fa:a4:de:c3:48:b4:cb:51:f5:c9:26:91:
03:cc:8f:0e:c0:1b:e7:29:18:6d:a5:bd:4f:72:23:95:b3:02:
7e:a6:da:7c:6d:b1:3e:af:cd:12:b8:6d:aa:39:88:66:f8:51:
7c:19:7b:d5:9f:23:bc:8d:6f:aa:20:ae:e8:93:7c:39:20:22:
dd:85:2c:a2:28:6c:bf:ff:bb:95:c4:8a:c2:71:93:45:dd:10:
1c:cf:01:64:5f:b6:e8:9b:61:ec:99:96:ac:79:04:f1:57:63:
b1:21:55:84:e6:41:56:b7:43:d2:17:40:b1:87:1d:05:8e:50:
2d:ba:83:97:e3:35:d0:bc:d1:19:c2:c8:7b:95:a9:da:ae:f4:
75:c7:36:bc:6c:62:1f:68:88:e8:91:a5:8f:aa:65:77:0d:65:
04:56:2f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:57:28 2026 by rpki-client