
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft
File: GSl33aoJW0B37g12I4Rj8bb0Cu4.mft (raw, json)
Hash identifier: /+V2x/xO6RnHrz6EdvejvRqjGBhXUBGOSCharYVJj+M=
Subject key identifier: 9A:B1:A3:64:A0:4B:0A:9F:05:F4:86:01:39:75:5F:28:9C:C4:56:C8
Authority key identifier: 19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE
Certificate issuer: /CN=A91F58C9/serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE
Certificate serial: 04AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft
Manifest number: 0492
Signing time: Thu 23 Jul 2026 00:51:46 +0000
Manifest this update: Thu 23 Jul 2026 00:51:45 +0000
Manifest next update: Thu 30 Jul 2026 00:51:45 +0000
Files and hashes: 1: GSl33aoJW0B37g12I4Rj8bb0Cu4.crl (hash: zXfCNT9tigURUhhqEc6MSEIMvHK8PRv35iIdY2BWaAQ=)
2: 9FC8CE38936E11EC92AF8421C4F9AE02.roa (hash: vwUFyzVHyN9gmRMfJMr4a16IV2f6KAmtlJCbMeEKz3c=)
3: AF6BB6C21F5A11F0BA7E6961C4F9AE02.roa (hash: oNvJ2OTvgFATATyEIxgWTVA+K6CHCRNnOEmYPy6CiuQ=)
4: AFDE92321F5A11F0BA7E6961C4F9AE02.roa (hash: 0WUhBcrZvRWIxNkRVA7Hsg9MfdhdUkLTVgCI3Sna5Fs=)
5: 18DBE7C624D711F18CA70BCEAB833773.roa (hash: /k5VdAsRv/RZU2O03cM57G3EDORpAmdEgBgLhS+cBqI=)
6: AEFCCA501F5A11F0BA7E6961C4F9AE02.roa (hash: y5ImLQShXTdYNOJzkUx9fF2JnCdfm6BVJ7HEJ2KJnqQ=)
7: 2B46EF64951211F0A6C6AF5AC4F9AE02.roa (hash: c7Rbo+oNT+V1uajSdDgXAF7Hq3CeSaeGd4C51hV9pYE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.crl
rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:51:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1199 (0x4af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F58C9, serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE
Validity
Not Before: Jul 23 00:51:45 2026 GMT
Not After : Jul 30 00:51:45 2026 GMT
Subject: CN=6a6165a2-0db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:71:4d:54:8c:16:f1:f7:6a:c8:79:5c:01:27:
91:e6:17:56:d1:8b:4d:66:51:66:3a:77:7a:41:b3:
84:3a:95:e9:94:1a:ff:39:ae:04:f6:4b:74:5c:3b:
3f:cb:a5:14:ae:de:fb:7b:c7:8b:cb:ce:f5:62:7f:
03:0e:2a:8a:41:16:43:9c:99:fd:ca:71:c6:60:9b:
a7:a0:f8:bf:01:e8:66:c5:c4:42:5b:c8:94:30:0d:
6b:dc:d8:0d:1b:b2:34:10:ba:0a:2e:7d:1b:f9:da:
e9:41:c1:f1:3e:eb:b4:ba:cf:08:16:cd:a9:3d:5d:
ac:5b:2b:a7:ae:df:10:5a:b0:9e:db:78:b3:02:c6:
14:91:bd:12:9d:c7:2e:61:a6:aa:b6:b2:c1:29:d7:
ef:93:10:b7:f0:ee:ce:54:38:95:ca:a3:d0:93:23:
b2:31:8c:43:a0:7c:d8:a9:23:6b:10:37:01:c7:e3:
ae:56:e7:69:5b:ea:b7:7b:ed:4c:35:68:66:4d:bd:
1f:f0:a4:bc:6d:68:a6:3a:ac:17:ef:70:38:0d:49:
bf:f8:e7:9a:d0:a9:9e:10:77:6a:3d:20:2c:14:36:
c0:28:01:66:ea:12:cf:4a:72:34:16:06:f9:23:7c:
68:1c:c6:d9:88:3c:0f:aa:68:26:f5:3a:79:07:d6:
e2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B1:A3:64:A0:4B:0A:9F:05:F4:86:01:39:75:5F:28:9C:C4:56:C8
X509v3 Authority Key Identifier:
keyid:19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:5a:c0:04:07:12:b4:04:92:cb:e7:49:e7:fa:3b:fc:3f:df:
2a:a9:2c:91:21:9b:1f:81:66:15:ee:75:a6:95:71:ae:19:51:
e2:53:5a:94:63:a0:db:60:3c:1e:4c:89:18:a6:fa:24:e0:4e:
70:54:01:58:5a:36:a2:93:e4:89:19:4e:b6:33:de:33:44:fb:
cf:99:1c:cb:e9:62:4c:0f:3c:85:b9:da:b2:9e:75:20:aa:df:
b6:ed:19:45:8d:16:45:b2:ae:6f:2b:bc:8e:64:d6:9f:2e:2b:
6e:69:fe:4d:db:88:7b:33:f3:20:65:5d:3e:e9:05:2e:53:cb:
8a:46:84:3e:85:8c:67:05:c2:e4:49:c0:da:0b:17:dc:4e:88:
08:bc:53:cb:22:9d:86:28:38:b5:18:b9:ab:35:bd:9a:70:36:
39:e6:8b:73:ea:a1:0b:5e:08:54:48:1a:67:57:c9:a5:26:73:
07:b9:3f:eb:bd:a3:d9:25:ca:db:1f:5b:9d:b5:c0:84:93:5a:
aa:2c:e2:57:0f:da:ff:56:75:6a:b8:9d:7d:c4:18:ca:c4:3b:
32:8c:12:b7:4a:db:5d:46:52:3c:e4:e0:ef:7b:ca:bb:78:41:
88:71:ab:b3:53:97:97:74:97:58:1d:0e:ec:51:c5:8d:ed:88:
08:7b:c6:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:42:33 2026 by rpki-client