
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft
File: 4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft (raw, json)
Hash identifier: GCJYTUal81EJWT6KsMvT9GRC2vGx9whd58wFvXp3Ggw=
Subject key identifier: FD:70:1C:42:21:CC:09:74:C8:D5:90:A7:B9:52:76:6C:7F:08:1F:A8
Authority key identifier: E3:F1:8D:41:20:26:F3:1B:A4:43:EA:33:F5:67:06:FF:B2:F0:F1:62
Certificate issuer: /CN=A91FD8BE/serialNumber=E3F18D412026F31BA443EA33F56706FFB2F0F162
Certificate serial: 01B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft
Manifest number: 019B
Signing time: Mon 11 May 2026 04:24:29 +0000
Manifest this update: Mon 11 May 2026 04:24:28 +0000
Manifest next update: Mon 18 May 2026 04:24:28 +0000
Files and hashes: 1: 4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl (hash: pPXS/Buf5wXZu9YD599KhF3RNcGv5f9gcx82IoCBujc=)
2: DAEB24B0176111EFAB2AD122C4F9AE02.roa (hash: /p0IRebK1ecfFLpUcCA3qAEpMKVqatFf1hx/y6EBTmI=)
3: A475B3E000B511EF96C1B911C4F9AE02.roa (hash: XjHUkWL+sFmZoNR2qFeU0dNbQ2ZM/7PQGFCwI1qnX4A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl
rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 04:24:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 434 (0x1b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD8BE, serialNumber=E3F18D412026F31BA443EA33F56706FFB2F0F162
Validity
Not Before: May 11 04:24:28 2026 GMT
Not After : May 18 04:24:28 2026 GMT
Subject: CN=6a0159fd-30f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ed:0e:e9:8b:d1:e2:9a:91:2f:a7:69:ca:f6:
16:7e:9f:fb:ad:f2:30:75:36:a3:f5:0e:9b:5e:6c:
7b:19:de:3f:e0:bf:d5:b5:59:e7:a3:10:95:9b:f0:
d8:12:f0:77:45:e3:1b:45:3f:4b:81:11:d8:46:96:
3d:1d:86:f6:aa:5d:bd:3a:00:de:45:fb:b3:e9:96:
b9:09:62:75:11:5c:83:bd:77:ac:d2:a0:95:40:69:
ac:b3:59:e7:d5:73:25:71:b6:33:da:40:a2:14:70:
32:88:ef:24:31:c9:16:8a:78:d2:e9:63:2b:77:8e:
c1:b1:23:7d:2b:2f:7a:8e:71:00:e9:95:58:3f:96:
b2:23:b8:c2:d9:d4:77:ef:94:1d:a4:89:5c:0e:bd:
56:e7:0b:df:2e:4c:dd:40:b9:87:72:22:c1:41:a6:
c7:0d:93:ed:da:a5:63:41:fd:31:f7:a8:86:b9:16:
89:3e:8f:2e:7f:be:b2:2b:6a:f0:41:cf:78:3a:dd:
3e:4e:f4:fd:0d:71:71:f9:b2:fb:9c:e3:97:4d:31:
2c:1d:d8:e1:eb:b2:7f:97:f8:bc:28:41:ff:9d:3f:
71:22:c7:98:8c:3d:80:39:9e:93:53:92:64:1d:88:
bc:8b:96:e3:64:97:67:52:86:b3:d6:3c:1d:ee:32:
b9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:70:1C:42:21:CC:09:74:C8:D5:90:A7:B9:52:76:6C:7F:08:1F:A8
X509v3 Authority Key Identifier:
keyid:E3:F1:8D:41:20:26:F3:1B:A4:43:EA:33:F5:67:06:FF:B2:F0:F1:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:a9:8f:6f:cc:c8:a7:b6:ac:b1:3e:96:69:f9:ec:46:1c:77:
9f:5f:b1:67:0e:6f:e4:7c:8d:dc:0d:69:84:69:70:e3:9d:ac:
7a:f4:33:99:e4:ef:1b:cd:0b:a7:7e:86:a2:94:c2:56:5c:c3:
1f:a3:03:01:cc:88:fb:00:3f:b3:1d:1c:8b:fe:82:f2:7f:22:
db:c1:de:ed:05:4c:8d:5a:ce:5f:e0:e6:87:53:26:f4:b1:f1:
e9:ab:d2:93:64:8f:81:76:7a:a9:ae:1a:02:5b:2b:0f:83:38:
57:55:96:8a:fe:85:78:e7:8b:8a:1d:06:64:42:af:dc:1a:d4:
c0:b3:a1:2c:23:49:48:3e:02:dd:bc:0f:07:d1:1a:4d:60:cb:
20:e1:1b:f8:6d:00:d7:5f:e8:e3:ac:53:29:9a:4a:cc:33:2b:
df:4d:f2:14:59:19:fd:65:2c:96:cd:6a:25:c0:a9:c4:39:52:
11:2f:6d:0b:d3:39:0e:6b:7e:66:25:92:42:c5:dd:53:f6:e1:
d4:5f:3a:ea:36:90:2c:7e:4e:c6:26:84:28:f7:5a:98:9e:1f:
ce:b7:68:52:52:22:49:75:16:46:24:4f:a3:72:f4:de:4b:e6:
70:fc:72:b3:f1:2e:9e:55:41:ca:f9:c2:bb:2b:54:68:e1:85:
15:6b:26:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:29:28 2026 by rpki-client