
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft
File: G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft (raw, json)
Hash identifier: DPoJ1V0l9vMuirubJVm/qp9e2cxU4NyoaPvgrtk+Pk8=
Subject key identifier: 61:A0:75:B4:4C:54:5C:FA:FE:DF:6C:D9:2F:E9:35:CF:3D:36:B6:EB
Authority key identifier: 1B:A5:AC:FE:4E:CE:99:EA:BB:6E:54:14:65:32:FD:13:73:5C:EF:40
Certificate issuer: /CN=A91DF352/serialNumber=1BA5ACFE4ECE99EABB6E54146532FD13735CEF40
Certificate serial: AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6Ws_k7Omeq7blQUZTL9E3Nc70A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft
Manifest number: A8
Signing time: Sun 05 Apr 2026 06:35:34 +0000
Manifest this update: Sun 05 Apr 2026 06:35:33 +0000
Manifest next update: Sun 12 Apr 2026 06:35:33 +0000
Files and hashes: 1: G6Ws_k7Omeq7blQUZTL9E3Nc70A.crl (hash: xJofoTbQ1c1ySjWC1OVyYnj1OReWGnHg6EEqo00klWQ=)
2: BA3FE218315611F0951A037DC4F9AE02.roa (hash: 3K/uHX9v7w+FtMri9upNrCYZ3azhB0XpxwpN3xcyhfs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.crl
rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6Ws_k7Omeq7blQUZTL9E3Nc70A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:35:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171 (0xab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF352, serialNumber=1BA5ACFE4ECE99EABB6E54146532FD13735CEF40
Validity
Not Before: Apr 5 06:35:33 2026 GMT
Not After : Apr 12 06:35:33 2026 GMT
Subject: CN=69d202b6-3fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b1:8f:c0:9a:dd:1c:f9:79:99:2d:f9:45:a5:
a3:24:0b:2d:fe:6d:9a:0c:64:2e:d7:d8:bf:60:75:
65:ca:2b:65:36:8b:a0:e5:7d:49:f8:3b:c8:c3:a0:
32:68:56:12:20:0e:71:96:61:77:22:30:d6:11:02:
be:3e:af:a4:2b:25:1f:67:c5:ef:65:9d:f1:da:e5:
93:6e:0e:28:24:c0:6d:09:d0:ac:c9:70:62:f3:5b:
71:29:96:eb:4a:bf:dc:6a:2a:4d:e6:bd:c8:cd:35:
19:64:ba:15:f3:6e:ee:71:e2:93:bd:fc:22:40:55:
e0:35:3a:66:8a:ea:72:6d:25:94:b3:12:18:37:71:
c2:f5:1b:8a:72:33:bb:32:4b:15:f5:09:57:f2:05:
63:03:d5:42:42:66:e9:9a:ed:12:de:20:78:3d:cb:
11:95:be:cf:29:25:6f:c5:79:7f:72:93:bd:d3:4e:
e9:5b:9c:d5:97:f6:9e:68:49:26:92:7b:1d:44:8b:
32:c1:23:a2:fd:4b:38:cf:85:89:69:3e:f4:76:be:
b6:3f:51:1b:cd:fe:60:52:b3:99:8f:d7:10:95:e9:
a2:6f:bc:4f:e2:8e:3c:56:89:4d:d4:5e:61:53:0f:
4d:57:a1:e2:c1:fc:b0:63:a6:17:ef:3e:ad:16:d1:
3c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A0:75:B4:4C:54:5C:FA:FE:DF:6C:D9:2F:E9:35:CF:3D:36:B6:EB
X509v3 Authority Key Identifier:
keyid:1B:A5:AC:FE:4E:CE:99:EA:BB:6E:54:14:65:32:FD:13:73:5C:EF:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6Ws_k7Omeq7blQUZTL9E3Nc70A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:d3:39:a2:47:81:56:f9:17:b5:e8:18:1b:7f:cf:d4:5f:ec:
98:37:67:41:db:61:1d:22:25:96:28:c4:26:51:c4:90:9b:e2:
98:5f:46:28:6f:bc:8f:2f:30:b5:53:a1:7d:da:a9:63:a4:1a:
38:50:25:c8:fa:96:30:18:f7:3b:a8:92:63:c2:09:0a:4a:39:
83:5b:58:4c:90:10:9c:85:6e:40:95:e1:c6:1e:6c:16:0c:10:
75:4e:ef:d8:75:49:3e:67:6f:0d:62:0d:2a:04:3b:e6:fb:14:
75:c9:ac:d0:15:08:24:87:e7:f3:e5:b6:a1:dc:d8:21:8b:1f:
8e:6f:5a:b2:77:0c:c7:d6:9f:f7:df:49:d3:34:47:35:6b:14:
3e:2f:90:2f:13:9d:07:bf:ee:9f:20:f3:3a:4c:8a:7a:c3:93:
1d:3d:f1:51:a2:88:65:3c:5e:a4:25:96:1b:26:fb:bb:db:4e:
bf:19:af:68:c7:bd:d2:66:22:7e:3a:04:f7:11:87:21:26:b2:
54:87:04:38:21:62:a1:04:82:2d:07:3e:91:c2:0d:dc:78:af:
78:a8:b2:0b:5d:fd:00:bf:ec:a3:50:14:39:f3:45:41:16:34:
e2:67:45:e0:54:0f:ad:28:e8:0d:f7:70:0d:31:01:47:85:5b:
8b:23:4d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:43:53 2026 by rpki-client