
$ rpki-client -vvf rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.mft
File: grMfodzgxL8vZjl3hqbAjkfGuP4.mft (raw, json)
Hash identifier: WCwiYnoB9/qo9dSsKnE53HDIFk1gdsjCKRbqyS7mQrI=
Subject key identifier: 94:93:E6:6A:0D:2E:AB:FA:5A:88:0D:2D:1E:84:BF:9B:03:14:BE:31
Authority key identifier: 82:B3:1F:A1:DC:E0:C4:BF:2F:66:39:77:86:A6:C0:8E:47:C6:B8:FE
Certificate issuer: /CN=A91294F7/serialNumber=82B31FA1DCE0C4BF2F66397786A6C08E47C6B8FE
Certificate serial: 05F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grMfodzgxL8vZjl3hqbAjkfGuP4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.mft
Manifest number: 05EE
Signing time: Mon 22 Jun 2026 23:01:01 +0000
Manifest this update: Mon 22 Jun 2026 23:01:00 +0000
Manifest next update: Mon 29 Jun 2026 23:01:00 +0000
Files and hashes: 1: grMfodzgxL8vZjl3hqbAjkfGuP4.crl (hash: vmnDMumGFxqZrqogw1MIB8O+CRY/nol5JzXRAoKXi0c=)
2: F7307C08FFCA11EB93268E6DC4F9AE02.roa (hash: T+BAMElZYCx7kGTbdasdTT95R9yeWdnx6k5VpkPYG2I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.crl
rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grMfodzgxL8vZjl3hqbAjkfGuP4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1525 (0x5f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91294F7, serialNumber=82B31FA1DCE0C4BF2F66397786A6C08E47C6B8FE
Validity
Not Before: Jun 22 23:01:00 2026 GMT
Not After : Jun 29 23:01:00 2026 GMT
Subject: CN=6a39bead-d037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d7:1f:af:d7:5b:ad:3c:ff:75:86:89:7f:ae:
90:f1:af:12:fa:aa:d3:d1:80:58:c3:8a:c7:68:5e:
b4:c7:e7:0d:1b:30:47:52:15:eb:f7:4a:fc:f9:42:
97:a4:cb:df:08:b4:9b:b1:b0:d9:80:a7:63:03:fd:
d1:36:90:8a:bc:c9:8e:b6:23:63:e8:7c:30:b4:62:
ba:8e:0f:06:81:d3:27:44:4e:ed:c2:87:8c:a8:65:
f6:d5:41:ac:17:b1:40:be:91:b0:32:14:fd:4d:4c:
0c:5e:5f:b8:59:20:e1:4e:90:9a:c1:ec:04:67:46:
f9:dc:4a:e8:b9:8d:ea:77:61:3f:8c:2c:db:1d:91:
c1:3e:6c:a4:90:4e:79:16:80:76:41:7a:65:ed:ed:
c1:c8:a1:fc:71:be:a4:04:15:17:34:2d:62:e5:3c:
dd:c0:a4:1b:7d:c1:c2:47:42:94:91:68:79:48:b4:
5d:e8:e8:c5:76:08:39:46:ba:ee:fe:9e:a4:b6:26:
99:c5:bb:84:5b:f9:bf:a1:4d:12:b2:a5:c6:8c:57:
ac:b5:bc:04:98:1a:32:10:90:fe:09:bf:4d:fe:3e:
89:39:75:56:46:ef:f0:5e:af:4f:e2:16:1e:2b:6a:
90:fc:74:24:3d:f6:9a:56:5b:95:b6:49:bd:c2:b0:
fb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:93:E6:6A:0D:2E:AB:FA:5A:88:0D:2D:1E:84:BF:9B:03:14:BE:31
X509v3 Authority Key Identifier:
keyid:82:B3:1F:A1:DC:E0:C4:BF:2F:66:39:77:86:A6:C0:8E:47:C6:B8:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grMfodzgxL8vZjl3hqbAjkfGuP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:98:b1:4f:74:ac:97:ac:96:75:0f:8e:de:67:9e:7d:81:ee:
37:d8:af:37:0d:6b:e6:4a:5e:fa:16:84:fb:7a:e1:8b:ce:b1:
19:5a:b4:72:46:f0:32:93:97:30:32:c3:6e:81:d4:87:4d:40:
f7:c1:ce:c8:3d:ae:c5:47:2a:85:9b:1a:c6:32:f2:77:e9:4a:
e1:01:2a:fb:09:d7:c4:f2:b0:41:5e:88:87:f5:0f:81:68:da:
7e:09:86:6c:86:91:dc:e1:80:75:79:81:a9:5e:57:51:3e:28:
e7:01:82:53:f7:75:1c:a5:80:8f:16:b3:30:7c:d1:4f:65:97:
a2:1b:df:e1:5a:0f:f9:aa:7e:cc:bb:cb:6c:ac:d9:86:9b:fd:
8f:37:a9:c8:22:52:d1:19:20:6f:d7:c3:fc:f7:3f:74:27:76:
6c:d1:ad:01:38:d5:e9:8b:3a:a2:01:86:61:83:a7:a3:d1:00:
96:86:e1:29:ba:df:28:74:f9:57:e1:86:0a:a8:a0:09:03:ac:
ea:b4:17:58:44:2a:85:f4:4e:49:3c:f2:61:f9:27:0d:fd:1c:
17:35:57:fc:20:4b:0f:ba:52:82:9a:12:45:da:92:80:dd:f7:
0a:6c:1a:58:6b:fd:1e:61:3b:7d:02:a1:8c:bf:21:04:ad:18:
bb:cc:e5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:18:28 2026 by rpki-client