
$ rpki-client -vvf rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft
File: gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft (raw, json)
Hash identifier: x3M0yjn6aS3hjPN8uov5KDgBS8yfrDbTOAcC97TCbas=
Subject key identifier: 53:1E:B2:34:37:58:8A:82:7F:49:1A:5F:57:96:B8:1D:FC:21:A3:67
Authority key identifier: 81:8B:B9:03:32:71:7F:93:57:30:DA:F1:47:08:FF:C2:F6:05:F0:5F
Certificate issuer: /CN=A912CD21/serialNumber=818BB90332717F935730DAF14708FFC2F605F05F
Certificate serial: E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYu5AzJxf5NXMNrxRwj_wvYF8F8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft
Manifest number: D6
Signing time: Thu 21 May 2026 06:52:36 +0000
Manifest this update: Thu 21 May 2026 06:52:35 +0000
Manifest next update: Thu 28 May 2026 06:52:35 +0000
Files and hashes: 1: gYu5AzJxf5NXMNrxRwj_wvYF8F8.crl (hash: g5J+xk/kxGU4dBFOQAcqcJXXy+d8JxBNzPItSRneM/Y=)
2: 2A2F9262201811F09DB3CC16C4F9AE02.roa (hash: SPeu1aYoWIkZ55wzSsA2uT5JSXB8/d3J/ThweSnmrRw=)
3: 15039C1E202F11F0AFD72717C4F9AE02.roa (hash: N7637sJ4ur4GTyF+Kgrvo5G1u42FtOcjBttkvkfEsuY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.crl
rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYu5AzJxf5NXMNrxRwj_wvYF8F8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 06:52:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 226 (0xe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CD21, serialNumber=818BB90332717F935730DAF14708FFC2F605F05F
Validity
Not Before: May 21 06:52:35 2026 GMT
Not After : May 28 06:52:35 2026 GMT
Subject: CN=6a0eabb3-3159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:70:96:62:ac:86:15:5f:92:80:ff:5d:4e:5b:
0c:8e:3c:46:a2:f3:88:13:88:d3:93:12:7d:ce:ec:
eb:6d:44:c3:4e:b0:33:ac:3e:ad:a4:57:3e:8f:73:
35:02:44:b5:29:de:e3:7d:dc:b2:a2:69:55:b8:83:
2a:5c:67:14:4c:63:84:c6:02:8c:ba:95:b0:c0:16:
f2:1f:60:fb:23:78:f1:5f:53:3a:59:e0:56:c2:15:
72:69:c4:8e:b2:aa:12:f4:fb:84:95:6b:ee:69:2c:
5f:a0:f1:8e:b2:6f:cd:9f:ce:3d:c1:dd:a1:07:90:
59:58:ad:cd:e1:14:aa:b9:c9:2c:11:37:30:47:31:
98:ab:35:c2:17:42:86:8a:e4:0b:98:74:bb:ff:4d:
ca:65:53:fa:e2:f0:47:15:ed:80:23:ac:45:ed:79:
c1:96:4e:ac:6e:73:fe:17:cd:61:93:e8:58:9d:7f:
b5:f3:b6:34:2a:3c:41:5c:24:2c:ee:31:8c:a2:16:
47:9a:6f:89:42:af:3c:c3:ea:4c:37:7c:16:48:18:
38:6f:98:0f:ec:b9:9b:2b:e6:52:c7:b0:06:fa:2b:
c2:fd:a6:c7:8c:27:cc:62:73:4d:45:b0:5c:55:0e:
8d:1b:ef:f5:f8:d0:da:d0:77:c0:71:96:32:21:0c:
7f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1E:B2:34:37:58:8A:82:7F:49:1A:5F:57:96:B8:1D:FC:21:A3:67
X509v3 Authority Key Identifier:
keyid:81:8B:B9:03:32:71:7F:93:57:30:DA:F1:47:08:FF:C2:F6:05:F0:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYu5AzJxf5NXMNrxRwj_wvYF8F8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:08:a7:0e:c0:30:62:84:7d:f6:dd:66:68:3a:f0:2f:dc:a9:
be:31:14:1c:5a:1e:40:67:8a:a6:b7:61:da:81:a8:ef:5a:4e:
1b:4f:5f:ac:ba:18:43:c3:5e:de:e3:3f:59:a1:82:84:50:13:
27:fa:73:f8:0a:66:b4:2a:ba:6a:c0:c1:80:b7:5f:66:53:2f:
2d:21:e6:45:6d:43:98:01:3d:b3:04:55:6a:c3:3a:cf:2c:5c:
84:69:95:6e:6c:53:09:8f:88:1c:66:7b:7f:03:4d:34:13:4e:
de:1a:f0:1e:de:67:db:21:bf:7a:a5:1a:df:69:87:ef:f4:82:
e4:5a:a5:8b:e1:5e:58:6e:31:2b:3b:81:1d:5b:a5:f8:8b:ef:
8b:43:e4:45:2a:fb:19:1f:cb:aa:8c:09:be:69:8e:43:84:1f:
d4:b6:80:91:f7:53:e8:05:99:f5:c9:6a:3a:4f:d1:ab:2a:73:
60:5d:25:00:84:3c:15:7e:ef:56:c4:b8:05:8e:72:d0:48:61:
16:ce:96:4e:c8:13:10:05:ea:c7:f4:eb:62:5c:44:78:27:e6:
3d:86:c5:0e:98:ca:ee:06:ef:3d:1f:1b:98:c2:52:b5:38:9e:
ad:c6:0d:f3:25:34:8c:86:f9:45:42:87:9a:da:05:6f:20:d7:
f5:74:81:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 14:12:59 2026 by rpki-client