
$ rpki-client -vvf rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft
File: gxf8eoKw7oZSDfGP_VcpURbaXfI.mft (raw, json)
Hash identifier: 3/V2X1EBts8Ok8lf+VO8isfyytW9VFvqGviCs5X8vDQ=
Subject key identifier: 79:1C:9A:5F:FA:D9:1A:DB:CB:5A:48:D2:FA:2C:F0:A4:86:07:D1:2A
Authority key identifier: 83:17:FC:7A:82:B0:EE:86:52:0D:F1:8F:FD:57:29:51:16:DA:5D:F2
Certificate issuer: /CN=A91338F0/serialNumber=8317FC7A82B0EE86520DF18FFD57295116DA5DF2
Certificate serial: 013B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxf8eoKw7oZSDfGP_VcpURbaXfI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft
Manifest number: 012A
Signing time: Thu 21 May 2026 05:46:07 +0000
Manifest this update: Thu 21 May 2026 05:46:07 +0000
Manifest next update: Thu 28 May 2026 05:46:07 +0000
Files and hashes: 1: gxf8eoKw7oZSDfGP_VcpURbaXfI.crl (hash: 1SOpIsf8QeNeq3C4u23aw9kFZedQ1cxDoRHxIgEi4Xk=)
2: 1A824A0E993511EF9BB0A677C4F9AE02.roa (hash: bdzoKNZt8/XWHS83YkqdwCHBasuCUkb2vXGrsks4FPo=)
3: 5B39EBD693B511EF8AEA6810C4F9AE02.roa (hash: tSNIVaYMK+oXyIkQHVMErHW5lgyCKOgm8t2Q8V04jJo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.crl
rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxf8eoKw7oZSDfGP_VcpURbaXfI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 05:46:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 315 (0x13b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91338F0, serialNumber=8317FC7A82B0EE86520DF18FFD57295116DA5DF2
Validity
Not Before: May 21 05:46:07 2026 GMT
Not After : May 28 05:46:07 2026 GMT
Subject: CN=6a0e9c1f-b0bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e9:22:d4:ee:0c:e4:18:4d:f1:93:df:94:32:
66:fb:2f:f0:78:4d:d5:01:e9:1a:b3:1b:08:cd:21:
8a:bc:c6:36:f1:71:89:0d:cf:b3:e0:fc:7f:72:2f:
67:c1:6b:6b:9b:4d:6b:d7:f6:f3:a8:2c:26:f0:b9:
fb:16:4d:17:49:9a:b0:34:06:2f:cb:9f:ff:25:65:
06:0d:24:f5:d9:b3:3c:10:fe:c7:dd:e2:70:7a:dc:
96:f4:0e:20:0e:eb:36:eb:26:47:65:b4:c2:98:5d:
60:9a:25:4b:ef:c7:94:04:d9:7e:5c:31:60:1b:37:
f4:5d:b1:f2:10:b1:92:20:43:0a:f3:58:fa:34:b2:
63:e7:97:57:57:2f:63:58:ea:18:50:99:5e:f0:ee:
67:31:b1:12:07:c9:03:a8:dd:e2:f8:af:7a:ac:d5:
13:b4:f6:2b:0b:9f:02:cf:32:c0:e1:94:57:8e:19:
a0:97:ac:6b:7d:63:84:8e:4a:5e:b3:23:de:7e:1f:
0d:b6:f3:14:06:48:4a:ec:ed:2b:3b:e7:4d:83:ce:
03:62:98:24:64:22:31:d9:56:74:f1:0c:7a:f8:48:
79:bd:14:64:6f:28:8b:73:44:a6:4a:64:5d:d3:fe:
51:e4:f9:77:5b:9c:b3:eb:07:aa:84:e7:a7:dd:1f:
96:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:1C:9A:5F:FA:D9:1A:DB:CB:5A:48:D2:FA:2C:F0:A4:86:07:D1:2A
X509v3 Authority Key Identifier:
keyid:83:17:FC:7A:82:B0:EE:86:52:0D:F1:8F:FD:57:29:51:16:DA:5D:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxf8eoKw7oZSDfGP_VcpURbaXfI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:5b:84:9c:6c:03:8a:bb:ad:41:f4:60:e8:79:7f:36:9c:1c:
8a:5f:bd:21:1e:6e:6f:f4:b7:e4:ef:ac:de:59:c8:be:fc:49:
c6:56:61:9c:a4:40:24:7e:3c:ba:d5:23:cd:60:64:ca:ee:bc:
4c:0d:21:11:37:7b:9b:3f:91:db:fa:0d:72:b0:0b:e7:d9:9c:
b9:93:1c:73:46:27:ea:fc:f7:1e:f0:a1:96:07:a3:87:1d:98:
53:25:6c:69:b9:95:47:e9:47:67:35:d6:d1:5b:22:df:70:82:
14:46:26:12:e7:5e:51:23:99:48:4d:d7:36:1d:5c:96:b5:d8:
59:dc:f9:02:23:2a:6a:f0:b7:b6:fa:9a:fa:13:3f:7f:f4:97:
5e:d2:55:4f:b7:17:03:de:ec:87:ef:22:1a:cc:26:9b:b0:73:
fb:7e:bc:b8:29:91:23:a7:b4:3c:93:04:12:89:c6:e5:8f:a1:
3a:11:2e:2a:a9:19:73:00:d0:1a:2a:62:66:5c:9f:17:f9:03:
82:ec:23:51:15:e7:66:e8:0f:a6:55:eb:52:88:42:3f:ea:38:
59:8c:ff:0a:39:4c:b2:82:07:32:6d:2e:96:54:33:96:77:25:
3a:1a:83:a3:25:cf:4c:5e:db:93:4b:72:df:66:99:24:63:16:
88:db:28:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:15:37 2026 by rpki-client