
$ rpki-client -vvf rpki.apnic.net/member_repository/A91676D4/E17ECE2EE2E611EBB7596A75C4F9AE02/g1pslrIJJMfl2PEvBtud0j4lL10.mft
File: g1pslrIJJMfl2PEvBtud0j4lL10.mft (raw, json)
Hash identifier: QXuuoiHYtGELHSGQB8djikX153mmLgL3b/pEkiBKkw8=
Subject key identifier: B3:74:D9:06:C7:62:11:7B:41:7C:05:55:3C:C9:E0:3C:7D:E1:2C:C4
Authority key identifier: 83:5A:6C:96:B2:09:24:C7:E5:D8:F1:2F:06:DB:9D:D2:3E:25:2F:5D
Certificate issuer: /CN=A91676D4/serialNumber=835A6C96B20924C7E5D8F12F06DB9DD23E252F5D
Certificate serial: 065F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1pslrIJJMfl2PEvBtud0j4lL10.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91676D4/E17ECE2EE2E611EBB7596A75C4F9AE02/g1pslrIJJMfl2PEvBtud0j4lL10.mft
Manifest number: 0645
Signing time: Sun 31 May 2026 23:26:04 +0000
Manifest this update: Sun 31 May 2026 23:26:04 +0000
Manifest next update: Sun 07 Jun 2026 23:26:04 +0000
Files and hashes: 1: g1pslrIJJMfl2PEvBtud0j4lL10.crl (hash: VjXXfObv+FwfiVFYQFuSXJ5QSRYtTsRnXtOq03TesMY=)
2: 57FD28280C8311ECB6423427C4F9AE02.roa (hash: 6lefPigcpSW8Wi4b/6sq1pzIEJb3RagZMDaEaPM/PV8=)
3: BB8B992A1B6011F0AFD7AF11C4F9AE02.roa (hash: gCQsxZNTWJdexJQs/f6ie8h5A7xmqB+IkDiAih01sSU=)
4: AE6589F4A9A911F085996109C4F9AE02.roa (hash: andQ6MHVCbyOwqlHoxnSm6TfVpW/Aa3V+Uw8viRV/NA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91676D4/E17ECE2EE2E611EBB7596A75C4F9AE02/g1pslrIJJMfl2PEvBtud0j4lL10.crl
rsync://rpki.apnic.net/member_repository/A91676D4/E17ECE2EE2E611EBB7596A75C4F9AE02/g1pslrIJJMfl2PEvBtud0j4lL10.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1pslrIJJMfl2PEvBtud0j4lL10.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Jun 2026 23:26:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1631 (0x65f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91676D4, serialNumber=835A6C96B20924C7E5D8F12F06DB9DD23E252F5D
Validity
Not Before: May 31 23:26:04 2026 GMT
Not After : Jun 7 23:26:04 2026 GMT
Subject: CN=6a1cc38c-8078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d8:d4:58:a0:04:e5:a8:70:8b:b3:75:b4:93:
43:80:ce:11:a7:98:fc:83:38:29:21:10:ec:28:3b:
62:1f:03:91:1b:7d:e6:82:c2:c0:60:2f:bd:30:23:
01:af:26:f2:de:21:23:01:f1:4d:9b:e5:64:43:20:
cf:b8:e6:dc:cc:87:33:bd:4b:0c:16:21:46:c6:cf:
68:97:4d:ba:d8:4c:06:d6:58:96:89:a9:4b:74:69:
4b:1a:cb:00:8f:df:91:6b:04:56:7c:ff:bc:3d:93:
05:79:3a:5d:2b:85:23:12:55:bb:f8:14:05:32:f6:
c2:bc:3b:e1:ec:02:f2:df:11:2c:99:ef:10:fe:a1:
30:41:b5:dc:43:97:98:2c:3a:7e:f5:7e:db:65:b9:
2e:bf:8b:72:7e:dc:60:38:13:48:25:61:e1:10:ed:
33:1c:c9:01:bc:39:54:89:d8:29:ac:53:2b:d0:f8:
2c:2e:c2:42:60:21:38:86:f8:c6:6c:f5:06:9c:d1:
d2:00:47:4f:65:a4:33:6f:05:37:98:73:e7:d4:a0:
fb:8a:41:cb:a7:a4:6f:9b:bf:80:8a:58:48:82:7d:
07:37:c6:b2:ce:9e:83:d8:34:74:7e:72:52:1e:66:
c8:90:33:f8:22:26:1c:fe:eb:4e:6e:4e:98:eb:aa:
44:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:74:D9:06:C7:62:11:7B:41:7C:05:55:3C:C9:E0:3C:7D:E1:2C:C4
X509v3 Authority Key Identifier:
keyid:83:5A:6C:96:B2:09:24:C7:E5:D8:F1:2F:06:DB:9D:D2:3E:25:2F:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91676D4/E17ECE2EE2E611EBB7596A75C4F9AE02/g1pslrIJJMfl2PEvBtud0j4lL10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1pslrIJJMfl2PEvBtud0j4lL10.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91676D4/E17ECE2EE2E611EBB7596A75C4F9AE02/g1pslrIJJMfl2PEvBtud0j4lL10.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c1:14:0e:e6:48:cf:a8:2a:4b:7b:ec:53:31:b4:ef:4e:18:b4:
7b:cd:ef:b8:2b:a7:77:f4:e6:f5:80:b8:e5:18:e8:96:25:eb:
37:f8:bf:fa:43:8f:55:75:40:7e:12:66:28:81:cb:47:2a:f4:
bc:90:69:1d:44:39:b4:2e:18:c2:79:0d:a0:4a:c3:46:8b:7d:
21:43:f0:e0:c7:f7:96:6b:d1:5f:af:94:d5:28:5a:48:5e:b2:
9a:f5:45:e1:f6:e0:06:12:e8:36:78:94:c4:00:4b:93:0a:fd:
d5:59:13:66:ea:4a:a3:ae:06:b4:30:40:86:d9:07:78:81:ec:
b1:7e:db:8c:0c:ac:d4:f4:3b:35:2e:5e:cd:23:c9:7d:79:b1:
39:e5:68:2b:49:51:50:54:a5:85:07:fa:8e:c9:d2:5e:eb:64:
b3:97:de:2c:d5:ea:13:67:50:c8:9d:b1:b5:1e:b4:37:b5:c1:
a7:af:26:30:ef:ce:9b:47:be:44:63:fa:3d:e1:fb:8b:4e:2b:
a4:1d:47:20:99:90:cf:51:f4:39:e2:de:fe:d7:50:8a:af:af:
cd:f6:b4:54:01:07:98:fa:9f:f7:aa:a6:7a:24:fb:21:e7:5a:
e3:b0:11:11:12:86:81:7e:d8:fc:c8:20:ba:23:b8:92:e4:fa:
83:1e:10:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:58:26 2026 by rpki-client