
$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft
File: -gRcYwK4c-iDZfqaAhSZtPPFhog.mft (raw, json)
Hash identifier: o7y4Diff8emiqtHwFY9/RCKx5ZTiNVY6mQ3khM4/ijY=
Subject key identifier: E9:E4:37:EA:48:98:4F:BA:D4:86:3D:10:21:03:88:D6:85:65:54:5D
Authority key identifier: FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88
Certificate issuer: /CN=A91853D3/serialNumber=FA045C6302B873E88365FA9A021499B4F3C58688
Certificate serial: 0626
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft
Manifest number: 0606
Signing time: Thu 04 Jun 2026 23:04:09 +0000
Manifest this update: Thu 04 Jun 2026 23:04:08 +0000
Manifest next update: Thu 11 Jun 2026 23:04:08 +0000
Files and hashes: 1: -gRcYwK4c-iDZfqaAhSZtPPFhog.crl (hash: 2jVuGqBwgjaYzShx2yJ6ovmIkJYV/Ku+Aj5z16Z9m0c=)
2: 36C4FAAAA9FC11EEBEF3E64AC4F9AE02.roa (hash: sXo/EfCy1P1hXgj+XVBKjDkQi4E974lDfTItj2KXQOc=)
3: 52A1A77A6ECF11F0B2785815C4F9AE02.roa (hash: 99SBr5WJIbWwpgEc6hwr9lvi4BLubRre2gvekG03kuo=)
4: 5C9E3A00E83111F0B570A08B79EE528E.roa (hash: ME2B8uuD8K+ZGXPv64QmrsnI4TiGRtKbpWpIh4aJJVc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.crl
rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 23:04:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1574 (0x626)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91853D3, serialNumber=FA045C6302B873E88365FA9A021499B4F3C58688
Validity
Not Before: Jun 4 23:04:08 2026 GMT
Not After : Jun 11 23:04:08 2026 GMT
Subject: CN=6a220469-439f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:12:19:19:6e:f7:dc:16:b7:ff:a7:9b:ca:1f:
15:bb:75:c1:e5:ef:50:86:5f:d8:d6:2d:07:db:6a:
bc:2c:ec:96:4d:cf:dd:9d:ff:ed:95:6f:61:1b:b1:
97:86:b1:e8:3d:0b:e7:79:b1:4f:4b:5a:35:4d:9d:
3e:6a:88:bc:11:71:ab:62:2c:c7:44:6c:33:2a:09:
e7:22:6a:d4:aa:2e:77:6d:83:4b:da:ad:dc:56:7e:
15:10:d1:ff:af:06:65:92:15:42:89:b3:5b:c8:cc:
db:ce:99:9f:15:57:b5:eb:18:34:a8:13:64:7c:55:
59:e2:f3:d9:9f:3f:54:81:9b:e8:75:69:31:38:d2:
81:b9:e1:22:a0:c2:f1:5d:9a:a3:e1:66:71:88:0c:
b7:19:d8:ec:37:fb:cc:74:a5:01:91:c2:48:b5:fb:
c7:5d:d5:8d:6c:58:51:70:73:01:67:1a:85:d2:d1:
e7:49:cd:01:58:5f:0f:57:1c:48:05:07:60:0d:4e:
1e:40:9b:56:70:17:f5:a9:8d:f3:1f:80:80:44:5f:
63:56:dd:fb:43:ed:3c:36:72:ad:96:00:72:6c:5c:
bc:62:67:ec:7c:6b:ec:2e:96:6c:4b:fd:51:f2:34:
b5:da:e4:7d:33:ab:ef:53:b6:fb:d8:96:10:7f:13:
c8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E4:37:EA:48:98:4F:BA:D4:86:3D:10:21:03:88:D6:85:65:54:5D
X509v3 Authority Key Identifier:
keyid:FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:cc:34:de:cd:17:6c:ad:79:20:b0:26:d4:98:d7:c3:d3:9f:
ed:d6:4e:85:5c:22:aa:8c:1e:65:35:ca:57:b3:43:a9:52:59:
03:a6:4f:28:bc:0e:c3:4f:00:b2:bb:d1:bd:f3:d4:b9:69:75:
3c:06:e2:37:a0:90:d8:bd:75:b8:5f:8b:0e:cd:9d:a3:ef:c1:
56:9f:e3:18:0a:b8:cf:74:e5:e0:ec:ec:15:9a:3b:75:eb:5f:
5c:c8:b0:00:40:93:58:56:2d:fb:67:d1:4c:d2:f5:7e:47:68:
2c:8a:4c:61:0a:60:fe:e0:ed:f6:d9:44:4f:e1:d0:21:89:67:
9f:90:b9:0e:f6:2a:33:0b:82:8a:66:3f:e6:bf:7b:67:20:61:
b0:97:ea:9c:2b:45:36:fe:8a:1d:69:9f:5a:8b:d8:51:24:9f:
00:90:33:8d:57:a7:47:b3:93:c2:8c:ed:3c:f7:e9:34:c2:87:
51:ea:09:ff:98:30:18:d5:39:80:32:d3:3a:8e:b9:ce:ea:d6:
76:fc:60:da:d0:07:32:10:3a:6c:ba:fb:ad:2f:4a:93:00:31:
d3:3c:0b:22:ac:fc:73:0a:79:df:56:04:26:16:dc:8f:b9:2f:
aa:e5:75:e7:e1:8e:4c:e3:5d:a9:af:41:75:98:dd:3a:69:47:
d0:95:72:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:09:27 2026 by rpki-client