
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.mft
File: guQjhs0B-IaA3TAN-_-ittLn5OY.mft (raw, json)
Hash identifier: ZBeNLim2cju/enIaIK/nACN6jNvbkv5sDJzuZbOy9eQ=
Subject key identifier: BA:C5:6A:CC:D8:E4:41:8E:ED:D3:4C:23:31:4B:D4:5D:A9:AF:05:ED
Authority key identifier: 82:E4:23:86:CD:01:F8:86:80:DD:30:0D:FB:FF:A2:B6:D2:E7:E4:E6
Certificate issuer: /CN=A919D530/serialNumber=82E42386CD01F88680DD300DFBFFA2B6D2E7E4E6
Certificate serial: 014E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/guQjhs0B-IaA3TAN-_-ittLn5OY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.mft
Manifest number: 0149
Signing time: Sun 05 Apr 2026 04:39:36 +0000
Manifest this update: Sun 05 Apr 2026 04:39:36 +0000
Manifest next update: Sun 12 Apr 2026 04:39:36 +0000
Files and hashes: 1: guQjhs0B-IaA3TAN-_-ittLn5OY.crl (hash: 1DDrOBaAHuIb5zpOMlzKW2tl2i8iskfCz0q7HOxSLaQ=)
2: A48F17F6406411EF96445E28C4F9AE02.roa (hash: D/cAvWNWTmPwXLmScRIEG1LBNudgkixYFznvw6pGA48=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.crl
rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/guQjhs0B-IaA3TAN-_-ittLn5OY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 04:39:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 334 (0x14e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D530, serialNumber=82E42386CD01F88680DD300DFBFFA2B6D2E7E4E6
Validity
Not Before: Apr 5 04:39:36 2026 GMT
Not After : Apr 12 04:39:36 2026 GMT
Subject: CN=69d1e788-1e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e1:f0:4f:f7:eb:7e:f6:41:03:1e:80:cb:06:
65:27:87:33:78:6f:af:d4:aa:37:64:63:94:2a:18:
79:0f:29:60:2a:2f:3f:b8:20:87:40:66:18:47:8b:
a6:74:35:93:1b:9a:49:83:00:b0:86:34:24:52:14:
d7:89:d3:ac:8b:94:72:30:53:6e:5d:86:91:29:2e:
53:57:ff:06:c0:67:f6:e1:5a:49:3a:2a:c8:b1:a3:
bd:72:54:12:7a:da:ee:90:57:98:9a:d9:70:da:db:
86:7c:07:bb:b5:11:71:19:32:23:01:f2:a8:d7:69:
50:85:9c:f3:c2:64:11:ba:fc:b7:d4:8d:3e:54:c9:
b1:91:2c:9a:97:62:9e:3b:2f:d2:57:e3:c2:ca:66:
89:59:1b:05:d7:51:f0:69:f4:56:e8:ac:fa:26:d3:
f2:7d:38:18:eb:96:11:e6:15:47:59:68:1a:6e:ec:
ce:87:e1:58:67:0e:55:3d:a6:0f:b3:69:24:c5:1f:
1b:7a:b4:c1:88:bd:2c:cf:01:be:c4:c6:62:a1:a5:
ae:80:82:58:d4:4a:0a:92:2d:98:a9:73:a3:b5:5b:
ea:9b:4f:13:b5:c6:7f:a3:4e:a8:14:a0:31:c9:81:
a2:32:d7:28:31:bd:4e:fc:9a:9a:67:5c:31:14:b2:
4c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C5:6A:CC:D8:E4:41:8E:ED:D3:4C:23:31:4B:D4:5D:A9:AF:05:ED
X509v3 Authority Key Identifier:
keyid:82:E4:23:86:CD:01:F8:86:80:DD:30:0D:FB:FF:A2:B6:D2:E7:E4:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/guQjhs0B-IaA3TAN-_-ittLn5OY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:73:2b:ed:90:14:59:02:51:e9:84:3c:fe:12:1f:22:41:77:
94:08:fb:89:ab:e9:45:38:6d:54:f3:56:60:56:61:9a:b6:33:
2c:67:db:e2:1f:72:dd:36:3c:0c:1b:d6:86:2c:a4:c1:f5:97:
50:79:de:d5:0a:ee:80:d9:9b:45:7a:5c:0b:ac:09:1e:53:99:
0a:eb:83:08:08:a6:89:9c:d2:49:47:0a:4d:ef:19:20:56:35:
a8:a5:a2:15:00:e9:70:39:b5:67:78:68:68:f3:1f:fa:99:19:
4a:81:8a:a4:52:42:5e:85:6f:b1:67:84:72:92:18:08:eb:f2:
f2:8c:07:fc:73:a7:ad:69:a5:cd:59:fd:45:66:47:41:8d:4c:
65:14:d9:1b:01:7e:51:64:25:95:3b:b3:c5:ad:a1:4f:5f:db:
a4:cf:01:7a:75:ca:81:a0:f5:c4:59:f7:3c:b7:3c:08:c9:b8:
67:36:9f:28:07:39:24:f9:8e:eb:be:1d:b1:e2:a3:41:24:a7:
a3:4f:cd:3f:d5:38:15:e4:37:6e:b4:b6:fd:af:f7:f8:be:b6:
f6:0a:7e:c4:e9:02:91:ad:3e:5e:87:8d:85:4c:10:73:4c:98:
38:47:f8:36:77:2a:11:46:6e:be:a2:cd:47:dd:0a:e1:c7:b3:
d1:f3:b2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:11:54 2026 by rpki-client