
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft
File: 509GTECGWe0lidtmTOjvamxgDEc.mft (raw, json)
Hash identifier: K95CiCHSMv/p1vu6DEqDFBueKX96KFRNCf7XZE+Hr2c=
Subject key identifier: 5E:4F:77:A6:F4:FE:34:C5:D5:89:F4:80:52:80:AA:B7:2A:2E:41:4F
Authority key identifier: E7:4F:46:4C:40:86:59:ED:25:89:DB:66:4C:E8:EF:6A:6C:60:0C:47
Certificate issuer: /CN=A91A06F2/serialNumber=E74F464C408659ED2589DB664CE8EF6A6C600C47
Certificate serial: 0BCF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft
Manifest number: 0BC0
Signing time: Sat 04 Apr 2026 18:47:52 +0000
Manifest this update: Sat 04 Apr 2026 18:47:51 +0000
Manifest next update: Sat 11 Apr 2026 18:47:51 +0000
Files and hashes: 1: 509GTECGWe0lidtmTOjvamxgDEc.crl (hash: /UeBDX4HMbLQtjF0kYyf+GzYoA1I+IkDx/i44otFXEc=)
2: 3BFE8CEC3F4911EAA91D9A7FC4F9AE02.roa (hash: yHiEBDvlcyXKE4TpKn114IGYxQdtuGdLDYmaaMzfwkk=)
3: 8B37D2C40D2511EFA2E4D985C4F9AE02.roa (hash: +7Lf6kxVJqd3BCYCOdcg2bt/oX1o6nqQAFJ3/VpyaiE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.crl
rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:47:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3023 (0xbcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A06F2, serialNumber=E74F464C408659ED2589DB664CE8EF6A6C600C47
Validity
Not Before: Apr 4 18:47:51 2026 GMT
Not After : Apr 11 18:47:51 2026 GMT
Subject: CN=69d15cd8-d7a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:64:db:91:9c:a6:ad:52:45:f4:96:de:8b:4a:
ef:7d:58:ad:57:5f:5a:7d:b6:42:44:98:ee:6f:7d:
87:30:c7:66:e1:69:60:47:04:7c:15:a4:cf:0d:63:
9d:9e:c0:45:d8:31:61:e1:93:72:37:37:39:d3:9f:
9b:74:bd:14:53:e4:34:b5:80:9a:77:7c:01:e1:a5:
ce:75:e9:7c:d3:fc:2f:3d:ce:ca:9c:89:e8:17:eb:
24:20:8e:9b:3c:cf:a6:78:4d:d7:61:22:44:d5:e7:
2e:fb:4a:9a:45:83:8f:23:8f:a2:a6:76:48:b8:ae:
08:0d:3f:56:a2:3a:57:1b:5a:b2:3b:76:75:83:05:
63:9f:6d:22:af:61:85:8c:92:56:0b:e6:aa:2f:49:
c5:f3:c6:5c:70:95:36:f0:56:fa:8a:71:68:01:14:
80:a8:18:aa:22:f5:07:26:3f:3f:96:d8:58:83:2c:
95:74:65:a2:24:c2:03:4c:a9:22:76:10:db:9d:fc:
ec:28:b3:64:6f:a0:1f:75:03:d9:4b:2d:b1:20:75:
07:fc:8a:69:4e:ad:67:bf:80:a3:21:73:2f:49:bc:
90:b8:94:87:ef:85:8f:fa:da:a0:d8:c9:1f:b5:05:
d5:6d:43:cc:4d:11:ff:93:be:b5:bb:17:28:47:0e:
dc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:4F:77:A6:F4:FE:34:C5:D5:89:F4:80:52:80:AA:B7:2A:2E:41:4F
X509v3 Authority Key Identifier:
keyid:E7:4F:46:4C:40:86:59:ED:25:89:DB:66:4C:E8:EF:6A:6C:60:0C:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:12:91:d1:07:7d:e6:3f:4a:95:3c:d0:1a:5e:f5:8f:d3:9e:
65:4a:77:ef:25:d5:2a:67:48:f8:15:87:ad:49:e0:83:b6:e9:
21:67:a8:59:d6:a6:70:e1:bd:4b:52:12:c9:77:43:86:93:ac:
8a:b0:e4:ed:c5:d3:5d:9c:e8:f2:1e:da:6a:c9:e8:4d:fc:36:
0a:db:3b:c3:40:23:69:82:1c:51:d5:af:09:fc:05:3c:b6:8a:
8d:df:ad:1f:f8:a8:c4:55:e2:35:c4:a4:4d:e8:5e:56:38:43:
f0:e2:b3:bc:29:fb:7f:ec:fc:7c:ba:a4:e0:da:54:b4:99:12:
97:3e:40:1b:34:56:d4:97:5b:6d:be:0a:2a:76:72:85:9c:8d:
d9:b3:92:ad:08:97:5a:dd:e0:17:b6:95:70:04:ba:7f:c9:ff:
61:15:e3:c0:cf:98:9f:44:54:71:af:23:95:16:35:ce:c0:d6:
61:ce:6f:67:c3:16:81:83:6f:0b:b6:29:58:63:3a:f0:53:30:
80:d3:3b:a6:14:a3:8c:ac:78:48:c1:ec:7b:6d:ef:78:38:d2:
70:5c:84:65:c4:ab:5f:8a:cb:7d:ee:53:ce:85:64:b1:e8:06:
6f:78:23:8d:a1:3c:27:43:db:a4:03:24:8f:1d:27:b8:e8:bd:
85:ed:b7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:50 2026 by rpki-client