
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft
File: G7spe8goFmqkl9N8cmW_tgGuA2A.mft (raw, json)
Hash identifier: eBxLolLGcNH3jMUI6m2e9KJSTrHIs7Cm03M9jqUdQAY=
Subject key identifier: 26:99:B4:97:27:24:E7:1A:4A:C5:F8:9E:CF:E8:19:2F:5D:0E:27:DE
Authority key identifier: 1B:BB:29:7B:C8:28:16:6A:A4:97:D3:7C:72:65:BF:B6:01:AE:03:60
Certificate issuer: /CN=A91B49F2/serialNumber=1BBB297BC828166AA497D37C7265BFB601AE0360
Certificate serial: 0EDE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft
Manifest number: 0ED1
Signing time: Sat 18 Apr 2026 17:35:01 +0000
Manifest this update: Sat 18 Apr 2026 17:35:00 +0000
Manifest next update: Sat 25 Apr 2026 17:35:00 +0000
Files and hashes: 1: G7spe8goFmqkl9N8cmW_tgGuA2A.crl (hash: k8Q20QLjuc2ykOj8c7GN/60tmyqujrKcWT2bzDMJVDo=)
2: BA0CC7060A3D11EB82ECEA4BC4F9AE02.roa (hash: JeKAJdqbPEiYDYAJ1XzRDXMOefEFjZmJoWdofrNUX9I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.crl
rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3806 (0xede)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B49F2, serialNumber=1BBB297BC828166AA497D37C7265BFB601AE0360
Validity
Not Before: Apr 18 17:35:00 2026 GMT
Not After : Apr 25 17:35:00 2026 GMT
Subject: CN=69e3c0c5-a14d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2c:43:0c:06:fe:c5:00:44:3f:f3:20:46:77:
6d:09:9c:3f:90:57:4b:c4:c4:8c:a9:8b:36:83:c4:
9c:57:9e:ed:62:47:50:08:4a:e2:43:5a:cb:8d:c7:
ca:c7:59:ed:97:d4:95:52:a3:3d:7f:d0:94:7d:5b:
bf:47:b3:cb:7b:cc:fd:d1:7b:01:b2:be:22:af:c6:
a4:62:5f:7e:5e:84:31:df:b0:85:39:6c:cc:30:f7:
93:1e:0b:5d:7d:18:27:0e:ff:54:0c:12:6d:39:e3:
9c:eb:72:72:d5:54:df:7b:0a:f0:f6:8a:5d:f5:66:
74:c2:0c:96:ad:10:ea:92:9d:fb:f3:39:64:d3:d6:
e5:bb:42:36:c0:1f:27:a0:2a:0b:e6:e4:29:82:2e:
ee:2e:34:09:bc:3f:ea:fe:c9:b4:fc:79:74:43:b3:
e5:ef:f9:df:12:63:49:16:dc:79:33:56:4f:05:f6:
52:6c:45:81:b0:f9:f4:8f:a5:26:4e:b6:c6:b1:c1:
8d:f9:9c:47:87:82:b7:e0:37:fb:f5:77:6b:70:f0:
dd:1f:bd:1a:18:26:c6:01:d6:39:d7:2a:88:d3:b0:
aa:d7:7b:b8:1f:60:8a:68:4b:4a:04:5f:16:eb:64:
7c:4b:99:c3:b0:51:a8:4c:d7:7c:ed:ae:7b:4c:c5:
60:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:99:B4:97:27:24:E7:1A:4A:C5:F8:9E:CF:E8:19:2F:5D:0E:27:DE
X509v3 Authority Key Identifier:
keyid:1B:BB:29:7B:C8:28:16:6A:A4:97:D3:7C:72:65:BF:B6:01:AE:03:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c4:69:97:59:b5:e1:e5:ab:cd:0e:7c:f3:28:8e:df:6c:1e:b0:
08:c4:b0:a3:bc:30:7a:35:02:e3:51:6d:4b:01:cc:e2:8f:54:
c1:c7:00:ca:23:0c:b2:46:5c:80:25:c7:f8:a8:35:cf:01:3c:
69:f9:43:96:e2:40:b2:d9:0e:49:ae:33:6a:89:37:1e:35:6f:
1f:d7:b9:c7:a2:d2:cb:eb:1f:08:db:96:22:fc:b7:ed:dc:e3:
8a:e3:7c:a9:b1:4b:5c:dd:42:ba:17:4d:fb:79:1f:20:09:f9:
9c:84:2d:d6:7d:76:79:5a:d6:ab:a8:93:4c:89:f8:82:09:7c:
47:65:12:6f:89:48:13:d2:b4:fa:4c:a7:5a:9f:27:f8:70:3c:
bc:e1:3f:81:2c:a5:61:8f:44:a0:6e:ae:78:fd:25:13:c5:e2:
96:f9:bb:4f:a1:b2:00:f0:d9:9c:2a:0b:9e:80:d2:57:d2:fb:
ae:88:b2:e7:59:4a:65:74:d8:c7:97:06:a3:9f:4f:a2:55:ee:
bb:7e:fd:b7:0a:c1:94:35:67:7a:fe:f4:20:51:0e:e4:37:ed:
ac:c3:5f:fd:cd:f1:34:be:4d:5c:98:f1:1f:d5:09:66:f9:6f:
6e:6a:b9:72:3a:66:e1:32:28:36:72:46:be:04:d5:02:8d:5e:
1c:fe:a9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:06:59 2026 by rpki-client