
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft
File: g1GgqJRYpHQmpXCgKQH45lQuguI.mft (raw, json)
Hash identifier: M4vY2SvWHWOTTxGSBI6hYXdTOuIUtvNt/WAIALDzWvg=
Subject key identifier: E7:C2:4D:5C:5E:82:43:9C:7D:69:C1:88:D8:29:92:4C:EC:A7:32:01
Authority key identifier: 83:51:A0:A8:94:58:A4:74:26:A5:70:A0:29:01:F8:E6:54:2E:82:E2
Certificate issuer: /CN=A91B7D3D/serialNumber=8351A0A89458A47426A570A02901F8E6542E82E2
Certificate serial: 0504
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft
Manifest number: 04ED
Signing time: Thu 14 May 2026 23:55:39 +0000
Manifest this update: Thu 14 May 2026 23:55:38 +0000
Manifest next update: Thu 21 May 2026 23:55:38 +0000
Files and hashes: 1: g1GgqJRYpHQmpXCgKQH45lQuguI.crl (hash: D9G3MPyoqO3DNiyY5788mNO+NUAdkr2vC1Ki5Y93dE4=)
2: D3E15ECEA1E611EDABFD7D7FC4F9AE02.roa (hash: kPi4zM9MhBs1Z7XrTJy2yFMDPKRgd24Q9Ibk3GjMnUw=)
3: D516EA2AA1E611EDABFD7D7FC4F9AE02.roa (hash: vxznBiBVR6YDAJK7LuojHusJdEYCXrwVVLv7TWoRtB8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.crl
rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 21 May 2026 23:55:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1284 (0x504)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7D3D, serialNumber=8351A0A89458A47426A570A02901F8E6542E82E2
Validity
Not Before: May 14 23:55:38 2026 GMT
Not After : May 21 23:55:38 2026 GMT
Subject: CN=6a0660fa-2ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:95:97:a5:b2:aa:ad:e2:54:13:12:c8:5f:34:
a0:67:33:af:76:1d:78:c8:3b:1d:46:8e:55:29:56:
7e:97:36:24:2d:cc:46:f5:72:08:ff:eb:4f:99:3a:
e6:6d:71:63:5c:75:5e:fb:b0:dc:98:02:88:3e:a9:
9e:2f:b5:47:55:9c:3d:f8:0b:fa:ba:11:80:4b:6b:
bb:7e:16:4b:b9:63:70:e9:70:44:ee:91:20:7f:60:
4d:9f:77:90:e5:c5:b1:0d:05:00:c3:d5:73:a7:a2:
0d:f9:d8:de:f6:03:d0:f1:d3:1e:3f:50:8e:ab:b8:
b1:c2:2b:5c:f4:be:90:5f:03:61:65:fb:6b:06:e4:
29:b2:84:a2:67:24:18:cc:92:93:2a:38:f3:5c:2d:
7e:d1:39:05:00:61:2e:05:9f:02:89:9b:9b:46:c8:
1b:85:91:89:c1:cc:2d:12:4d:01:23:10:e8:81:44:
7c:f1:54:8a:8c:84:85:8e:eb:41:8c:5d:4b:02:c0:
75:a6:8f:93:27:94:14:b5:21:06:34:50:19:88:dc:
b6:95:42:4b:71:ef:dd:7c:7b:10:32:04:b5:4f:72:
43:aa:4c:e9:14:a3:c7:85:fb:cb:87:15:f5:ac:08:
21:41:07:c2:27:1d:bd:fe:fb:62:14:af:5c:88:dd:
81:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C2:4D:5C:5E:82:43:9C:7D:69:C1:88:D8:29:92:4C:EC:A7:32:01
X509v3 Authority Key Identifier:
keyid:83:51:A0:A8:94:58:A4:74:26:A5:70:A0:29:01:F8:E6:54:2E:82:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:80:8a:0f:9e:f3:ce:2e:2a:a5:2a:e0:54:85:f3:79:0e:bf:
6d:68:5b:c5:74:0a:30:ab:f1:e0:15:2a:f5:d5:e7:61:20:08:
8e:74:fb:0d:59:09:d9:b7:f8:b0:5c:1f:ec:ef:62:d9:9d:21:
e0:f9:23:61:a6:62:aa:a4:7d:bb:c6:60:75:65:26:73:6b:64:
fe:58:5b:85:90:f0:a8:aa:ee:df:68:59:e8:bb:19:8a:51:82:
14:85:bb:77:88:bc:2e:28:9b:2c:f6:8e:71:36:f8:b3:af:91:
63:37:66:a3:7f:50:35:93:da:ec:2b:17:47:68:d4:04:70:07:
15:42:73:a4:a0:fb:28:dd:d0:36:52:09:a6:7a:5b:52:d8:97:
5b:08:c1:52:bb:e4:47:5d:9d:dd:81:d5:56:79:c9:08:b9:f4:
0a:99:4c:84:ce:27:79:5f:39:7a:8f:03:63:3b:00:a3:ed:5a:
72:3d:81:70:16:af:46:fd:6b:8e:2b:e4:99:32:ea:64:35:84:
93:40:c4:33:dd:ce:d2:71:c0:66:60:e9:ad:98:8b:1d:f1:42:
6f:17:3f:c9:cc:a5:84:d0:63:f7:18:62:c1:c7:b8:41:9b:8c:
39:4c:78:25:81:f3:e8:68:43:cc:be:a4:a2:95:8d:e0:83:1e:
c5:d6:09:88
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjdEM0QxMTAvBgNVBAUTKDgzNTFBMEE4OTQ1OEE0NzQyNkE1NzBBMDI5MDFGOEU2
NTQyRTgyRTIwHhcNMjYwNTE0MjM1NTM4WhcNMjYwNTIxMjM1NTM4WjAYMRYwFAYD
VQQDEw02YTA2NjBmYS0yYWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1ZWXpbKqreJUExLIXzSgZzOvdh14yDsdRo5VKVZ+lzYkLcxG9XII/+tPmTrm
bXFjXHVe+7DcmAKIPqmeL7VHVZw9+Av6uhGAS2u7fhZLuWNw6XBE7pEgf2BNn3eQ
5cWxDQUAw9Vzp6IN+dje9gPQ8dMeP1COq7ixwitc9L6QXwNhZftrBuQpsoSiZyQY
zJKTKjjzXC1+0TkFAGEuBZ8CiZubRsgbhZGJwcwtEk0BIxDogUR88VSKjISFjutB
jF1LAsB1po+TJ5QUtSEGNFAZiNy2lUJLce/dfHsQMgS1T3JDqkzpFKPHhfvLhxX1
rAghQQfCJx29/vtiFK9ciN2BdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOfCTVxe
gkOcfWnBiNgpkkzspzIBMB8GA1UdIwQYMBaAFINRoKiUWKR0JqVwoCkB+OZULoLi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0QzRC8yMzNDMEI0NjYz
QkMxMUVDOEI4QzgzMkFDNEY5QUUwMi9nMUdncUpSWXBIUW1wWENnS1FINDVsUXVn
dUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2cxR2dxSlJZcEhRbXBYQ2dLUUg0NWxRdWd1SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
N0QzRC8yMzNDMEI0NjYzQkMxMUVDOEI4QzgzMkFDNEY5QUUwMi9nMUdncUpSWXBI
UW1wWENnS1FINDVsUXVndUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADYCKD57zzi4qpSrgVIXzeQ6/bWhbxXQKMKvx4BUq9dXnYSAIjnT7DVkJ2bf4
sFwf7O9i2Z0h4PkjYaZiqqR9u8ZgdWUmc2tk/lhbhZDwqKru32hZ6LsZilGCFIW7
d4i8LiibLPaOcTb4s6+RYzdmo39QNZPa7CsXR2jUBHAHFUJzpKD7KN3QNlIJpnpb
UtiXWwjBUrvkR12d3YHVVnnJCLn0CplMhM4neV85eo8DYzsAo+1acj2BcBavRv1r
jivkmTLqZDWEk0DEM93O0nHAZmDprZiLHfFCbxc/ycylhNBj9xhiwce4QZuMOUx4
JYHz6GhDzL6kopWN4IMexdYJiA==
-----END CERTIFICATE-----
Generated at Fri May 15 23:15:09 2026 by rpki-client