
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.mft
File: gtgYhh3Upw93CNIF5LiehRTKH2w.mft (raw, json)
Hash identifier: 6hicSJv2LdtU4No1lXgHxKLb1Vqejf3NcWVfCauiRRI=
Subject key identifier: BC:0B:92:5A:6F:80:C3:BE:C0:55:0F:C5:2B:06:25:9F:35:C1:E9:29
Authority key identifier: 82:D8:18:86:1D:D4:A7:0F:77:08:D2:05:E4:B8:9E:85:14:CA:1F:6C
Certificate issuer: /CN=A91C9A8D/serialNumber=82D818861DD4A70F7708D205E4B89E8514CA1F6C
Certificate serial: 010D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gtgYhh3Upw93CNIF5LiehRTKH2w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.mft
Manifest number: 05B0
Signing time: Tue 23 Jun 2026 00:01:08 +0000
Manifest this update: Tue 23 Jun 2026 00:01:08 +0000
Manifest next update: Tue 30 Jun 2026 00:01:08 +0000
Files and hashes: 1: gtgYhh3Upw93CNIF5LiehRTKH2w.crl (hash: wlJ9jmOJUxwgsgGmy2+Xy4lGrVsCND4ke67a+6QF4zk=)
2: D2A57AD8DDF111EF969ABC1CC4F9AE02.roa (hash: eoTb51P+t/j4kZh52b3zmJyrvFvaeaq6DjMaAos1Ol0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.crl
rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gtgYhh3Upw93CNIF5LiehRTKH2w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 00:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 269 (0x10d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9A8D, serialNumber=82D818861DD4A70F7708D205E4B89E8514CA1F6C
Validity
Not Before: Jun 23 00:01:08 2026 GMT
Not After : Jun 30 00:01:08 2026 GMT
Subject: CN=6a39ccc4-d640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:af:82:6c:5d:b2:36:ab:6a:3a:d3:de:45:ff:
35:85:6a:1a:7e:1b:b4:cc:dc:30:eb:42:65:b7:dd:
19:f3:88:83:58:bf:34:31:67:15:de:30:61:3f:21:
6d:94:dc:03:3d:c4:f9:ee:cf:f6:eb:a9:97:fc:f5:
2a:03:52:48:93:c2:49:11:d1:78:1c:c9:1e:54:6c:
00:53:ac:f2:f7:99:99:31:16:e1:90:43:f4:4b:b0:
1d:e6:f3:b7:87:dc:66:93:2b:d7:e5:3b:22:47:4a:
16:7a:81:38:9c:cb:73:6d:7a:11:0f:a0:e8:dc:5a:
18:9f:be:f5:ca:48:44:0f:c4:28:61:5c:e8:cf:e4:
5a:99:fa:97:99:d1:d8:c0:55:6f:2e:64:9f:3c:77:
5e:f6:b9:85:3b:e7:8a:55:fe:e3:fb:31:e3:48:a2:
82:d2:c2:2a:63:9a:23:cb:29:2e:37:89:9c:79:4d:
08:c0:25:89:69:20:d2:ec:5b:9b:be:01:79:c8:5f:
29:8b:7f:2f:8c:fb:22:9d:e9:35:a8:0c:3f:8f:e9:
59:71:71:3f:b7:81:48:e7:9e:48:f3:06:85:d7:fb:
f1:3e:ce:e7:5a:de:1c:53:d2:74:7e:5c:c3:3c:30:
11:b7:71:ee:05:9e:ec:24:bf:b9:c6:53:ce:f0:18:
6e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:0B:92:5A:6F:80:C3:BE:C0:55:0F:C5:2B:06:25:9F:35:C1:E9:29
X509v3 Authority Key Identifier:
keyid:82:D8:18:86:1D:D4:A7:0F:77:08:D2:05:E4:B8:9E:85:14:CA:1F:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gtgYhh3Upw93CNIF5LiehRTKH2w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d2:a2:9e:91:44:b6:f7:c6:fe:2c:c7:e6:b2:34:46:07:e3:72:
4f:48:bc:02:30:08:a6:1b:eb:c9:82:55:02:0b:f3:0a:3e:a3:
4b:2d:50:51:c5:c4:14:2c:c4:17:6e:6a:f4:2b:dd:63:5d:fc:
ee:10:41:d7:11:7c:18:ab:1c:67:07:34:53:ad:6c:fa:88:fc:
5f:e6:2a:71:ea:3f:62:ba:b0:33:3b:81:a3:23:9e:81:dc:bb:
3d:3a:a1:d3:92:81:5c:d7:ff:ab:70:5b:08:ea:52:59:b5:04:
6a:8e:52:26:76:28:68:4c:a3:1d:a9:3d:2b:6b:c0:0d:04:30:
bd:56:12:44:58:ae:97:54:60:e5:27:fb:79:2c:5a:67:d1:03:
e2:05:bd:5a:71:2b:1c:e0:f2:79:3f:84:99:29:87:f5:55:4d:
bf:8c:e2:46:bb:a5:15:9e:76:79:5a:ba:36:b9:91:bc:72:1a:
56:a6:5f:9c:ec:6e:7f:49:bc:71:0c:83:01:c1:1f:01:47:9a:
18:28:d5:e3:7e:6d:0d:d0:aa:10:6e:1e:e9:c3:5a:e4:e0:33:
30:9c:db:29:a4:16:2e:c5:6b:8f:c8:90:3a:ca:5d:dc:63:db:
b3:74:29:b1:70:a6:25:1b:df:10:71:4b:ed:4d:94:65:e5:f3:
32:87:aa:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:26:18 2026 by rpki-client