
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft
File: Gq0AphpkkECrUmoUK1173uWgHL8.mft (raw, json)
Hash identifier: F2ooIQ2ckCG7FG6/aW8yQwqeBXmzZ1N31B13IdICc2o=
Subject key identifier: E6:39:00:AB:B1:56:A9:DB:B2:10:6C:A7:7A:10:07:64:72:A0:18:E5
Authority key identifier: 1A:AD:00:A6:1A:64:90:40:AB:52:6A:14:2B:5D:7B:DE:E5:A0:1C:BF
Certificate issuer: /CN=A91CCE54/serialNumber=1AAD00A61A649040AB526A142B5D7BDEE5A01CBF
Certificate serial: 0674
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft
Manifest number: 0651
Signing time: Sat 20 Jun 2026 22:39:13 +0000
Manifest this update: Sat 20 Jun 2026 22:39:13 +0000
Manifest next update: Sat 27 Jun 2026 22:39:13 +0000
Files and hashes: 1: Gq0AphpkkECrUmoUK1173uWgHL8.crl (hash: jK+NUECepl5P87QOsAIosXtammqZH6Xt26Gyjo/4wus=)
2: B62A6E82D7F511EB82D62F73C4F9AE02.roa (hash: KQTVz0e1Zb1iLnhg7VrsR+eEdauEprxEm/t9De3WuEM=)
3: 956B1C7AD81111EB8C3ACC5DC4F9AE02.roa (hash: lxgbG6pkkYFXzxOLVtY4sU1vaYpcUs17yViYyAj/L48=)
4: 9659D3F6D81111EB8C3ACC5DC4F9AE02.roa (hash: ebYT6JMp2+FGCLF90hH2BoNKGZH2g9kCtxGailuH/cQ=)
5: B3394AE0D7F511EB82D62F73C4F9AE02.roa (hash: fWQraDGwJwPV67yFDAv4Z9YVrJg/aZyI/SUeFYf35jg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.crl
rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Jun 2026 22:39:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1652 (0x674)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCE54, serialNumber=1AAD00A61A649040AB526A142B5D7BDEE5A01CBF
Validity
Not Before: Jun 20 22:39:13 2026 GMT
Not After : Jun 27 22:39:13 2026 GMT
Subject: CN=6a371691-d6c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b6:cb:d4:69:19:8f:e0:48:ac:d8:5b:49:35:
11:26:9b:5b:b9:c5:0b:ae:d9:50:3d:7e:6a:d5:af:
f0:45:8d:83:52:5f:c3:af:19:bf:db:7f:ff:cf:5c:
7d:98:71:14:56:4b:2d:43:fc:fa:4e:cf:d3:23:73:
01:0c:3c:e3:0c:b5:7d:91:a7:34:64:1e:b3:b4:1e:
80:57:d3:d3:bd:fb:93:b1:b5:69:f8:af:1c:ea:2e:
42:46:14:21:7a:a1:62:88:b3:2b:88:38:5e:7d:00:
c1:3d:2d:b9:9b:f3:c8:bb:db:38:b4:d9:46:67:b2:
59:76:6a:63:6e:89:56:25:b3:02:92:c3:af:ba:b3:
4d:1e:58:ba:0b:d5:cf:71:67:54:dd:b7:47:5d:1c:
04:e5:d3:ad:3f:a8:f9:96:1c:8e:58:dd:24:6f:0a:
e9:20:14:54:48:2b:64:7e:a2:00:fa:19:69:b4:cf:
8d:3b:57:32:19:0b:69:41:ee:60:6f:be:0d:f4:94:
21:71:90:ec:af:a8:e4:fb:42:3f:40:22:dd:52:e9:
d1:74:11:a9:c9:b7:08:bd:57:e5:13:5e:5b:b8:b3:
e8:8e:f1:33:a0:a6:90:25:47:50:6e:a4:94:dd:83:
c1:15:e1:70:42:49:c3:c0:a3:02:90:55:76:d5:af:
4a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:39:00:AB:B1:56:A9:DB:B2:10:6C:A7:7A:10:07:64:72:A0:18:E5
X509v3 Authority Key Identifier:
keyid:1A:AD:00:A6:1A:64:90:40:AB:52:6A:14:2B:5D:7B:DE:E5:A0:1C:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:8e:39:84:5b:40:96:c2:14:3a:17:80:1a:c8:80:56:19:67:
a0:f3:1e:b0:46:8c:83:63:4a:bb:b9:1d:63:09:6f:2b:da:ea:
fc:76:bd:cb:5b:62:89:8e:80:48:aa:0c:da:3e:ee:8e:09:99:
ba:74:f6:12:11:d9:e4:65:8e:7d:ef:5b:be:6c:84:74:87:34:
9e:99:7d:d7:ef:1c:34:96:8f:7a:46:b0:e7:f1:cf:66:0b:c6:
40:95:44:d4:75:c4:b6:14:e5:5b:9c:31:46:a5:e8:18:2b:19:
57:25:4c:83:20:de:f4:8f:19:d5:a5:3b:ab:83:16:3e:19:fd:
59:6e:c4:17:b6:c6:14:08:8e:7b:de:54:3e:0c:08:53:2f:a0:
2c:f7:f0:c1:79:c8:e9:d0:63:6f:ec:c1:19:d9:98:79:57:fb:
a9:68:d5:3c:0d:10:eb:42:52:d7:96:3a:26:66:09:4c:40:db:
8f:f5:d9:46:57:e5:65:20:94:f7:56:77:2e:4d:37:86:3c:91:
74:c1:4c:5e:93:0d:65:4a:ca:a7:1b:e8:98:42:83:65:b5:ae:
d5:78:f7:02:f7:ba:ae:97:e8:11:f4:6f:c4:0a:05:0c:88:ad:
87:53:cc:81:8e:7c:be:b2:7e:23:bd:fc:bb:e0:7a:c9:93:1f:
4a:f0:9f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 11:45:32 2026 by rpki-client