
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft
File: Gu-1HeyOsHlip15FnOIQp0ABBPs.mft (raw, json)
Hash identifier: 6JF1z/HhgcFBJlFCgXN44qCv5nhgZ4ABHMkFFY2AxOA=
Subject key identifier: 9A:5E:FE:6D:C4:8C:17:7A:03:97:54:D1:CC:09:E1:0F:34:3A:E9:72
Authority key identifier: 1A:EF:B5:1D:EC:8E:B0:79:62:A7:5E:45:9C:E2:10:A7:40:01:04:FB
Certificate issuer: /CN=A91D3DAE/serialNumber=1AEFB51DEC8EB07962A75E459CE210A7400104FB
Certificate serial: 358E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft
Manifest number: 357C
Signing time: Fri 04 Sep 2026 14:40:09 +0000
Manifest this update: Fri 04 Sep 2026 14:40:09 +0000
Manifest next update: Fri 11 Sep 2026 14:40:09 +0000
Files and hashes: 1: Gu-1HeyOsHlip15FnOIQp0ABBPs.crl (hash: 9T0Qq5EF62W4ZmkiQeRJ5J1oheUo0krQO5FqTK+MLFY=)
2: 220E32CEFEA411EDBC673B4BC4F9AE02.roa (hash: E2m3GG0CyyLNe3em7BY2AGdLBy8YhmSii0OKLOGYkJg=)
3: 232E8BFEFEA411EDBC673B4BC4F9AE02.roa (hash: i/MqTAr3DjQbJ7pM6lK7jVjbcEbd2+i/7IX3vbbjQxw=)
4: 229F27ACFEA411EDBC673B4BC4F9AE02.roa (hash: Qk1zJmgRoPNYf3XvdVSfDLRHp6uM57VNb9FsqRujDlI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.crl
rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 14:40:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13710 (0x358e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3DAE, serialNumber=1AEFB51DEC8EB07962A75E459CE210A7400104FB
Validity
Not Before: Sep 4 14:40:09 2026 GMT
Not After : Sep 11 14:40:09 2026 GMT
Subject: CN=6a9ad849-a551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:da:48:0b:d8:a2:62:8a:54:b0:5b:d8:b4:24:
73:c0:7b:a2:a5:ba:55:a1:d4:63:1f:a8:f9:1a:05:
47:2b:9d:f2:8a:c9:e3:9c:2f:34:61:fa:84:03:2a:
f9:74:2b:97:b4:6b:f4:ee:99:34:03:11:b3:1e:2d:
58:b4:a8:1e:4a:a8:4e:50:a9:3a:48:03:8f:11:61:
9b:4a:07:90:d3:2f:12:d2:88:1d:aa:27:f0:0f:a6:
99:fd:89:e7:00:58:cd:00:1d:51:62:e6:76:1b:a8:
74:bc:3b:9d:41:f0:05:c9:de:35:e3:48:50:3a:23:
1d:06:00:e8:9c:95:bd:fd:7b:b6:e3:c7:34:e5:02:
a2:ab:c9:6e:7e:c6:6d:98:3e:c8:3a:0a:34:b0:ae:
3d:e8:2a:f7:ef:fb:25:bb:af:20:41:e8:54:a5:04:
a5:d3:25:4d:8d:cc:fa:3e:49:aa:6c:9a:b8:0d:e7:
ac:1e:be:21:f8:da:4c:01:5b:7d:93:a8:da:d9:b1:
be:13:b2:75:7c:33:ae:c8:ee:31:10:15:9d:eb:8a:
d3:d6:b8:0d:3f:0f:13:a8:f2:1f:12:bd:a5:a4:e2:
bb:8c:93:2c:39:12:1b:41:25:ed:c9:52:46:72:2f:
60:35:fd:e2:69:47:57:47:e2:49:c3:32:9f:d6:98:
4e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5E:FE:6D:C4:8C:17:7A:03:97:54:D1:CC:09:E1:0F:34:3A:E9:72
X509v3 Authority Key Identifier:
keyid:1A:EF:B5:1D:EC:8E:B0:79:62:A7:5E:45:9C:E2:10:A7:40:01:04:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:29:b3:cc:9e:c6:60:d7:09:97:89:39:fb:14:e3:5c:3d:9c:
56:e6:85:e5:fd:4a:49:21:db:8e:b4:62:c4:d1:ea:30:74:6f:
75:cf:a9:45:ef:f4:ab:75:84:4b:05:0b:ef:e2:86:a7:0d:4f:
5c:6e:df:1a:4c:74:72:4c:d1:f2:21:a1:31:67:ee:ea:9c:84:
38:01:04:34:70:45:eb:75:ca:d7:dc:60:6f:ce:c3:ab:fe:ba:
a4:ff:5b:5f:62:e5:26:25:7d:40:dc:49:ab:6d:6b:7a:52:3e:
90:37:f9:6d:3f:d2:43:99:f6:52:c5:73:f7:a7:51:fb:af:2b:
34:3e:f1:05:02:c1:c9:6c:5d:c3:15:26:25:17:7a:45:86:d6:
eb:b9:99:80:89:de:d7:e5:73:77:74:6c:7d:8a:30:be:a2:cd:
4a:ec:4c:c7:41:61:fc:3b:64:2f:17:11:6a:06:8b:40:da:85:
b7:f6:54:29:5c:26:9b:a3:d7:47:93:c6:fc:89:bb:d7:b6:56:
d5:e2:21:82:50:16:57:6f:ee:8b:62:e1:6d:ec:33:67:66:ae:
b0:7e:f7:27:08:f6:41:97:7b:a2:6a:c9:a2:9f:76:b0:1a:54:
7b:91:b9:2f:04:e4:e5:86:05:3e:90:c3:06:90:2b:3b:44:a7:
87:18:36:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:37:18 2026 by rpki-client