
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft
File: Gu-1HeyOsHlip15FnOIQp0ABBPs.mft (raw, json)
Hash identifier: 3DxyyZYy3ZD+Y+mLY/1rsnobYpoEHfUEszJZKUOsGFI=
Subject key identifier: 2D:90:AB:5E:17:2F:66:53:B4:8B:3B:C4:46:B0:50:44:07:3A:81:5D
Authority key identifier: 1A:EF:B5:1D:EC:8E:B0:79:62:A7:5E:45:9C:E2:10:A7:40:01:04:FB
Certificate issuer: /CN=A91D3DAE/serialNumber=1AEFB51DEC8EB07962A75E459CE210A7400104FB
Certificate serial: 355F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft
Manifest number: 354D
Signing time: Thu 04 Jun 2026 14:41:01 +0000
Manifest this update: Thu 04 Jun 2026 14:41:01 +0000
Manifest next update: Thu 11 Jun 2026 14:41:01 +0000
Files and hashes: 1: Gu-1HeyOsHlip15FnOIQp0ABBPs.crl (hash: Ifv2ZLCqDEX+XDFIQy6LXy9UTWqBdEa1vvhsI4MM1LE=)
2: 229F27ACFEA411EDBC673B4BC4F9AE02.roa (hash: Qk1zJmgRoPNYf3XvdVSfDLRHp6uM57VNb9FsqRujDlI=)
3: 232E8BFEFEA411EDBC673B4BC4F9AE02.roa (hash: i/MqTAr3DjQbJ7pM6lK7jVjbcEbd2+i/7IX3vbbjQxw=)
4: 220E32CEFEA411EDBC673B4BC4F9AE02.roa (hash: E2m3GG0CyyLNe3em7BY2AGdLBy8YhmSii0OKLOGYkJg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.crl
rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 14:41:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13663 (0x355f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3DAE, serialNumber=1AEFB51DEC8EB07962A75E459CE210A7400104FB
Validity
Not Before: Jun 4 14:41:01 2026 GMT
Not After : Jun 11 14:41:01 2026 GMT
Subject: CN=6a218e7d-0cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a9:05:86:d7:b4:8d:fe:82:e5:cf:c7:b7:28:
69:ef:af:06:46:5e:03:77:f8:fa:9d:ec:26:e4:d3:
41:47:d8:a9:94:4e:d0:8e:41:f4:96:5a:c7:3e:d7:
a1:0b:25:41:b9:d1:0d:0a:39:a7:ab:8e:a8:e2:ca:
ba:48:b5:08:20:71:cc:00:9f:c8:82:2f:a0:30:06:
d4:a7:0e:5f:f0:d7:7e:8c:3f:cc:0c:00:e7:4f:5e:
2b:fd:7a:f7:99:fb:ca:93:b5:3e:f0:32:35:9d:29:
20:3f:c6:5f:4a:4c:cf:a6:e9:85:5e:85:64:f6:74:
5c:8c:de:7c:e9:78:a8:90:43:f8:a7:87:e4:b3:db:
f8:e0:66:6a:18:11:74:52:17:8a:08:7e:1d:17:90:
93:d0:d9:91:e2:8a:ea:33:fb:04:2a:b8:ca:f9:4d:
93:c2:22:30:28:64:03:86:6f:f2:f4:5f:bc:34:3e:
d2:72:13:2b:1d:85:50:d3:40:f8:9e:5c:d9:c4:a3:
91:2c:5b:b0:b4:93:5d:a5:88:a8:19:37:d4:29:a0:
89:49:09:46:a2:ef:f9:dd:a4:92:60:5e:05:e9:f8:
bb:98:8e:b7:16:11:a7:45:78:a9:ba:5d:b2:d7:3a:
2f:51:6f:90:03:32:7a:0f:5a:4d:6d:c6:3f:4f:ee:
de:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:90:AB:5E:17:2F:66:53:B4:8B:3B:C4:46:B0:50:44:07:3A:81:5D
X509v3 Authority Key Identifier:
keyid:1A:EF:B5:1D:EC:8E:B0:79:62:A7:5E:45:9C:E2:10:A7:40:01:04:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:a8:92:ad:70:01:af:18:ae:01:74:2f:18:e1:06:14:be:81:
20:84:3e:6b:53:4a:a5:bb:79:91:ab:e7:34:83:de:61:c0:e7:
d7:c3:89:a0:b9:37:2b:43:26:1c:83:41:cb:a8:d7:f5:ca:e8:
22:17:2d:be:74:a9:d8:d7:d5:da:bd:88:0f:30:e3:05:81:38:
b8:64:d6:2f:a3:73:7f:5e:a8:74:a0:18:7f:7a:b1:8a:69:14:
70:0c:e1:65:53:f1:bd:50:4f:03:ec:e1:63:14:56:a5:a9:a1:
5d:14:89:4d:98:e0:34:84:34:f8:00:ab:ad:36:a1:75:0a:6e:
d8:bc:da:86:65:ae:1b:c3:1a:b9:18:e6:1a:4d:f0:fc:c9:4b:
c8:2e:aa:bf:1d:e0:bd:f2:e9:1c:a6:e6:89:7c:85:be:2b:49:
85:85:c1:26:aa:0f:54:b1:f5:df:4d:f7:5c:cf:c2:0c:79:b8:
56:b0:77:8a:1b:87:b2:f0:33:3d:3b:60:78:75:22:cd:b7:dd:
5a:d1:f7:8d:11:61:d8:e9:1c:ea:f4:c7:1e:79:e4:5c:f2:77:
25:93:98:5c:33:46:70:11:8d:71:de:19:5f:32:9e:7d:c6:0a:
7f:5a:e8:57:88:18:c0:a7:f3:ba:c0:4e:76:b5:67:2c:d7:c3:
d0:8a:40:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 15:50:50 2026 by rpki-client