
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft
File: g-S8t2O4ztA2UZDnKA8KajSzW1E.mft (raw, json)
Hash identifier: f5uRcTbGEdHFaNK64Me7GIBPH4c1ppSiqrYLYxPWbU0=
Subject key identifier: 50:7C:61:70:EE:68:D9:46:45:C1:A2:7C:FD:FE:71:35:D1:E7:33:59
Authority key identifier: 83:E4:BC:B7:63:B8:CE:D0:36:51:90:E7:28:0F:0A:6A:34:B3:5B:51
Certificate issuer: /CN=A91D4A3A/serialNumber=83E4BCB763B8CED0365190E7280F0A6A34B35B51
Certificate serial: 019E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g-S8t2O4ztA2UZDnKA8KajSzW1E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft
Manifest number: 0196
Signing time: Thu 21 May 2026 04:23:57 +0000
Manifest this update: Thu 21 May 2026 04:23:57 +0000
Manifest next update: Thu 28 May 2026 04:23:57 +0000
Files and hashes: 1: g-S8t2O4ztA2UZDnKA8KajSzW1E.crl (hash: /Ri3bUkUll2UBMjyvc+Gox6y5VoHECzw3KRm1RDfZaA=)
2: 8A5FC86AECB511EE8DC7B937C4F9AE02.roa (hash: wFV3hxZNMimHCra0GUvVj+qhSpRLii8tAhy60erdhQE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.crl
rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g-S8t2O4ztA2UZDnKA8KajSzW1E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:23:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 414 (0x19e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4A3A, serialNumber=83E4BCB763B8CED0365190E7280F0A6A34B35B51
Validity
Not Before: May 21 04:23:57 2026 GMT
Not After : May 28 04:23:57 2026 GMT
Subject: CN=6a0e88dd-dda9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:01:d1:33:c2:3e:fd:3a:28:d0:1b:3c:09:5d:
32:a4:44:13:fd:9f:3e:ad:9b:73:68:91:8e:b6:62:
cb:54:d3:de:61:4b:68:80:b5:93:ee:a3:cc:3f:5a:
9a:8b:d1:a2:11:0e:92:df:77:a6:bf:2a:10:3e:36:
48:3c:b1:c6:43:6e:70:0a:cf:d9:01:a1:11:fe:83:
32:1b:20:53:ad:7b:2e:4d:2f:0e:2e:04:c7:c4:e3:
b1:22:16:3b:15:23:c4:42:48:cc:7f:af:19:96:94:
1c:43:71:89:10:60:95:93:d8:81:67:52:29:0b:17:
87:83:c4:a2:40:7c:3f:ad:66:78:0e:49:1f:d7:d8:
61:4c:1b:ee:f0:00:da:f0:a6:d2:f9:cb:ad:1c:16:
a9:84:06:92:71:96:99:59:c2:0f:08:ab:2b:5c:1a:
64:88:7a:7a:bd:37:a6:cb:c2:61:3a:23:6d:64:1d:
73:25:86:e6:57:a7:01:49:9b:e1:68:83:7e:69:5c:
d8:00:87:1b:f6:88:fd:f7:f5:2d:52:32:b6:75:8a:
ba:11:f8:98:28:51:68:19:a8:a9:99:cb:05:75:de:
0f:63:07:2e:9e:54:87:8f:3e:99:af:47:16:0e:3d:
ad:9b:0c:1b:36:ad:ff:05:d6:3a:87:0e:a8:d2:a5:
61:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7C:61:70:EE:68:D9:46:45:C1:A2:7C:FD:FE:71:35:D1:E7:33:59
X509v3 Authority Key Identifier:
keyid:83:E4:BC:B7:63:B8:CE:D0:36:51:90:E7:28:0F:0A:6A:34:B3:5B:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g-S8t2O4ztA2UZDnKA8KajSzW1E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:67:26:32:b6:0b:11:5a:11:3e:a5:92:15:b7:24:d1:9b:16:
d2:85:30:48:71:96:60:16:96:39:ed:23:5d:fb:79:93:4d:b9:
f9:72:a7:90:0b:6e:53:9c:70:7c:db:c8:0c:0b:3e:55:5e:7e:
fd:ab:3e:6a:1e:d2:a4:5a:43:9c:ed:71:87:59:0c:58:bd:cf:
95:11:94:1b:d8:c0:b6:5a:3e:d9:60:7e:19:82:39:5b:5f:53:
79:ea:a4:e0:17:85:2f:65:8f:7b:d5:1c:d1:90:71:8f:0b:d7:
41:f7:5a:73:cf:a4:2f:0a:98:64:94:00:76:e0:1f:b1:3a:e8:
ed:6a:74:2f:08:6a:f4:dd:47:cc:4f:d3:cc:b1:83:61:c5:4f:
ec:ae:07:5e:f4:44:85:4a:47:34:1d:60:ed:d5:97:b3:07:8b:
9e:78:87:c0:32:6f:a8:24:00:01:63:00:9c:00:6b:87:cb:00:
9c:a2:a1:5f:7e:2c:1e:27:5b:6a:1a:34:db:3c:b3:72:09:88:
8d:82:37:56:68:27:97:7a:53:34:54:cb:57:cd:0f:8e:ff:94:
2d:3a:24:d6:d8:33:4a:90:12:e5:8c:28:11:9a:fd:b5:15:10:
cb:1c:ff:78:63:76:d0:e5:8f:55:7d:7e:20:c9:6a:cc:18:84:
32:44:80:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:27:49 2026 by rpki-client