
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft
File: GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft (raw, json)
Hash identifier: K4KvO/wE9mp6Hudb7jL9H5RcvfBPmRymH7aiVNSJrWs=
Subject key identifier: DD:72:FE:43:67:64:FE:9C:6D:A9:4B:A0:78:5E:E3:AD:04:8C:8F:5E
Authority key identifier: 19:8C:43:64:CF:03:2C:73:0D:95:85:83:49:82:09:6D:50:A7:52:C9
Certificate issuer: /CN=A91DC931/serialNumber=198C4364CF032C730D9585834982096D50A752C9
Certificate serial: 01A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft
Manifest number: 018F
Signing time: Thu 21 May 2026 04:27:17 +0000
Manifest this update: Thu 21 May 2026 04:27:16 +0000
Manifest next update: Thu 28 May 2026 04:27:16 +0000
Files and hashes: 1: GYxDZM8DLHMNlYWDSYIJbVCnUsk.crl (hash: 8do79kjjaZrHfQQ92oPjtdJ82rl5YMKt4iW7nUSC4Vw=)
2: BBE9AEC0F55F11EEB6F1153CC4F9AE02.roa (hash: aYugIyHCZJwAmq9KTfLv5V2NclVJEThsuFyltYOyWPM=)
3: 24EF88B8F56011EEACB7CB3CC4F9AE02.roa (hash: RetnXjaAIegseVpCIhrfkDQ+YhlmNRwZaGBLZrkdtzk=)
4: 2575F02EF56011EEACB7CB3CC4F9AE02.roa (hash: E/Bp+DLGRsM68zJIAcm7TyJqnOn+olB8QysLXRwz0bI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.crl
rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 417 (0x1a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC931, serialNumber=198C4364CF032C730D9585834982096D50A752C9
Validity
Not Before: May 21 04:27:16 2026 GMT
Not After : May 28 04:27:16 2026 GMT
Subject: CN=6a0e89a4-bfae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c7:a0:95:67:52:88:d0:e4:83:f4:f0:02:52:
7b:14:87:3f:81:87:1f:ad:fa:ed:b8:c3:b6:93:5c:
69:34:c5:27:b2:29:48:bf:b2:07:4c:ae:10:ba:66:
c5:f8:f4:c3:66:a9:12:8d:5d:56:b9:37:d1:d8:06:
e2:8a:21:a7:73:09:76:ab:59:cb:eb:48:cf:27:90:
67:89:66:20:25:55:8c:3d:3f:96:d9:5f:d0:3b:c4:
55:b5:59:77:23:dc:6d:ae:70:95:3b:6f:bc:22:0b:
be:3f:a6:41:c2:30:b5:4d:fc:35:5d:d2:12:b3:e9:
ad:66:6b:da:3e:42:92:6b:3d:17:bf:20:c8:39:49:
25:69:0f:7b:df:df:cb:fc:d8:e1:af:19:f2:68:3d:
13:99:20:50:7b:0b:52:99:b6:54:66:84:fd:3e:2d:
32:51:c9:4b:69:fc:c5:69:78:18:27:b3:f6:c8:79:
58:e1:20:39:37:99:4a:4c:84:9a:e7:99:3c:b7:58:
67:70:52:43:ec:a7:b2:2b:5e:65:86:65:90:0d:2e:
e6:f9:39:f2:ba:4e:fd:6e:4d:c5:7d:8e:6e:22:16:
28:a1:35:75:ed:0f:fd:75:d2:e0:c2:61:49:0a:e4:
a1:27:95:9f:7f:c5:de:a8:32:d1:dc:25:f1:7e:d1:
9c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:72:FE:43:67:64:FE:9C:6D:A9:4B:A0:78:5E:E3:AD:04:8C:8F:5E
X509v3 Authority Key Identifier:
keyid:19:8C:43:64:CF:03:2C:73:0D:95:85:83:49:82:09:6D:50:A7:52:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:d1:b1:87:8f:dd:53:83:36:e5:0d:68:37:62:47:d7:46:c7:
a3:70:fe:86:e3:7f:b0:72:22:1b:c0:94:2f:1d:23:18:ac:54:
fd:15:af:d8:f6:5d:96:94:4c:8a:1b:31:96:c4:af:1c:e8:92:
74:1e:a2:c5:f6:46:a4:ca:20:56:71:29:95:17:87:fc:c2:06:
3b:71:1c:08:0c:57:63:89:37:58:13:c7:a6:a3:6c:d7:c2:46:
50:64:ab:bf:14:36:2f:23:2d:2a:f6:fc:a7:8e:15:12:d6:a1:
13:1f:94:6d:da:f2:33:aa:13:2b:4e:d1:6d:37:c9:38:db:2c:
fd:b9:01:3b:c2:28:33:64:4f:d6:8e:12:01:e1:76:5e:97:2c:
05:20:f4:c3:e4:ab:c4:d2:7a:a1:bd:25:bd:54:6b:b3:d0:08:
61:46:f9:08:3e:85:4a:58:e0:68:29:91:36:bc:92:ea:4d:b5:
9f:1b:ca:dc:e9:96:9e:c7:33:be:31:3a:a4:4b:60:a3:23:0a:
e0:38:9d:d1:77:4d:b3:25:bb:78:92:4f:b3:b9:16:d1:8a:8d:
43:f2:51:a3:89:d7:2e:26:07:12:d2:c9:9d:fe:ac:03:84:3e:
7d:38:4e:56:69:b9:c4:ff:c1:fe:97:d7:18:3b:05:3e:dc:85:
0c:be:df:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:14:59 2026 by rpki-client