
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft
File: G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft (raw, json)
Hash identifier: nit3NwOPZxQNAFrSgq8Y1hFDIE6S5FYr2n75Qk6sLxo=
Subject key identifier: 41:A4:2C:28:E0:E5:0F:55:92:7C:27:96:35:8F:FA:FC:33:80:E2:AF
Authority key identifier: 1B:A5:AC:FE:4E:CE:99:EA:BB:6E:54:14:65:32:FD:13:73:5C:EF:40
Certificate issuer: /CN=A91DF352/serialNumber=1BA5ACFE4ECE99EABB6E54146532FD13735CEF40
Certificate serial: C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6Ws_k7Omeq7blQUZTL9E3Nc70A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft
Manifest number: BE
Signing time: Tue 19 May 2026 06:47:02 +0000
Manifest this update: Tue 19 May 2026 06:47:02 +0000
Manifest next update: Tue 26 May 2026 06:47:02 +0000
Files and hashes: 1: G6Ws_k7Omeq7blQUZTL9E3Nc70A.crl (hash: nva7p/8XdCKWao80UUckZmE0mYjKU8rITxznPM/gheQ=)
2: BA3FE218315611F0951A037DC4F9AE02.roa (hash: 3K/uHX9v7w+FtMri9upNrCYZ3azhB0XpxwpN3xcyhfs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.crl
rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6Ws_k7Omeq7blQUZTL9E3Nc70A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 26 May 2026 06:47:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 193 (0xc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF352, serialNumber=1BA5ACFE4ECE99EABB6E54146532FD13735CEF40
Validity
Not Before: May 19 06:47:02 2026 GMT
Not After : May 26 06:47:02 2026 GMT
Subject: CN=6a0c0766-ae29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f1:20:e5:f4:02:b8:90:dd:af:0d:56:df:25:
e6:b7:f2:63:f2:41:24:6d:d8:95:5d:73:5d:a1:2b:
f5:3b:df:43:99:59:20:b2:cf:87:81:bb:a0:af:7f:
4f:be:bf:33:7c:be:00:f7:6e:22:04:ab:b9:a4:a0:
ab:66:61:23:e2:9a:bc:10:95:85:5a:52:36:59:61:
7a:49:74:0e:8b:03:26:3a:35:02:0e:16:91:94:9e:
7d:62:b4:3e:19:3c:37:56:e2:46:c9:26:8b:2f:7f:
a3:94:93:34:8c:59:13:b6:aa:f3:a1:7e:0a:19:23:
a0:cc:ce:5e:e7:98:70:2b:f1:f2:3e:8a:0b:2c:c2:
5f:ee:36:4e:bf:99:6e:1f:8d:5f:2a:59:1b:42:b6:
f3:01:3c:68:22:c3:7e:34:d6:96:0c:e0:a9:6f:5e:
d1:e7:e1:2f:c9:7d:44:d2:07:3e:ad:f2:c6:29:52:
07:4d:d4:6e:57:5c:42:e5:b4:4a:eb:ab:ad:33:cf:
ed:71:9f:0e:40:ea:ea:f8:a1:91:ae:c6:a2:7b:09:
49:b5:86:de:5b:6b:79:0d:11:2d:a0:05:f3:fa:19:
dc:98:84:7c:56:3d:ac:67:23:db:e9:a9:2e:bf:48:
2d:f9:fe:eb:53:f8:a0:f7:dd:b5:f1:63:28:66:22:
72:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A4:2C:28:E0:E5:0F:55:92:7C:27:96:35:8F:FA:FC:33:80:E2:AF
X509v3 Authority Key Identifier:
keyid:1B:A5:AC:FE:4E:CE:99:EA:BB:6E:54:14:65:32:FD:13:73:5C:EF:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6Ws_k7Omeq7blQUZTL9E3Nc70A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:11:2f:35:74:0c:14:af:e8:dc:62:ff:04:8b:d1:7d:b0:7f:
74:2c:60:2c:6d:ea:75:a0:49:89:c9:b5:ff:41:33:37:36:56:
69:ce:56:f5:35:64:fb:27:3e:59:58:99:2d:a3:ce:f5:6a:86:
c3:69:87:16:a3:f5:73:21:8b:07:93:74:5a:6b:94:3a:83:c6:
67:92:b1:e2:02:44:31:29:9b:a9:02:5c:38:20:8f:e8:54:8e:
bd:e9:7d:e6:e2:03:49:1a:f7:da:29:78:92:7f:f1:6a:b0:6a:
0d:ac:2e:4a:bf:b8:aa:ad:e7:27:c8:a1:a2:dc:0c:b9:b3:b9:
65:8c:4f:84:cc:e7:6d:83:2c:e3:0d:7b:6f:34:03:d7:97:8c:
d4:bf:ae:bc:3c:76:a2:d5:dc:28:ab:18:a2:fd:d7:b6:2a:4c:
ed:ee:66:c4:a4:70:ca:57:3c:56:d6:50:96:89:d4:88:b2:4c:
d6:a0:fc:e0:c4:ac:c6:e9:0a:e3:a7:29:0b:98:a7:93:ad:12:
a5:81:44:07:c7:d5:11:8e:f4:28:cf:1f:52:f8:ed:1c:d9:28:
51:bc:d4:d6:27:a3:c1:02:fa:70:57:bc:e7:fe:f0:92:9b:e2:
35:0c:58:de:23:e3:40:51:68:fd:40:ef:1f:f9:da:b7:d9:a3:
8c:2e:cc:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:03 2026 by rpki-client