
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft
File: GAee5DmNZxvWR_yoKieU5QowR70.mft (raw, json)
Hash identifier: YCHZRbx3Mbjv6xRfvI73uWhepu7G52uLYNY1q1NTd/U=
Subject key identifier: 35:87:5C:06:D7:72:F3:2C:15:CA:17:FC:7E:3B:42:19:56:AF:A9:B3
Authority key identifier: 18:07:9E:E4:39:8D:67:1B:D6:47:FC:A8:2A:27:94:E5:0A:30:47:BD
Certificate issuer: /CN=A91DFBE1/serialNumber=18079EE4398D671BD647FCA82A2794E50A3047BD
Certificate serial: 0AF2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft
Manifest number: 0AE6
Signing time: Thu 14 May 2026 19:27:28 +0000
Manifest this update: Thu 14 May 2026 19:27:28 +0000
Manifest next update: Thu 21 May 2026 19:27:28 +0000
Files and hashes: 1: GAee5DmNZxvWR_yoKieU5QowR70.crl (hash: nx3PndG91drhrURQfhNN9a62cn5PXNn7hRCcENETAcU=)
2: F23D65727CAF11ED87752A6BC4F9AE02.roa (hash: QfaWCwe/qZDBNL7SvK9BdlJZP0tZLuQpHfGjUMElff4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.crl
rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 21 May 2026 19:27:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2802 (0xaf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFBE1, serialNumber=18079EE4398D671BD647FCA82A2794E50A3047BD
Validity
Not Before: May 14 19:27:28 2026 GMT
Not After : May 21 19:27:28 2026 GMT
Subject: CN=6a062220-0e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bb:f9:76:e6:51:88:9a:f1:4a:e4:7d:1f:a2:
ae:d5:f2:62:f5:6e:8c:e1:1b:b1:5c:ec:bf:55:a6:
bb:d0:03:53:29:ea:8c:b2:c2:ba:83:a1:b2:c2:ae:
8b:30:d7:0f:ee:47:c5:cc:9e:24:3f:d6:5b:ff:c8:
05:13:97:2d:69:0b:a1:d5:43:ac:d9:01:94:6c:c7:
fe:cf:e1:24:93:d6:82:34:b5:41:d8:74:10:95:8b:
c9:8a:bc:e4:29:2b:fb:d4:14:68:93:c5:aa:82:f8:
c7:4b:98:8c:83:cb:77:e0:73:b4:00:a8:7b:36:00:
61:29:22:02:af:7f:0a:ba:10:2c:bc:92:48:ae:0f:
01:3b:d1:32:35:e5:ae:c8:04:e1:e8:63:6e:ff:d9:
0d:e8:ad:8c:07:7f:98:78:5c:3d:88:bf:98:90:f6:
58:90:50:75:86:63:d8:cb:ff:c7:25:a9:44:1f:f3:
50:e7:cf:52:49:06:2d:4d:75:76:62:51:80:f5:ec:
89:e0:35:95:e9:9e:61:e6:68:90:8b:44:df:e1:aa:
6a:a8:d1:30:c6:eb:61:f8:ed:89:72:f6:64:be:7f:
17:de:15:49:38:05:08:a7:9d:86:0e:ad:ea:0d:65:
d7:03:fa:ea:4d:0b:78:f6:4b:7b:86:b5:2e:a3:41:
67:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:87:5C:06:D7:72:F3:2C:15:CA:17:FC:7E:3B:42:19:56:AF:A9:B3
X509v3 Authority Key Identifier:
keyid:18:07:9E:E4:39:8D:67:1B:D6:47:FC:A8:2A:27:94:E5:0A:30:47:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:04:a0:79:3c:91:2c:98:df:6e:d6:46:48:30:84:ca:28:71:
8b:29:48:9a:ec:2f:8e:4c:3c:0f:fa:2c:3f:07:56:a7:70:ee:
e5:c6:2a:f6:b6:3e:29:27:d9:29:71:16:49:0d:70:d0:44:08:
c8:fc:a5:d3:7b:b4:cb:cf:1f:89:2a:3d:a6:a4:ca:8d:d0:37:
b3:63:74:5f:0a:78:38:bd:6c:64:52:e1:45:b6:1c:64:8e:ca:
99:e3:5a:94:fa:b2:a4:15:9d:8d:13:15:ba:c9:29:af:cc:d9:
59:2e:46:61:e8:22:a7:7c:4b:28:75:68:fa:09:f2:95:83:84:
14:2e:51:ee:21:a1:1a:c3:e3:08:70:dd:07:92:03:7e:be:8a:
54:72:e2:eb:84:70:d5:6e:e3:4d:cc:27:ee:8f:c5:eb:5d:cb:
94:00:9d:f1:c6:55:c1:7b:c1:9d:0d:e0:db:7c:de:ee:5d:da:
2a:09:34:66:6c:56:8b:ed:05:90:7d:9a:5f:1d:56:28:86:d2:
09:97:82:42:ec:cf:f8:7e:55:14:0e:85:08:ab:81:ee:b7:76:
03:c4:db:de:df:50:d6:40:a1:95:49:08:e2:b5:6b:00:50:52:
c2:15:18:6a:b0:30:22:72:13:a0:7d:0c:a2:fc:54:d2:b9:5c:
fe:f2:67:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 21:08:49 2026 by rpki-client