
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft
File: GAee5DmNZxvWR_yoKieU5QowR70.mft (raw, json)
Hash identifier: FHGSeOcdG+Tt4zeNnNASC3TMr66LZhWOUaFkljrcRT4=
Subject key identifier: 6E:50:0C:C3:01:CD:42:20:F8:61:79:C4:0B:86:EA:C3:0D:16:B2:73
Authority key identifier: 18:07:9E:E4:39:8D:67:1B:D6:47:FC:A8:2A:27:94:E5:0A:30:47:BD
Certificate issuer: /CN=A91DFBE1/serialNumber=18079EE4398D671BD647FCA82A2794E50A3047BD
Certificate serial: 0B0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft
Manifest number: 0AFE
Signing time: Tue 30 Jun 2026 19:55:06 +0000
Manifest this update: Tue 30 Jun 2026 19:55:06 +0000
Manifest next update: Tue 07 Jul 2026 19:55:06 +0000
Files and hashes: 1: GAee5DmNZxvWR_yoKieU5QowR70.crl (hash: xtqo6aEeYRiPBh3s+HbsSHrj/gdf/YLMCOKYB0806Vs=)
2: F23D65727CAF11ED87752A6BC4F9AE02.roa (hash: QfaWCwe/qZDBNL7SvK9BdlJZP0tZLuQpHfGjUMElff4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.crl
rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 07 Jul 2026 19:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2826 (0xb0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFBE1, serialNumber=18079EE4398D671BD647FCA82A2794E50A3047BD
Validity
Not Before: Jun 30 19:55:06 2026 GMT
Not After : Jul 7 19:55:06 2026 GMT
Subject: CN=6a441f1a-a5ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b5:70:b6:d7:e2:57:36:7f:e0:db:d8:61:f5:
c8:af:59:33:76:2f:ab:39:e7:6d:de:90:71:d9:46:
8b:24:7b:df:56:2d:d6:44:b5:ca:09:bb:c0:7b:29:
e3:11:b6:25:c6:33:3e:ed:ea:0a:66:e3:00:14:b5:
70:4f:db:fa:36:56:98:7b:f9:7b:ac:1a:ab:36:18:
8d:92:e1:a5:ca:5c:3a:51:8e:57:aa:24:89:05:04:
fe:d7:91:a5:10:dd:4f:2c:76:4a:de:6d:a6:8e:ac:
ef:d7:e4:bc:62:76:51:c6:b2:30:cf:9d:76:92:3a:
e1:bf:b4:eb:0b:e2:76:53:3e:16:cd:e7:24:e3:30:
29:e4:75:8a:6d:11:62:18:b0:aa:21:95:cc:f6:7e:
b9:b2:7e:5c:9b:b1:fa:f8:30:79:2a:db:33:eb:c1:
c7:14:4e:cd:bd:38:2f:bd:c1:bc:d9:59:35:42:a5:
27:1d:98:ca:45:76:30:9f:be:61:91:ad:42:84:fb:
8a:34:b1:ad:14:8b:a3:cc:ce:08:a2:94:7a:bd:e0:
d2:ef:90:3b:87:c0:6c:9e:53:3b:7b:13:f0:68:75:
77:bd:d0:3e:0f:ce:7d:cf:35:7d:b9:39:f0:65:ce:
3b:ba:ef:71:35:2a:45:dc:8b:e0:8a:0f:f7:61:5c:
6d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:50:0C:C3:01:CD:42:20:F8:61:79:C4:0B:86:EA:C3:0D:16:B2:73
X509v3 Authority Key Identifier:
keyid:18:07:9E:E4:39:8D:67:1B:D6:47:FC:A8:2A:27:94:E5:0A:30:47:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:85:9a:f7:02:a3:aa:74:e8:01:af:56:08:1f:da:63:24:0b:
cd:89:c3:4b:55:93:93:ff:04:2d:0d:a5:18:28:e4:33:fa:da:
1c:c6:b6:3b:aa:fc:a3:3e:51:12:72:a2:f6:ac:4d:65:da:cd:
4a:e3:eb:bf:20:d8:e1:84:79:a7:8b:be:e9:60:f8:ea:0f:2b:
7b:86:42:bc:88:96:54:b1:b1:92:4f:ba:01:0f:0e:f9:40:8c:
22:79:df:bc:69:4e:f5:5b:3c:87:7e:60:3d:b3:97:0d:32:f1:
58:45:2c:51:ce:29:44:91:88:d6:2d:7e:3e:71:cc:b3:8e:d4:
49:43:fd:38:fd:ab:81:fd:bf:b2:f1:ac:4b:53:6a:21:f2:bd:
8d:8e:fe:c5:0a:4a:66:f8:0a:3e:a4:69:77:e1:46:7c:e7:0c:
02:42:98:c7:7b:6e:de:f9:3d:cd:ae:55:cc:42:58:53:89:67:
31:87:01:3b:56:dd:bb:9e:37:52:f2:fe:f9:51:fc:e6:d8:94:
85:70:08:b1:14:3e:f1:06:a4:d2:4c:9b:38:0e:af:2a:9c:1b:
9d:08:0c:87:11:cb:b7:93:9e:38:f5:09:9b:28:32:6f:04:86:
25:16:38:96:7e:81:fe:91:8a:be:8b:ec:ec:29:5b:2e:2a:c0:
da:a9:01:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 2 11:09:03 2026 by rpki-client