
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.mft
File: Ga4x-VSBe65iCMNyEQi46P-LP7w.mft (raw, json)
Hash identifier: yJefKpG0yF8/j+HcDDD84f+UQ+kne/O7QMWEn9+n2NU=
Subject key identifier: 50:BF:87:50:52:B2:12:9F:42:F3:31:E1:36:BB:6F:9E:0C:C2:76:B0
Authority key identifier: 19:AE:31:F9:54:81:7B:AE:62:08:C3:72:11:08:B8:E8:FF:8B:3F:BC
Certificate issuer: /CN=A91EEB30/serialNumber=19AE31F954817BAE6208C3721108B8E8FF8B3FBC
Certificate serial: 04EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ga4x-VSBe65iCMNyEQi46P-LP7w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.mft
Manifest number: 04E6
Signing time: Wed 20 May 2026 23:52:10 +0000
Manifest this update: Wed 20 May 2026 23:52:09 +0000
Manifest next update: Wed 27 May 2026 23:52:09 +0000
Files and hashes: 1: Ga4x-VSBe65iCMNyEQi46P-LP7w.crl (hash: gQiTkfyQX0LsZ9Obe42k22FPb5e03Fcf3ZA1/NeeObk=)
2: A87BC510622E11EC92E1870CC4F9AE02.roa (hash: ILh6gBpWmKd6LulzCB0yMdg50i5ZW69Oilb8luyg8cA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.crl
rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ga4x-VSBe65iCMNyEQi46P-LP7w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 23:52:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1262 (0x4ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EEB30, serialNumber=19AE31F954817BAE6208C3721108B8E8FF8B3FBC
Validity
Not Before: May 20 23:52:09 2026 GMT
Not After : May 27 23:52:09 2026 GMT
Subject: CN=6a0e492a-d7f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:16:28:83:5c:f5:42:1a:a6:7d:cd:88:66:b0:
59:51:81:98:2d:59:c9:da:d8:f0:b0:6d:be:0a:ce:
b0:64:87:b8:af:a5:84:1c:a2:bb:4d:00:d0:7a:a4:
d3:ef:bf:c9:db:96:19:b0:3c:39:19:4d:54:ff:14:
43:bd:6d:5b:00:5a:58:3a:db:a9:77:4f:a4:5f:d8:
8b:f7:06:46:66:32:e6:d1:f1:7a:ff:65:cb:25:4a:
37:a4:9e:68:d5:4f:bc:7b:37:cc:19:0a:6e:32:e4:
0d:fc:f7:88:77:99:bd:c3:76:03:5c:7a:6b:63:64:
c5:cb:5f:ad:71:68:22:92:0f:d9:df:cb:ff:6e:38:
13:80:8c:67:d1:7d:b0:b6:8b:ff:c9:c3:d8:ca:cc:
28:2c:37:85:46:d7:43:65:28:dc:81:b8:db:96:46:
1c:dd:1c:2c:63:7e:00:d4:8e:b3:aa:aa:26:ef:18:
9b:86:04:17:5a:71:ea:e3:fe:c8:b9:9d:3d:db:d2:
2d:8d:38:9b:ea:a2:81:1d:2f:12:28:ee:d3:e5:b0:
76:69:50:f5:ce:b1:c7:6c:57:2e:6b:0b:b9:e2:c6:
4c:3c:04:3e:9d:39:c5:b5:eb:fa:eb:44:a3:23:4c:
7e:f6:b8:a4:f5:d0:e8:91:1e:f8:7a:7e:c0:f0:4b:
45:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:BF:87:50:52:B2:12:9F:42:F3:31:E1:36:BB:6F:9E:0C:C2:76:B0
X509v3 Authority Key Identifier:
keyid:19:AE:31:F9:54:81:7B:AE:62:08:C3:72:11:08:B8:E8:FF:8B:3F:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ga4x-VSBe65iCMNyEQi46P-LP7w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:91:60:ff:e0:55:42:f8:6e:54:90:8b:93:69:eb:4b:89:64:
3b:38:11:be:12:d8:ec:f0:7a:bb:41:7e:8f:d9:d6:a8:84:62:
24:63:2c:d6:da:ab:9f:be:0b:de:0c:1b:8f:77:d1:68:14:af:
07:79:03:fe:4b:60:a6:48:76:ce:d5:d8:32:88:fe:e4:b9:92:
69:62:a3:e3:38:6f:47:90:44:c5:c3:c8:64:e5:c5:36:8b:07:
d6:a0:26:3a:02:d0:cb:82:b7:f2:75:6f:c3:8e:06:a1:76:6d:
0e:1b:12:71:21:0c:04:62:04:52:c3:8b:5c:6e:c1:ae:58:0e:
8c:4c:72:1c:e9:91:e1:43:3b:87:91:9c:4e:da:a5:b6:06:7c:
c5:00:b3:0c:2e:3e:6e:fb:ab:15:95:a9:0e:ad:46:05:2b:4d:
72:0b:99:14:26:ce:7d:d1:dd:84:2b:cc:39:2a:22:50:0f:f3:
b2:94:50:bb:25:ec:b6:3b:01:70:8c:40:4e:ab:23:c3:25:d5:
f3:bc:e4:a8:b4:81:f2:f3:bd:3e:fb:ff:34:bb:b8:6f:b1:65:
db:36:b6:40:d7:98:cb:80:4a:74:56:43:2b:50:9d:4b:6a:21:
14:cf:7e:ab:f7:d4:77:c3:b5:d1:be:a2:31:f6:05:83:f7:27:
b4:86:cc:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:11 2026 by rpki-client