
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/RGuswfLoFnPqtvFskIC154B2lkc.mft
File: RGuswfLoFnPqtvFskIC154B2lkc.mft (raw, json)
Hash identifier: 9vQ6iEUy0ekmbpzWavl3VqQxDGFZY5A8bB3lbHIZqmw=
Subject key identifier: 5C:CC:14:93:C5:E9:D4:92:47:8C:70:BE:05:1D:7B:2F:0B:2B:E0:93
Authority key identifier: 44:6B:AC:C1:F2:E8:16:73:EA:B6:F1:6C:90:80:B5:E7:80:76:96:47
Certificate issuer: /CN=A91EF175/serialNumber=446BACC1F2E81673EAB6F16C9080B5E780769647
Certificate serial: 87
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGuswfLoFnPqtvFskIC154B2lkc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/RGuswfLoFnPqtvFskIC154B2lkc.mft
Manifest number: 020B
Signing time: Thu 21 May 2026 04:30:38 +0000
Manifest this update: Thu 21 May 2026 04:30:38 +0000
Manifest next update: Thu 28 May 2026 04:30:38 +0000
Files and hashes: 1: RGuswfLoFnPqtvFskIC154B2lkc.crl (hash: E5BzkXHFdU592NzW5w5E+eEnFFDZtO+moXy5Pux7vDo=)
2: 9F2B6B24974E11F0AA132215C4F9AE02.roa (hash: /PPCucb3rpcMjVk0hwKfACTW/pCOZ+o1VNXffBXVozM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/RGuswfLoFnPqtvFskIC154B2lkc.crl
rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/RGuswfLoFnPqtvFskIC154B2lkc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGuswfLoFnPqtvFskIC154B2lkc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:30:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135 (0x87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF175, serialNumber=446BACC1F2E81673EAB6F16C9080B5E780769647
Validity
Not Before: May 21 04:30:38 2026 GMT
Not After : May 28 04:30:38 2026 GMT
Subject: CN=6a0e8a6e-c461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8a:73:5f:b5:b4:09:05:80:f3:75:66:5a:cf:
14:dd:11:09:7b:79:2f:ee:72:29:5d:52:74:c9:63:
be:f4:34:02:f0:32:1c:8e:75:c7:12:08:de:16:08:
14:ce:53:73:6f:f8:36:20:48:24:b7:30:3e:52:4b:
54:95:5a:df:c1:9f:35:2e:64:97:23:1e:c9:3d:26:
7c:fb:b0:0b:e0:41:aa:cc:58:ca:62:fe:31:d7:2d:
98:ad:a3:f3:4c:7d:34:71:1f:ed:ce:77:19:65:54:
de:3f:0e:ac:4c:ef:ef:8e:06:3a:db:2e:ad:1e:6d:
43:20:8f:7f:8c:d7:86:f0:7e:d2:6f:2b:ac:92:9f:
54:90:bf:61:c6:a7:ca:35:07:c3:35:ac:63:92:65:
40:50:6c:8f:42:d5:91:ad:11:f5:40:95:9c:c1:50:
3b:e9:ba:a2:ee:5a:38:71:bb:3f:1d:e6:65:08:36:
cf:23:86:e2:78:3c:41:fe:3a:67:e5:2e:b1:56:60:
3b:aa:11:eb:a7:32:74:19:aa:4c:4c:a0:db:a5:f1:
61:67:81:2e:d7:9e:d9:cb:8a:0f:e7:30:77:a2:9f:
18:97:fd:29:10:61:57:e4:d3:6a:1b:7c:be:4c:7e:
e0:fe:02:24:38:2e:a6:ab:19:7d:34:72:24:90:ab:
5b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:CC:14:93:C5:E9:D4:92:47:8C:70:BE:05:1D:7B:2F:0B:2B:E0:93
X509v3 Authority Key Identifier:
keyid:44:6B:AC:C1:F2:E8:16:73:EA:B6:F1:6C:90:80:B5:E7:80:76:96:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/RGuswfLoFnPqtvFskIC154B2lkc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGuswfLoFnPqtvFskIC154B2lkc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/RGuswfLoFnPqtvFskIC154B2lkc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:73:e8:fb:ca:cb:29:f0:a5:cb:bd:1d:b3:f4:df:cb:fa:bb:
19:17:49:97:20:e3:56:dc:e5:74:db:19:23:79:15:9a:69:4f:
46:04:89:be:26:0c:ab:95:d6:83:4c:ec:5c:0a:16:ba:53:ec:
d9:99:55:e2:d4:72:db:8d:e7:5a:70:d6:59:5d:da:74:25:ef:
d2:37:f4:34:ce:84:a8:2a:33:6d:eb:6a:d4:9b:23:fe:66:5a:
ec:61:47:3a:56:3b:eb:b7:21:65:46:c3:88:12:ea:16:74:c9:
fc:c3:78:d6:35:19:7f:6e:8b:03:54:1c:61:29:7e:dc:93:a0:
29:52:fb:e1:a5:03:bf:be:f3:ae:f2:c1:5b:82:c2:c7:89:72:
16:d8:62:f2:be:ad:48:7f:2c:1d:b2:63:a5:51:9b:ee:9c:dc:
c9:5d:99:66:3d:f3:53:35:ec:66:d2:37:e7:d0:db:06:ee:bd:
e5:4d:ec:ea:aa:ce:d1:04:c0:4e:68:ce:e2:d4:54:ba:3c:67:
65:7b:d1:ff:eb:a3:30:62:8f:5e:b9:ac:28:6c:11:e1:1c:8e:
48:b5:a0:6c:a2:39:50:e2:3b:3f:21:cf:ee:e5:47:d9:14:be:
6e:5c:7a:a5:73:d4:a4:82:89:47:00:03:95:59:37:15:e8:3d:
64:b3:d7:49
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUYxNzUxMTAvBgNVBAUTKDQ0NkJBQ0MxRjJFODE2NzNFQUI2RjE2QzkwODBCNUU3
ODA3Njk2NDcwHhcNMjYwNTIxMDQzMDM4WhcNMjYwNTI4MDQzMDM4WjAYMRYwFAYD
VQQDEw02YTBlOGE2ZS1jNDYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv4pzX7W0CQWA83VmWs8U3REJe3kv7nIpXVJ0yWO+9DQC8DIcjnXHEgjeFggU
zlNzb/g2IEgktzA+UktUlVrfwZ81LmSXIx7JPSZ8+7AL4EGqzFjKYv4x1y2YraPz
TH00cR/tzncZZVTePw6sTO/vjgY62y6tHm1DII9/jNeG8H7Sbyuskp9UkL9hxqfK
NQfDNaxjkmVAUGyPQtWRrRH1QJWcwVA76bqi7lo4cbs/HeZlCDbPI4bieDxB/jpn
5S6xVmA7qhHrpzJ0GapMTKDbpfFhZ4Eu157Zy4oP5zB3op8Yl/0pEGFX5NNqG3y+
TH7g/gIkOC6mqxl9NHIkkKtbYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFzMFJPF
6dSSR4xwvgUdey8LK+CTMB8GA1UdIwQYMBaAFERrrMHy6BZz6rbxbJCAteeAdpZH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE3NS8wNDYwQUExOEZC
RkIxMUVFQTFFRUFGMUZDNEY5QUUwMi9SR3Vzd2ZMb0ZuUHF0dkZza0lDMTU0QjJs
a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JHdXN3ZkxvRm5QcXR2RnNrSUMxNTRCMmxrYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RjE3NS8wNDYwQUExOEZCRkIxMUVFQTFFRUFGMUZDNEY5QUUwMi9SR3Vzd2ZMb0Zu
UHF0dkZza0lDMTU0QjJsa2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkHPo+8rLKfCly70ds/Tfy/q7GRdJlyDjVtzldNsZI3kVmmlPRgSJviYMq5XW
g0zsXAoWulPs2ZlV4tRy243nWnDWWV3adCXv0jf0NM6EqCozbetq1Jsj/mZa7GFH
OlY767chZUbDiBLqFnTJ/MN41jUZf26LA1QcYSl+3JOgKVL74aUDv77zrvLBW4LC
x4lyFthi8r6tSH8sHbJjpVGb7pzcyV2ZZj3zUzXsZtI359DbBu695U3s6qrO0QTA
TmjO4tRUujxnZXvR/+ujMGKPXrmsKGwR4RyOSLWgbKI5UOI7PyHP7uVH2RS+blx6
pXPUpIKJRwADlVk3Feg9ZLPXSQ==
-----END CERTIFICATE-----
Generated at Thu May 21 15:03:40 2026 by rpki-client