
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft
File: G5HVFg99VrcFqFFsahz0L0ln71Y.mft (raw, json)
Hash identifier: qgWaNjZz2AeJmKVT8EQwx595lwspCc5WnlmeeoyHR+A=
Subject key identifier: EE:CE:6B:88:7D:37:3F:F2:9F:AA:4C:AB:8D:AD:8D:FE:59:EA:15:37
Authority key identifier: 1B:91:D5:16:0F:7D:56:B7:05:A8:51:6C:6A:1C:F4:2F:49:67:EF:56
Certificate issuer: /CN=A91EF554/serialNumber=1B91D5160F7D56B705A8516C6A1CF42F4967EF56
Certificate serial: 0A2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft
Manifest number: 0A1F
Signing time: Fri 14 Aug 2026 19:48:06 +0000
Manifest this update: Fri 14 Aug 2026 19:48:05 +0000
Manifest next update: Fri 21 Aug 2026 19:48:05 +0000
Files and hashes: 1: G5HVFg99VrcFqFFsahz0L0ln71Y.crl (hash: FdErjxl39Yw122uCeazPBo3kyBDeqSzNoFZq2o0CgRo=)
2: A37D1F4AF51A11F08A3A39E6586F56BC.roa (hash: dtXmtJBVm8P8OuQoT+Q52qD+Vudy7GZ/K52aKBTJI5Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.crl
rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Aug 2026 19:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2602 (0xa2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF554, serialNumber=1B91D5160F7D56B705A8516C6A1CF42F4967EF56
Validity
Not Before: Aug 14 19:48:05 2026 GMT
Not After : Aug 21 19:48:05 2026 GMT
Subject: CN=6a7f70f6-cfbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b9:0b:76:39:0b:b7:65:2b:9b:7b:e6:c0:fd:
25:f0:ce:6d:88:4a:9a:f6:c7:5e:b7:50:af:da:5d:
01:49:54:55:47:ed:99:14:06:10:18:64:a8:0e:f5:
bb:aa:83:e2:b0:a1:79:18:a8:04:6a:ea:2d:63:1f:
aa:86:b7:d3:df:cf:aa:ac:f0:e2:6f:a2:de:71:cb:
3b:32:3a:72:03:a6:8d:72:ef:5a:a5:fa:7a:10:2b:
40:fb:bf:de:72:e8:47:87:2e:58:25:92:0b:9d:67:
ef:b0:d5:cd:e8:42:c0:b3:4d:7d:93:b7:f6:75:e4:
bd:50:c9:83:e5:76:7a:dd:40:ed:29:ea:ed:c9:84:
fe:57:6b:ad:55:1c:35:b9:0e:80:c4:a8:34:41:35:
fd:09:5b:29:56:1a:07:35:ac:b9:c4:da:04:37:01:
c1:5c:cc:5d:75:b4:b5:2e:97:0c:9a:8d:ed:ba:6b:
26:9c:65:83:75:cc:66:20:3f:f6:6a:3c:60:6d:80:
93:7b:9e:7a:71:17:8f:c7:f3:7d:98:b0:0b:82:df:
60:25:7c:e9:20:29:06:b4:79:9c:20:c5:b5:0f:62:
78:5e:f3:9c:6d:89:44:24:29:47:b9:c8:9b:60:64:
5f:c9:fd:81:cd:3b:d9:12:f2:1e:76:26:70:ab:2a:
a8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:CE:6B:88:7D:37:3F:F2:9F:AA:4C:AB:8D:AD:8D:FE:59:EA:15:37
X509v3 Authority Key Identifier:
keyid:1B:91:D5:16:0F:7D:56:B7:05:A8:51:6C:6A:1C:F4:2F:49:67:EF:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:77:0e:4f:bf:ec:fe:d2:15:a5:91:3d:b7:1a:65:03:f5:e0:
44:8e:33:03:f0:ca:a7:26:38:ff:bf:67:50:a6:8b:33:4c:ac:
b9:4f:38:c9:c9:24:c1:f2:02:a4:b4:7a:b5:c3:39:71:6e:10:
49:58:53:d1:2a:1c:cb:24:4c:bc:a5:a3:6c:b5:64:57:12:78:
59:e3:e6:58:e5:ff:de:cb:a9:a9:9e:1a:ff:5f:10:5d:af:2f:
1a:14:97:b5:52:db:df:02:ed:02:e0:73:a9:bf:cb:e7:4f:a3:
25:f4:28:76:1b:90:8f:3e:f1:13:7f:0e:20:b8:e3:d6:e2:bc:
21:96:0c:37:f0:f7:77:ef:63:a0:77:66:01:d4:ab:73:14:4c:
34:71:6b:30:14:c2:d5:40:c7:4d:2b:8c:84:4c:8b:35:98:28:
ed:37:2b:11:6a:ad:5e:29:21:71:ee:a7:78:4f:5a:0f:2c:66:
ca:a0:06:3c:30:d1:8c:28:bb:a3:bc:c3:85:ce:b5:e4:17:1b:
fe:18:be:6c:33:fe:14:6b:83:43:60:f5:c5:47:ad:41:96:29:
ff:94:41:8c:b3:b0:94:9c:4c:52:da:6b:d3:6d:61:22:9d:ee:
0b:b3:98:8a:86:bf:07:fc:20:0b:43:dc:2b:49:45:c5:74:17:
66:e5:6b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 12:58:02 2026 by rpki-client