
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft
File: gqPk4CGF_7caxsaYwGdUjZzBhxA.mft (raw, json)
Hash identifier: snrT+xPB9YqBmgZZuJWxg9J5ELGveINYH51E/C4BGgU=
Subject key identifier: AF:1F:C8:F0:A0:00:B8:5F:B1:40:0C:69:39:F4:A2:C2:41:2B:07:C6
Authority key identifier: 82:A3:E4:E0:21:85:FF:B7:1A:C6:C6:98:C0:67:54:8D:9C:C1:87:10
Certificate issuer: /CN=A91F33D6/serialNumber=82A3E4E02185FFB71AC6C698C067548D9CC18710
Certificate serial: 0727
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqPk4CGF_7caxsaYwGdUjZzBhxA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft
Manifest number: 0718
Signing time: Wed 20 May 2026 21:59:20 +0000
Manifest this update: Wed 20 May 2026 21:59:20 +0000
Manifest next update: Wed 27 May 2026 21:59:20 +0000
Files and hashes: 1: gqPk4CGF_7caxsaYwGdUjZzBhxA.crl (hash: JZJObj1+FK61HPUn6Ix/1xXp35wrNBQnPq0dkiGaqYM=)
2: 9C53117E83FB11EBB159507AC4F9AE02.roa (hash: AvFpiPzoylVw4G/MsLt4TbCQjir5YYIiqW7GJXdzpek=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.crl
rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqPk4CGF_7caxsaYwGdUjZzBhxA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 21:59:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1831 (0x727)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F33D6, serialNumber=82A3E4E02185FFB71AC6C698C067548D9CC18710
Validity
Not Before: May 20 21:59:20 2026 GMT
Not After : May 27 21:59:20 2026 GMT
Subject: CN=6a0e2eb8-ba1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8e:be:ef:37:74:59:57:cc:08:67:26:24:44:
4e:f5:21:5a:b0:64:7e:3a:73:c8:c7:9e:c7:64:a6:
a6:c3:73:39:53:0f:a2:aa:eb:3b:63:32:14:5b:59:
d4:43:85:20:78:67:1e:a7:f9:cf:b0:84:37:7e:97:
14:0b:ec:19:63:7d:e7:ab:af:34:b9:19:e1:65:8a:
4c:dc:17:23:f7:c6:f0:c8:d9:93:70:28:29:c1:05:
5c:97:e7:35:49:40:de:51:ff:19:06:e6:f3:5f:b1:
5b:8f:b7:0c:96:6e:f8:6c:84:ae:ae:61:3a:23:d5:
f8:de:b0:fe:75:05:80:c0:41:14:f4:35:0a:84:15:
86:ff:23:66:4c:91:5c:f9:80:53:96:37:1e:6b:f0:
47:c7:59:5a:9a:8a:aa:96:e1:53:1e:7f:04:d7:c0:
f0:48:80:d0:19:2a:f2:82:fe:a6:11:ac:f0:fc:1a:
aa:b5:5e:79:6d:47:62:e6:6c:03:8f:81:f4:37:57:
49:b3:da:ee:80:e9:25:b9:1f:7b:20:83:c6:22:5c:
20:52:fb:86:53:38:46:e7:cf:59:b2:7a:8a:c6:a5:
d8:59:7b:6c:df:73:3f:44:8a:b0:c8:e8:c8:28:cd:
b5:4d:2c:51:0d:73:87:85:a3:c3:4d:b4:77:09:03:
b7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:1F:C8:F0:A0:00:B8:5F:B1:40:0C:69:39:F4:A2:C2:41:2B:07:C6
X509v3 Authority Key Identifier:
keyid:82:A3:E4:E0:21:85:FF:B7:1A:C6:C6:98:C0:67:54:8D:9C:C1:87:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqPk4CGF_7caxsaYwGdUjZzBhxA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:3c:78:49:e8:10:0e:26:66:a3:fe:f7:9c:de:70:34:5e:e7:
aa:33:bf:d6:47:d0:c3:1c:53:60:41:44:c2:da:ae:22:7a:97:
8d:9d:7e:ab:e9:e4:1e:fd:95:22:87:7a:42:20:c7:80:13:37:
58:40:4f:8f:8f:2f:34:93:ac:3a:bf:61:71:b1:3f:8e:1a:8e:
aa:9a:cd:de:b4:3e:e2:a0:67:2f:43:86:03:07:27:19:b9:bb:
fb:3a:8a:5d:51:d0:8c:a4:44:6f:3d:00:80:73:1e:29:7e:c6:
1f:a1:0f:9d:dd:80:7f:ec:3c:71:66:65:26:68:c8:03:5b:d3:
b2:3d:c4:6a:37:bb:48:13:1d:9e:10:7c:34:b6:31:7f:e4:3d:
7d:da:1b:58:ae:19:48:e6:d0:f9:1c:58:a5:db:c3:6f:34:62:
d6:6d:c4:6f:79:d2:2f:01:4d:b0:b0:c2:bc:37:b7:0b:4a:57:
9c:7f:10:6b:2f:10:d7:72:dd:fc:27:dc:35:33:e6:ea:89:e9:
c6:9b:5c:08:54:84:1b:ba:b4:48:82:0a:93:5d:d5:29:8f:2d:
02:c7:0f:40:83:c7:d0:ca:ef:eb:bd:44:9e:41:32:75:e0:d6:
c6:46:60:88:ff:69:58:3a:38:4f:22:f3:f2:3a:4c:3d:4f:98:
38:0e:6d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:27:43 2026 by rpki-client