
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft
File: GSl33aoJW0B37g12I4Rj8bb0Cu4.mft (raw, json)
Hash identifier: Y24NT9jyNpZ4xYEyTkjkhfC9RVcW5RzOQETX3r3om6A=
Subject key identifier: 0C:53:B3:41:D4:DC:1A:AB:F9:3A:24:25:26:5D:FF:82:4F:00:2B:1B
Authority key identifier: 19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE
Certificate issuer: /CN=A91F58C9/serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE
Certificate serial: 049C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft
Manifest number: 047F
Signing time: Mon 15 Jun 2026 00:07:55 +0000
Manifest this update: Mon 15 Jun 2026 00:07:54 +0000
Manifest next update: Mon 22 Jun 2026 00:07:54 +0000
Files and hashes: 1: GSl33aoJW0B37g12I4Rj8bb0Cu4.crl (hash: w57w1C5MB3m64N883E/c2qHQD9/sntE1halMgtNLw50=)
2: 18DBE7C624D711F18CA70BCEAB833773.roa (hash: /k5VdAsRv/RZU2O03cM57G3EDORpAmdEgBgLhS+cBqI=)
3: 9FC8CE38936E11EC92AF8421C4F9AE02.roa (hash: vwUFyzVHyN9gmRMfJMr4a16IV2f6KAmtlJCbMeEKz3c=)
4: 2B46EF64951211F0A6C6AF5AC4F9AE02.roa (hash: c7Rbo+oNT+V1uajSdDgXAF7Hq3CeSaeGd4C51hV9pYE=)
5: AF6BB6C21F5A11F0BA7E6961C4F9AE02.roa (hash: oNvJ2OTvgFATATyEIxgWTVA+K6CHCRNnOEmYPy6CiuQ=)
6: AEFCCA501F5A11F0BA7E6961C4F9AE02.roa (hash: y5ImLQShXTdYNOJzkUx9fF2JnCdfm6BVJ7HEJ2KJnqQ=)
7: AFDE92321F5A11F0BA7E6961C4F9AE02.roa (hash: 0WUhBcrZvRWIxNkRVA7Hsg9MfdhdUkLTVgCI3Sna5Fs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.crl
rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 00:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1180 (0x49c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F58C9, serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE
Validity
Not Before: Jun 15 00:07:54 2026 GMT
Not After : Jun 22 00:07:54 2026 GMT
Subject: CN=6a2f425b-3ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bc:da:36:e0:11:82:4b:c6:30:a0:7a:61:c7:
ed:07:cd:05:f6:61:2a:ad:a9:a2:14:c9:e3:d6:48:
4a:6d:d1:bf:57:ce:b4:87:30:c0:b1:fe:55:98:38:
98:e6:6f:aa:08:96:ec:49:9c:41:6a:a0:cd:f3:75:
cb:1b:85:7f:84:18:91:84:ac:a6:3b:ad:fd:be:a7:
02:38:2d:4a:d9:52:33:3a:35:34:11:ca:f5:5a:f1:
12:f6:39:bc:64:34:72:98:7f:0e:63:8b:47:40:8f:
52:a3:6c:d4:58:7d:1b:dd:69:27:16:72:c8:4f:45:
21:10:af:12:36:92:8f:d0:51:7f:f0:c4:4a:b1:19:
12:ba:6f:2b:b6:86:e5:79:19:24:71:67:48:6c:c9:
d5:d4:65:28:4a:70:fb:d4:75:fb:cc:4f:4b:b1:35:
f3:23:39:25:b1:bf:ae:6b:fe:09:ce:77:03:25:2e:
db:8a:91:91:72:4a:2a:f7:5a:69:1e:ab:12:22:27:
4f:ac:e5:f6:aa:a2:10:a2:80:8d:d1:a9:5a:83:6a:
9d:d2:75:07:98:49:46:49:4b:c5:b9:b3:48:ec:d5:
e4:2e:64:76:51:d1:7f:16:38:fe:5b:cd:5a:45:0e:
d8:b5:7c:c5:60:80:2d:57:d5:c0:6b:11:0d:18:dc:
04:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:53:B3:41:D4:DC:1A:AB:F9:3A:24:25:26:5D:FF:82:4F:00:2B:1B
X509v3 Authority Key Identifier:
keyid:19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:b1:f5:40:c1:74:a7:38:01:81:a1:0d:aa:a7:f5:21:48:28:
0a:c5:47:6d:e6:b6:2a:0c:bd:81:82:8d:7d:6c:35:c4:e2:c1:
1b:80:e0:c3:a7:76:2b:cb:0a:44:5a:c4:53:2f:82:09:99:5f:
2a:2b:22:45:b2:be:a8:ff:12:ae:5e:a7:de:ca:fa:9d:69:c5:
6c:97:e1:86:69:1f:e0:16:95:69:14:40:48:c5:4c:ee:9e:b9:
76:f5:91:d9:ec:43:43:47:c5:56:a6:b4:40:06:a8:34:43:3c:
de:20:e1:79:21:12:18:27:26:e3:1d:bd:6e:78:f4:f1:c0:3f:
ca:bb:22:ce:39:c9:4b:40:da:d1:5f:56:5a:85:e7:0a:ee:47:
4d:94:a0:14:a2:b6:7d:b8:37:4f:39:46:74:5a:89:b4:a5:1e:
68:ea:2a:19:ac:2c:f8:22:8f:5b:0c:12:4d:15:28:cc:a9:a0:
38:56:62:2c:0a:0c:7d:b0:f0:80:8b:58:ee:4a:fa:fc:60:b6:
a3:ad:53:c5:4f:f6:fb:85:3f:21:82:9e:e3:4a:11:2d:00:66:
78:45:98:ea:00:a5:5a:af:cd:d0:1c:a6:37:9d:da:78:2e:db:
dd:c7:db:75:96:be:31:18:d1:00:f6:f9:a3:1b:f4:00:5d:3a:
1d:48:90:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 14:26:07 2026 by rpki-client