
$ rpki-client -vvf rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft
File: GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft (raw, json)
Hash identifier: wIfP5tTprlFKVK1BLmP3KZHwyeHGesBL503+R12WmOc=
Subject key identifier: F9:E1:13:EB:17:32:B8:4A:23:60:21:4F:0F:AC:3F:0C:89:2A:5B:2C
Authority key identifier: 19:CA:97:F9:EC:B5:0C:58:4D:1B:FB:D6:B7:45:02:41:39:A0:15:22
Certificate issuer: /CN=A91475C0/serialNumber=19CA97F9ECB50C584D1BFBD6B745024139A01522
Certificate serial: 1377
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GcqX-ey1DFhNG_vWt0UCQTmgFSI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft
Manifest number: 135B
Signing time: Sat 18 Apr 2026 16:54:05 +0000
Manifest this update: Sat 18 Apr 2026 16:54:05 +0000
Manifest next update: Sat 25 Apr 2026 16:54:05 +0000
Files and hashes: 1: GcqX-ey1DFhNG_vWt0UCQTmgFSI.crl (hash: 9/RpatG6CUD/V3NuarQ5jCXYm/5CemTa9iDjrzQIlKM=)
2: 13F37A72C14C11E888561034C4F9AE02.roa (hash: sd9+ALp0YYtvXLfArPgRGvjlT/zp9F/rCyw3tuwyW5c=)
3: 1341A108C14C11E888561034C4F9AE02.roa (hash: oSnGk4vYQJveQWXL86sB7flSt8Jy820qrGLOu1rn4Eg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.crl
rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GcqX-ey1DFhNG_vWt0UCQTmgFSI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 16:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4983 (0x1377)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91475C0, serialNumber=19CA97F9ECB50C584D1BFBD6B745024139A01522
Validity
Not Before: Apr 18 16:54:05 2026 GMT
Not After : Apr 25 16:54:05 2026 GMT
Subject: CN=69e3b72d-60e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:25:94:d5:1f:58:ed:90:56:93:4a:9f:87:11:
50:7e:be:fa:6c:ef:a7:3b:07:2b:39:ce:d2:f3:60:
69:f6:d3:b1:65:1f:3a:45:55:9f:d0:85:0f:d8:20:
0b:5b:c4:fa:de:0a:fc:09:30:5f:1c:18:74:c7:4d:
fe:26:63:5f:3f:0d:e6:d3:c6:7c:c7:b3:3f:aa:1e:
7f:2d:d4:58:e4:51:79:91:f1:e2:7c:6f:ff:49:db:
2a:ff:46:46:26:87:66:a1:b0:89:0c:b4:88:26:a7:
f6:7b:cc:87:77:9f:83:46:d2:9b:3b:7e:59:58:5b:
d5:ff:c2:08:71:a8:ca:47:d4:c1:05:bf:34:db:6d:
7b:0f:0f:e8:6b:38:ca:59:2c:20:d6:cc:63:cf:2f:
74:8a:7c:b6:2e:fd:58:83:a4:81:88:ed:dc:bc:a9:
2a:35:54:50:06:e4:59:f4:c8:50:20:0f:88:0b:c2:
cd:8a:12:86:c2:1f:ed:5f:0a:16:50:c5:c0:1d:2c:
8f:42:04:bd:fd:93:6a:5c:77:8b:11:cc:b7:34:bb:
47:08:19:ab:13:91:f8:f1:ad:df:94:37:53:14:e8:
e7:03:fb:6f:aa:50:aa:64:2b:cd:c3:99:bb:23:e3:
cf:3b:54:ca:3c:8d:59:e2:58:dc:b5:5d:79:f6:36:
44:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E1:13:EB:17:32:B8:4A:23:60:21:4F:0F:AC:3F:0C:89:2A:5B:2C
X509v3 Authority Key Identifier:
keyid:19:CA:97:F9:EC:B5:0C:58:4D:1B:FB:D6:B7:45:02:41:39:A0:15:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GcqX-ey1DFhNG_vWt0UCQTmgFSI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:73:48:f9:b6:46:9d:c7:00:a4:bc:01:90:cb:60:8d:78:b4:
18:b3:28:53:dc:e3:d0:c6:aa:6b:0d:4b:1e:25:45:06:ac:1f:
df:02:c7:b3:e9:d5:36:6f:55:b0:63:ee:e1:f5:8c:c4:b9:dd:
e6:09:5e:e5:20:63:f8:e9:79:6c:39:15:57:79:ca:20:51:8e:
75:a8:2a:4a:9c:34:d7:38:75:57:a7:7c:be:9f:15:e3:f9:7f:
25:41:50:16:74:57:2e:63:12:4b:97:2c:68:81:e1:ce:dc:8f:
31:fc:02:af:67:ec:35:bb:3d:08:b7:45:90:8e:3f:8b:38:7f:
b9:80:16:78:3e:62:00:b5:49:e5:6a:e3:90:cd:5e:8d:76:e9:
34:a0:f4:38:58:04:19:aa:3f:11:69:a3:fc:ba:50:13:8a:54:
81:c5:b6:ee:ad:9b:e1:78:c4:21:ea:df:6c:3b:d1:b2:61:7a:
95:c3:fe:5c:32:6a:41:95:c9:49:30:5b:34:9a:7d:14:7a:c6:
c2:37:97:00:a3:93:2c:2f:3c:d7:06:b4:09:01:b8:cf:13:d6:
f0:19:61:4d:0e:3d:52:13:27:2c:19:02:11:95:a1:b5:33:b9:
c0:3a:fc:39:3b:d0:03:aa:b8:b4:2f:0b:5d:6a:be:50:21:77:
7a:fe:ad:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:17:37 2026 by rpki-client