
$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft
File: -gRcYwK4c-iDZfqaAhSZtPPFhog.mft (raw, json)
Hash identifier: B6XvGkdaIIaagT5/Dp6fG3u9CIPxQQYMrtDXhtstCCQ=
Subject key identifier: 03:5D:82:1F:71:30:70:24:1C:FC:4C:0E:41:B1:6A:F7:A2:AF:56:99
Authority key identifier: FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88
Certificate issuer: /CN=A91853D3/serialNumber=FA045C6302B873E88365FA9A021499B4F3C58688
Certificate serial: 062A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft
Manifest number: 060A
Signing time: Fri 12 Jun 2026 23:01:27 +0000
Manifest this update: Fri 12 Jun 2026 23:01:27 +0000
Manifest next update: Fri 19 Jun 2026 23:01:27 +0000
Files and hashes: 1: -gRcYwK4c-iDZfqaAhSZtPPFhog.crl (hash: Gl9D387CS5wihUTmrg5LEJJS9/9EzWRvWSwvzg3mnwM=)
2: 52A1A77A6ECF11F0B2785815C4F9AE02.roa (hash: 99SBr5WJIbWwpgEc6hwr9lvi4BLubRre2gvekG03kuo=)
3: 36C4FAAAA9FC11EEBEF3E64AC4F9AE02.roa (hash: sXo/EfCy1P1hXgj+XVBKjDkQi4E974lDfTItj2KXQOc=)
4: 5C9E3A00E83111F0B570A08B79EE528E.roa (hash: ME2B8uuD8K+ZGXPv64QmrsnI4TiGRtKbpWpIh4aJJVc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.crl
rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 23:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1578 (0x62a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91853D3, serialNumber=FA045C6302B873E88365FA9A021499B4F3C58688
Validity
Not Before: Jun 12 23:01:27 2026 GMT
Not After : Jun 19 23:01:27 2026 GMT
Subject: CN=6a2c8fc7-7aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:10:85:b2:3f:cc:01:c5:d3:ee:31:b7:59:c5:
40:95:f1:e5:93:fb:b5:f8:15:fe:d0:af:aa:1b:fe:
c0:b8:a9:c1:3d:6b:68:35:ba:3b:49:f4:c2:c7:29:
43:89:b4:cb:57:4d:dc:15:49:1a:b7:06:5b:5f:5c:
6e:72:4f:30:57:17:1d:0d:00:85:22:81:a8:8f:e1:
3a:dc:3b:f3:f3:fc:07:e7:c8:13:ae:56:2d:4c:34:
3b:d4:ce:c8:87:3e:33:ec:06:60:f0:87:98:cf:1b:
d3:32:07:d3:05:ee:be:27:9e:ea:a9:57:37:ef:af:
94:6a:74:9c:9b:6e:f4:06:51:26:2c:a4:6a:ae:e0:
70:b0:f1:aa:d4:f6:34:1a:c4:80:eb:fe:02:92:4e:
32:05:c6:69:4e:9d:97:df:24:e3:e1:22:ea:9d:2f:
f0:c6:9d:d7:a9:26:29:96:0a:64:5f:3b:62:56:83:
1a:5f:91:e0:23:10:5f:7e:9e:8e:3b:79:b7:ae:66:
14:09:bd:86:20:19:4e:82:0e:67:23:90:68:f4:b0:
6f:5c:47:0c:89:7d:71:49:5b:58:25:69:e2:6e:8d:
c4:c1:9e:96:71:76:57:57:9b:af:05:5e:c2:08:ad:
9d:3c:fc:8d:a4:4a:e6:6a:a3:9f:a5:35:00:36:ce:
2d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:5D:82:1F:71:30:70:24:1C:FC:4C:0E:41:B1:6A:F7:A2:AF:56:99
X509v3 Authority Key Identifier:
keyid:FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:0c:55:e5:85:97:1a:fd:b4:d8:c4:9f:3e:e5:19:a9:e2:07:
e5:0e:f9:d3:17:31:6f:ea:7f:a8:78:bf:20:b9:78:a7:d2:4e:
9a:98:36:58:e7:26:72:8a:c8:47:e8:df:33:c4:f7:1b:6b:39:
45:f9:fa:08:8d:5c:f9:c8:6a:2e:3a:9d:5c:93:3f:6f:a4:b8:
1a:1c:6c:df:d6:01:37:79:a2:79:8c:25:a5:65:29:8a:40:ce:
e4:bb:a9:3c:a7:3f:a5:a7:82:e1:d0:a9:5f:c7:36:f1:38:fd:
76:57:cd:5c:0d:51:73:4e:5f:10:58:1d:e3:29:68:91:f3:7a:
fa:57:9e:2c:ac:c9:1a:2d:b8:cd:23:7f:65:6e:68:c8:65:ca:
52:26:d6:5e:a1:8d:16:09:9f:af:73:07:b1:dd:99:66:bc:d7:
43:e1:03:f1:cb:8d:3f:0b:d9:b6:86:2f:40:75:d9:56:23:34:
a7:47:1d:0d:aa:93:45:26:05:12:44:f3:73:07:14:f8:4d:1a:
00:7a:6f:a3:1b:81:ce:0c:a4:57:df:0f:9f:ce:9d:7d:c7:f3:
ad:b8:9b:01:87:85:d7:0a:02:49:9d:26:37:a0:16:53:9c:83:
cb:e9:b9:1c:05:d9:ab:40:d6:28:1d:22:a7:71:94:cc:68:37:
6d:25:20:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:12:45 2026 by rpki-client