
$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft
File: -gRcYwK4c-iDZfqaAhSZtPPFhog.mft (raw, json)
Hash identifier: i8wR2Ex86EGjbGqz8C+kuLjizP0e+ANGqKRBm0QcJ0c=
Subject key identifier: D3:D6:8B:53:4C:60:70:CF:38:88:3D:7B:89:0D:70:10:C7:39:4E:10
Authority key identifier: FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88
Certificate issuer: /CN=A91853D3/serialNumber=FA045C6302B873E88365FA9A021499B4F3C58688
Certificate serial: 0608
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft
Manifest number: 05EB
Signing time: Thu 16 Apr 2026 22:58:48 +0000
Manifest this update: Thu 16 Apr 2026 22:58:47 +0000
Manifest next update: Thu 23 Apr 2026 22:58:47 +0000
Files and hashes: 1: -gRcYwK4c-iDZfqaAhSZtPPFhog.crl (hash: /OUO1TyB/n5q6UBKTch9Uwt91bp8uthcpRGjxbSYMSM=)
2: 52A1A77A6ECF11F0B2785815C4F9AE02.roa (hash: BJpks1gOb51AQCv2clwa4s1WpHhotp2F+Z4P3kGOQPE=)
3: 5C9E3A00E83111F0B570A08B79EE528E.roa (hash: tNb9AqniNMGiccuAfhw4fufXJvoKBwPNTf9UHPrYX8U=)
4: 36C4FAAAA9FC11EEBEF3E64AC4F9AE02.roa (hash: ahWWs0kZBjkLDlGiJDE5aUNwMLJFe7OoP0FqUJEFa+k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.crl
rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:58:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1544 (0x608)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91853D3, serialNumber=FA045C6302B873E88365FA9A021499B4F3C58688
Validity
Not Before: Apr 16 22:58:47 2026 GMT
Not After : Apr 23 22:58:47 2026 GMT
Subject: CN=69e169a7-23a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:48:f0:25:a1:6c:c1:52:d8:c2:07:17:c6:3f:
06:17:66:ac:31:66:44:9c:cc:da:6a:e2:74:65:f8:
1f:94:6b:56:95:96:95:f1:54:a1:e0:c4:ff:18:f3:
d5:33:d6:f7:38:28:17:27:94:9b:78:a4:12:ae:d0:
6a:8b:14:b9:c7:1a:bb:e3:f7:89:fa:86:21:fe:21:
3a:ab:a1:0f:d0:22:45:87:f3:10:c9:c5:00:05:42:
f1:8e:ed:3f:7d:b1:d1:5a:6e:ce:b8:16:88:2e:c0:
a3:6b:22:97:a6:79:ff:88:63:93:4e:a8:f5:3c:5b:
55:a2:7b:3f:78:91:cb:ba:e4:81:6a:b4:8e:4d:00:
b2:78:4a:71:0f:37:f1:60:02:cf:02:19:2d:73:e5:
f2:df:36:3e:08:d5:08:35:0b:e0:08:e6:1f:3a:d6:
bf:12:20:fc:41:df:6a:bf:3e:1e:d4:1e:98:09:4a:
8c:6c:09:ce:57:34:29:79:f3:fd:09:e1:1e:3f:5d:
4c:d9:f9:4d:a9:98:6d:ca:46:ef:9b:a1:4f:5f:37:
23:b5:8a:44:6e:9b:08:8e:0c:19:ae:8e:43:2b:96:
07:85:81:b2:41:a2:cd:1b:30:d1:36:ef:ea:f0:43:
cb:80:f7:9d:ac:dd:fe:8c:22:de:e3:91:f0:b5:a0:
16:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D6:8B:53:4C:60:70:CF:38:88:3D:7B:89:0D:70:10:C7:39:4E:10
X509v3 Authority Key Identifier:
keyid:FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:1b:d8:54:7a:4b:6f:d0:17:63:c3:97:c2:ae:ac:e1:51:63:
13:22:22:27:63:3d:de:11:48:a7:01:78:b8:08:a5:4e:ed:3a:
68:56:c5:56:29:40:b8:fe:a1:da:66:7d:ae:15:4e:3d:5d:d7:
d2:5b:76:d9:9e:46:52:b8:61:5f:4d:bb:46:5b:5d:69:c2:73:
86:4c:c0:f4:f2:11:4d:69:b5:67:83:6a:c1:32:c5:4c:38:e5:
e9:0e:2d:c8:5c:ad:8a:9b:83:8b:1e:30:4a:d7:cc:69:0d:2b:
f7:4f:34:5b:64:6a:4b:c6:da:03:bc:55:ef:57:62:95:8d:fb:
c8:33:10:d6:5c:1c:39:51:29:94:20:46:4f:e4:10:be:69:10:
4d:4e:b0:26:3c:71:24:66:ac:f4:29:d0:4e:8a:4e:e1:a9:95:
7b:11:ac:c2:bd:b0:67:65:d7:ff:3b:74:eb:23:f2:f0:ec:11:
49:a2:38:b2:77:f9:8a:75:90:40:37:34:75:50:a8:41:b6:29:
d6:38:ef:e4:f6:43:ae:db:11:4b:49:89:89:fd:03:7d:3f:f8:
52:b2:88:8b:f0:ac:12:bf:9d:fb:a1:05:36:4d:21:ca:fa:9c:
19:26:5c:97:9b:df:bb:1a:ec:f6:32:84:58:5a:ec:04:7f:57:
0c:0d:91:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:36:50 2026 by rpki-client