
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3316/2068C062F2C411F08B84E445396F56BC/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.mft
File: gMq7xd4_e5Mn6sTbqNk2U6EiIQA.mft (raw, json)
Hash identifier: APwqMUXZeorvGrzobp4jdNxy1li8aLv5XAioeOAj2yg=
Subject key identifier: 10:F5:87:E0:66:C2:8A:F3:04:60:29:2A:98:7D:A0:99:5D:01:BC:94
Authority key identifier: 80:CA:BB:C5:DE:3F:7B:93:27:EA:C4:DB:A8:D9:36:53:A1:22:21:00
Certificate issuer: /CN=A91B3316/serialNumber=80CABBC5DE3F7B9327EAC4DBA8D93653A1222100
Certificate serial: 66
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3316/2068C062F2C411F08B84E445396F56BC/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.mft
Manifest number: 5D
Signing time: Sat 13 Jun 2026 08:22:42 +0000
Manifest this update: Sat 13 Jun 2026 08:22:41 +0000
Manifest next update: Sat 20 Jun 2026 08:22:41 +0000
Files and hashes: 1: gMq7xd4_e5Mn6sTbqNk2U6EiIQA.crl (hash: NBWKRuuzXaqCzatMdHWeh8gd59/81sVkjJ773zDaZu8=)
2: 10B9878C243D11F1979A5CDAB9833773.roa (hash: zVqpLd7j0J+K3oi88p50tmt71zBHPtzbECf2RGbri0o=)
3: C96483E226B111F1829C23D9C3833773.roa (hash: xDH8tBv3qmVSVr8LAJxQ8B2DT/UTFhcoFnYkcj6WUeU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B3316/2068C062F2C411F08B84E445396F56BC/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.crl
rsync://rpki.apnic.net/member_repository/A91B3316/2068C062F2C411F08B84E445396F56BC/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 08:22:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102 (0x66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3316, serialNumber=80CABBC5DE3F7B9327EAC4DBA8D93653A1222100
Validity
Not Before: Jun 13 08:22:41 2026 GMT
Not After : Jun 20 08:22:41 2026 GMT
Subject: CN=6a2d1351-a0c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e8:b6:e2:1f:7e:79:e4:ad:5a:3f:d9:83:62:
ea:07:ee:73:4e:6a:83:84:a4:83:49:27:c8:ae:53:
79:8b:f5:e1:39:f9:62:7e:b1:89:84:0b:dd:57:00:
69:0a:a7:06:40:1e:c3:a6:53:84:0c:0b:1d:10:2f:
72:8c:1c:a1:f8:1d:4f:84:2d:b7:41:b4:37:60:89:
f3:c5:18:52:5d:56:9e:3a:40:d9:0d:d7:44:61:e3:
17:b7:65:37:35:ca:94:29:90:b9:8a:99:a7:b7:2c:
63:1b:72:a5:c0:54:da:dc:23:7f:a4:7d:93:5c:2d:
c1:f8:af:2f:8a:96:e6:5a:0c:28:8b:aa:6e:9e:83:
f5:0b:32:66:ed:03:54:31:90:8b:e7:5c:4e:53:b7:
1a:02:b1:36:a7:e2:c6:09:85:65:d6:e7:6d:7f:9d:
15:b2:25:5f:7f:b0:4c:5e:0b:b8:d5:78:86:0f:f2:
a5:8a:86:a1:e4:2a:e1:1f:28:d9:dc:98:da:e3:ec:
b6:fc:73:80:2d:e7:f1:c9:e5:9b:f1:f7:06:a5:01:
a3:7c:06:8a:6c:de:88:f8:09:f2:aa:c5:b5:7d:9d:
c1:52:f5:c4:a2:21:b5:4e:99:00:57:f5:40:8d:50:
73:0b:21:b3:9e:9a:0d:e7:a3:63:33:c8:4e:61:d6:
7d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F5:87:E0:66:C2:8A:F3:04:60:29:2A:98:7D:A0:99:5D:01:BC:94
X509v3 Authority Key Identifier:
keyid:80:CA:BB:C5:DE:3F:7B:93:27:EA:C4:DB:A8:D9:36:53:A1:22:21:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3316/2068C062F2C411F08B84E445396F56BC/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3316/2068C062F2C411F08B84E445396F56BC/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:20:2c:e6:74:87:96:8d:53:f5:ca:d9:b2:2c:53:a2:e8:fc:
af:29:a6:38:61:a6:dd:d4:7b:a7:3e:77:ef:83:90:2c:3c:89:
97:c1:1b:84:ce:33:8c:87:fc:fb:a0:8c:2a:08:a0:29:06:02:
de:21:ed:83:9d:0c:07:bd:e2:f7:5d:f3:c1:00:c2:c8:db:9b:
6e:22:50:9a:06:70:a5:fb:11:9b:03:b3:f6:f8:8b:c9:ec:b1:
a2:fa:30:0d:99:39:b1:49:10:c1:30:0b:e7:2d:06:55:d1:5a:
80:80:2d:7a:27:fa:54:3e:fb:fb:4a:fc:fd:ea:5b:83:b7:e8:
98:10:58:6e:32:7c:d5:48:0a:6c:99:be:a7:cb:7a:64:9d:17:
24:2d:ab:ea:29:7f:f7:e3:83:c3:9e:a6:c6:86:8f:e3:a0:c8:
a8:db:8f:c6:31:cd:b0:73:c4:f1:fc:83:74:46:50:71:30:35:
ae:6b:d7:d0:ae:fd:f8:7a:2b:65:e3:39:74:55:92:57:1a:c6:
7a:b9:54:42:f2:ba:1e:72:22:a3:92:13:33:f2:66:1b:da:b7:
42:08:f7:ec:7a:0e:90:11:66:ee:a2:b0:34:b2:c7:2b:73:e7:
a7:9e:c3:6c:bf:f2:53:5e:80:12:c0:0b:da:81:66:6a:44:b3:
59:68:c4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:00:46 2026 by rpki-client