
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft
File: G7spe8goFmqkl9N8cmW_tgGuA2A.mft (raw, json)
Hash identifier: YrveRyw+dVyS35B1MHcjgDse3eHIRptQeYjluhTX6co=
Subject key identifier: 02:80:64:B4:51:D5:53:D8:CD:4C:5E:32:56:29:5F:1D:67:26:55:98
Authority key identifier: 1B:BB:29:7B:C8:28:16:6A:A4:97:D3:7C:72:65:BF:B6:01:AE:03:60
Certificate issuer: /CN=A91B49F2/serialNumber=1BBB297BC828166AA497D37C7265BFB601AE0360
Certificate serial: 0F11
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft
Manifest number: 0F04
Signing time: Tue 28 Jul 2026 17:45:04 +0000
Manifest this update: Tue 28 Jul 2026 17:45:03 +0000
Manifest next update: Tue 04 Aug 2026 17:45:03 +0000
Files and hashes: 1: G7spe8goFmqkl9N8cmW_tgGuA2A.crl (hash: wYpZ/7Owz3ydRei+iGwC+YB0bNmLVXMCvHEtOMhTjF0=)
2: BA0CC7060A3D11EB82ECEA4BC4F9AE02.roa (hash: JeKAJdqbPEiYDYAJ1XzRDXMOefEFjZmJoWdofrNUX9I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.crl
rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:45:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3857 (0xf11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B49F2, serialNumber=1BBB297BC828166AA497D37C7265BFB601AE0360
Validity
Not Before: Jul 28 17:45:03 2026 GMT
Not After : Aug 4 17:45:03 2026 GMT
Subject: CN=6a68ea9f-04df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:6d:e4:d5:18:f3:ce:19:03:a0:e6:a5:99:42:
fe:9d:ba:d3:17:5f:5d:4d:1c:42:b2:0f:0d:f2:78:
c6:17:df:37:96:d2:9a:2f:c5:82:ee:a4:94:7b:98:
31:2f:63:3c:af:74:bd:fe:36:a5:75:85:31:ad:10:
2a:13:d2:c7:5a:48:76:46:37:9f:b7:55:d2:b7:70:
c3:9f:d0:01:c7:d3:5b:20:1a:cf:f3:13:0e:e9:89:
88:5e:ae:dc:1d:df:72:76:19:fe:80:7d:aa:d7:79:
3c:56:35:bb:c9:9e:04:ff:f6:26:8e:2c:78:1d:b0:
8c:14:4d:e4:bd:31:c9:b5:01:89:f7:d2:37:33:5f:
49:af:14:ca:72:9f:2e:33:cf:51:96:d1:5b:03:e5:
fb:b6:8c:45:8e:0c:3a:40:ef:c7:b9:62:29:03:20:
b8:71:90:4c:55:7a:ab:21:3f:76:cf:50:72:5e:9c:
5a:8d:b4:bb:83:38:18:ab:0e:50:f6:91:df:ea:36:
c6:6f:3a:b1:f9:0a:27:8a:97:8b:db:0b:62:c8:0d:
63:37:c6:3e:33:cb:81:51:41:78:e5:22:f8:10:1a:
04:06:eb:0d:a2:ed:12:0c:2d:09:33:36:13:8f:dd:
7a:09:c3:0e:f2:a7:3e:ab:77:7c:dd:fc:18:63:f7:
5d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:80:64:B4:51:D5:53:D8:CD:4C:5E:32:56:29:5F:1D:67:26:55:98
X509v3 Authority Key Identifier:
keyid:1B:BB:29:7B:C8:28:16:6A:A4:97:D3:7C:72:65:BF:B6:01:AE:03:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c4:61:3e:d5:0d:1a:61:cb:b7:66:09:3d:49:5b:06:1e:c8:78:
2a:b5:ed:0a:80:f0:41:45:3c:43:fd:c1:a2:7d:2c:a8:5d:4f:
46:1f:0a:c6:92:f4:d7:df:96:1c:d7:34:65:a8:92:3c:1b:c3:
b4:04:d0:3f:6a:a3:86:66:ce:b9:03:e0:4e:e3:4d:d2:d6:66:
36:d0:6e:5d:d3:5d:94:1b:38:cd:c9:bb:e6:7a:8b:22:bf:47:
bc:9d:7e:53:e4:68:f9:e0:f7:f4:5e:ff:df:44:a3:2d:67:25:
f3:06:c3:a6:5f:f4:2b:f3:de:84:04:aa:61:23:8e:62:19:87:
f3:4a:50:b8:44:8a:b5:90:ae:44:48:e7:b2:5e:55:22:2c:77:
2b:66:61:90:4e:d8:a8:78:13:4d:f8:cc:86:eb:f6:d2:79:d6:
e2:a4:ef:5c:75:a1:51:d0:f5:10:9c:49:f8:2d:2d:4e:60:14:
71:a4:13:90:7b:bf:51:21:3b:00:38:02:86:54:44:31:62:0f:
c1:db:eb:a9:8b:f1:6b:72:55:53:54:c3:cc:d7:0d:aa:ca:16:
3b:c7:4e:f9:d8:a0:c5:51:e7:61:ed:e4:5e:85:f7:28:54:da:
1b:34:56:a8:6a:cd:bb:12:83:89:6c:62:bf:5a:48:e2:97:77:
bf:41:18:69
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDxEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjQ5RjIxMTAvBgNVBAUTKDFCQkIyOTdCQzgyODE2NkFBNDk3RDM3QzcyNjVCRkI2
MDFBRTAzNjAwHhcNMjYwNzI4MTc0NTAzWhcNMjYwODA0MTc0NTAzWjAYMRYwFAYD
VQQDEw02YTY4ZWE5Zi0wNGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA823k1RjzzhkDoOalmUL+nbrTF19dTRxCsg8N8njGF983ltKaL8WC7qSUe5gx
L2M8r3S9/jaldYUxrRAqE9LHWkh2Rjeft1XSt3DDn9ABx9NbIBrP8xMO6YmIXq7c
Hd9ydhn+gH2q13k8VjW7yZ4E//Ymjix4HbCMFE3kvTHJtQGJ99I3M19JrxTKcp8u
M89RltFbA+X7toxFjgw6QO/HuWIpAyC4cZBMVXqrIT92z1ByXpxajbS7gzgYqw5Q
9pHf6jbGbzqx+QonipeL2wtiyA1jN8Y+M8uBUUF45SL4EBoEBusNou0SDC0JMzYT
j916CcMO8qc+q3d83fwYY/ddIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAKAZLRR
1VPYzUxeMlYpXx1nJlWYMB8GA1UdIwQYMBaAFBu7KXvIKBZqpJfTfHJlv7YBrgNg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDlGMi83QzA2RTc5Q0E2
RUUxMUU5ODVGM0IwMTFDNEY5QUUwMi9HN3NwZThnb0ZtcWtsOU44Y21XX3RnR3VB
MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0c3c3BlOGdvRm1xa2w5TjhjbVdfdGdHdUEyQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NDlGMi83QzA2RTc5Q0E2RUUxMUU5ODVGM0IwMTFDNEY5QUUwMi9HN3NwZThnb0Zt
cWtsOU44Y21XX3RnR3VBMkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAxGE+1Q0aYcu3Zgk9SVsGHsh4KrXtCoDwQUU8Q/3Bon0sqF1PRh8KxpL019+W
HNc0ZaiSPBvDtATQP2qjhmbOuQPgTuNN0tZmNtBuXdNdlBs4zcm75nqLIr9HvJ1+
U+Ro+eD39F7/30SjLWcl8wbDpl/0K/PehASqYSOOYhmH80pQuESKtZCuREjnsl5V
Iix3K2ZhkE7YqHgTTfjMhuv20nnW4qTvXHWhUdD1EJxJ+C0tTmAUcaQTkHu/USE7
ADgChlREMWIPwdvrqYvxa3JVU1TDzNcNqsoWO8dO+digxVHnYe3kXoX3KFTaGzRW
qGrNuxKDiWxiv1pI4pd3v0EYaQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 13:10:58 2026 by rpki-client