
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
File: G1Zt71944xm_wNFADedV4mSoK7w.mft (raw, json)
Hash identifier: a/RtzYNexHS8yYMh9DLps1otZ8ESMdlLu+xR9bor048=
Subject key identifier: 3C:49:27:F4:98:2E:03:8C:B7:DC:48:0A:A0:F6:BA:13:9F:6F:50:58
Authority key identifier: 1B:56:6D:EF:5F:78:E3:19:BF:C0:D1:40:0D:E7:55:E2:64:A8:2B:BC
Certificate issuer: /CN=A91C20AB/serialNumber=1B566DEF5F78E319BFC0D1400DE755E264A82BBC
Certificate serial: 09B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
Manifest number: 099A
Signing time: Fri 12 Jun 2026 20:01:15 +0000
Manifest this update: Fri 12 Jun 2026 20:01:14 +0000
Manifest next update: Fri 19 Jun 2026 20:01:14 +0000
Files and hashes: 1: G1Zt71944xm_wNFADedV4mSoK7w.crl (hash: ZxBCXu18uzCAt/NOnTj0tL/zFk8Szx8odcV9Zv8x2H8=)
2: AB659244056211EBAE3DBC4CC4F9AE02.roa (hash: 6SFxnAYtEmDY0FSpqWSl0msvr8nqW/ZhQvTYvJBPZWo=)
3: 28D36892B09411EAA964465EC4F9AE02.roa (hash: uB90XoJd0h+ZsfjSZb2jo0kKEK2zlo/T12QD2KhR6to=)
4: 2979BC38B09411EAA964465EC4F9AE02.roa (hash: 3TgfJcKtVv25yE8b/IOKhDazNbjHxuANTNvhbFUhyMk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.crl
rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2485 (0x9b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C20AB, serialNumber=1B566DEF5F78E319BFC0D1400DE755E264A82BBC
Validity
Not Before: Jun 12 20:01:14 2026 GMT
Not After : Jun 19 20:01:14 2026 GMT
Subject: CN=6a2c658a-8184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3d:6f:da:1f:41:b1:70:99:24:2e:c8:7b:16:
74:be:d3:f9:8e:f3:af:1a:c9:00:5f:c9:4b:4e:4a:
ea:8e:ad:43:87:f9:dc:90:94:3e:09:37:d7:04:c4:
0c:fb:98:2d:3c:d1:e5:d5:6b:b7:83:96:59:9e:c3:
a4:9e:e2:f0:b8:da:da:3d:8b:76:55:3b:8a:c3:21:
4e:01:68:7d:5a:fa:35:ee:63:7e:83:eb:6f:0f:06:
e3:f2:c3:8d:c8:86:d7:32:aa:c5:47:20:01:58:ab:
77:01:2f:a4:32:4b:39:c6:91:ee:02:14:59:b3:36:
bd:15:19:94:de:a0:a5:21:f3:ee:bf:b8:43:db:3b:
68:b3:68:4d:67:ab:7d:f3:0b:bc:de:6d:7e:89:00:
e8:ec:ae:99:87:2b:ff:07:cc:5b:61:82:43:25:d9:
9a:07:a9:88:ce:45:98:16:21:51:c4:4d:47:9d:2e:
4b:89:49:ff:c2:49:20:4e:c6:96:21:c1:50:e9:4e:
44:dd:4d:5e:f7:1f:83:f9:b6:67:bd:9f:12:0f:f5:
00:b2:00:fc:79:02:17:38:30:c6:8f:a0:0b:e9:03:
14:b0:9b:4a:ab:b0:81:08:80:bc:41:36:5a:bd:8e:
11:f8:b3:9a:b4:c9:c9:3a:9f:1c:0c:08:eb:f3:3b:
fc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:49:27:F4:98:2E:03:8C:B7:DC:48:0A:A0:F6:BA:13:9F:6F:50:58
X509v3 Authority Key Identifier:
keyid:1B:56:6D:EF:5F:78:E3:19:BF:C0:D1:40:0D:E7:55:E2:64:A8:2B:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:bd:7c:3a:f2:fa:43:8e:be:ef:3b:fd:a4:de:1c:f6:8a:13:
d9:a4:1f:8e:4e:af:df:b4:7a:25:56:5c:da:af:50:da:10:ea:
41:63:91:0c:2c:66:db:b9:4e:e5:93:8e:f5:8a:99:85:68:e9:
c1:46:52:7c:e9:09:63:a4:60:98:b3:cf:0a:57:c6:f2:b1:bf:
e9:1b:89:7e:99:57:de:1a:6e:d1:02:e1:6f:c8:ab:62:63:21:
70:13:bd:ac:95:0d:cf:97:c9:63:33:72:4a:86:c4:30:da:30:
7a:99:65:9d:51:ce:4f:6c:c7:e7:c1:f6:82:ee:79:0a:0f:a0:
87:ab:90:27:50:e9:5a:75:a2:bb:68:8d:d8:4e:c0:a0:21:d0:
02:29:26:83:70:70:b2:75:23:42:e1:16:c6:92:7f:74:03:de:
21:4b:73:ca:3d:54:cc:7e:d7:de:3d:94:f3:04:68:3a:a7:44:
54:70:9b:c8:92:a3:a5:7b:d8:26:cb:76:b8:7d:50:ff:1d:ed:
29:59:a4:ff:9e:8a:f0:95:fa:ce:04:28:af:64:0b:06:b2:d1:
52:f2:ee:f3:0b:72:45:00:18:b1:71:41:26:82:77:99:5c:20:
9e:4b:69:8c:b1:fe:a4:22:49:0c:de:38:26:02:b1:5c:04:56:
eb:a8:42:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:54:13 2026 by rpki-client