
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft
File: Gq0AphpkkECrUmoUK1173uWgHL8.mft (raw, json)
Hash identifier: wSTaTjnIRi7q9Wglzxfx5QOmYZk9FGeRn6ZRaZGjPao=
Subject key identifier: 3F:BE:15:06:F0:E9:31:3D:49:50:31:C5:05:5A:EF:CD:4C:25:B3:6C
Authority key identifier: 1A:AD:00:A6:1A:64:90:40:AB:52:6A:14:2B:5D:7B:DE:E5:A0:1C:BF
Certificate issuer: /CN=A91CCE54/serialNumber=1AAD00A61A649040AB526A142B5D7BDEE5A01CBF
Certificate serial: 0670
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft
Manifest number: 064D
Signing time: Fri 12 Jun 2026 22:42:33 +0000
Manifest this update: Fri 12 Jun 2026 22:42:32 +0000
Manifest next update: Fri 19 Jun 2026 22:42:32 +0000
Files and hashes: 1: Gq0AphpkkECrUmoUK1173uWgHL8.crl (hash: A8YsxNShYW/ZHh8J+QbZ1xjgxAv0HRNZbKX2U+m0i/4=)
2: 956B1C7AD81111EB8C3ACC5DC4F9AE02.roa (hash: lxgbG6pkkYFXzxOLVtY4sU1vaYpcUs17yViYyAj/L48=)
3: B62A6E82D7F511EB82D62F73C4F9AE02.roa (hash: KQTVz0e1Zb1iLnhg7VrsR+eEdauEprxEm/t9De3WuEM=)
4: B3394AE0D7F511EB82D62F73C4F9AE02.roa (hash: fWQraDGwJwPV67yFDAv4Z9YVrJg/aZyI/SUeFYf35jg=)
5: 9659D3F6D81111EB8C3ACC5DC4F9AE02.roa (hash: ebYT6JMp2+FGCLF90hH2BoNKGZH2g9kCtxGailuH/cQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.crl
rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 22:42:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1648 (0x670)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCE54, serialNumber=1AAD00A61A649040AB526A142B5D7BDEE5A01CBF
Validity
Not Before: Jun 12 22:42:32 2026 GMT
Not After : Jun 19 22:42:32 2026 GMT
Subject: CN=6a2c8b59-a20b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:84:a7:dd:61:dc:b3:7b:8a:e9:98:03:15:a3:
33:dc:ed:65:21:4c:48:d1:5a:e0:3a:e8:9d:9f:dc:
0b:a9:15:9f:cb:64:44:49:12:9c:d9:82:36:36:48:
35:98:ed:f7:20:ae:e7:c7:69:ae:ea:9b:86:65:e7:
c6:a8:00:2c:92:5e:dd:8a:22:3e:81:c2:f1:7b:b9:
65:79:dc:68:9a:96:52:a4:8e:25:27:36:e0:b9:2b:
e9:ab:d0:e2:6b:51:c6:5e:be:00:33:6b:e5:1c:96:
0c:e5:fd:81:90:aa:d9:0a:ed:3d:de:95:ac:bc:bf:
01:4d:a7:1b:f2:c9:ff:23:d8:73:78:db:7c:51:f9:
87:2e:63:95:ce:c0:f8:bd:3f:2a:f0:ab:9d:78:d3:
7e:0f:94:87:95:ae:f2:1a:c4:6e:5d:ad:b9:7d:99:
18:02:9e:5c:66:13:eb:29:0c:f4:96:29:db:d3:a6:
ae:9c:0e:a5:ce:83:af:f9:2e:89:f2:23:32:65:c5:
a6:0a:87:6f:fa:13:41:50:1f:b1:d6:54:1d:89:a5:
fd:0e:26:c5:71:35:96:df:4a:8c:fa:c9:e2:db:5f:
31:ef:f9:9a:57:8f:89:f8:bd:f9:1f:3e:86:eb:6a:
fa:d6:14:7f:ab:5a:1d:b8:16:5d:c0:f9:df:80:53:
64:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:BE:15:06:F0:E9:31:3D:49:50:31:C5:05:5A:EF:CD:4C:25:B3:6C
X509v3 Authority Key Identifier:
keyid:1A:AD:00:A6:1A:64:90:40:AB:52:6A:14:2B:5D:7B:DE:E5:A0:1C:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:c7:f5:a8:2f:10:ee:c0:50:db:39:e7:03:8b:e9:3b:10:77:
5e:cd:d6:c7:3e:b2:1e:6c:4a:8d:5a:0a:49:5a:47:17:0e:14:
d1:f7:b4:56:87:e3:21:c3:09:88:4a:e1:50:ab:dc:75:81:95:
48:c9:59:c1:a7:50:51:09:5f:34:8b:7b:02:1a:aa:52:4b:58:
4b:08:55:da:72:a8:57:06:db:c6:15:0a:6e:2e:93:d8:f8:21:
9c:0a:c0:db:c8:a5:a1:3b:79:4e:1c:c4:ca:c1:d4:c1:84:a1:
65:1c:4e:49:51:a8:c6:f8:a7:e7:dd:1e:63:75:2f:cd:6f:be:
b9:4d:4f:bc:c4:6e:89:9d:9f:44:db:7d:1b:b5:36:77:cc:9e:
58:6d:de:37:2d:56:e6:36:0e:b0:53:b2:cb:8d:6f:99:f9:c1:
7e:34:7a:91:19:be:1e:54:62:ef:57:06:4a:28:04:ae:15:2d:
a8:56:9f:3b:93:b1:9b:1d:1e:08:c4:6e:3a:57:d5:05:5c:6b:
e7:d0:62:71:ff:fa:a4:f7:65:6a:c9:32:c3:cc:16:e1:1e:04:
cd:c7:39:7d:01:7d:5f:be:af:8b:1e:a6:0c:11:ca:72:ce:e1:
ba:5d:fa:05:a0:14:b3:7e:e6:6a:7a:cf:f5:e0:10:b3:58:77:
d1:00:80:4f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0NFNTQxMTAvBgNVBAUTKDFBQUQwMEE2MUE2NDkwNDBBQjUyNkExNDJCNUQ3QkRF
RTVBMDFDQkYwHhcNMjYwNjEyMjI0MjMyWhcNMjYwNjE5MjI0MjMyWjAYMRYwFAYD
VQQDEw02YTJjOGI1OS1hMjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyoSn3WHcs3uK6ZgDFaMz3O1lIUxI0VrgOuidn9wLqRWfy2RESRKc2YI2Nkg1
mO33IK7nx2mu6puGZefGqAAskl7diiI+gcLxe7lledxompZSpI4lJzbguSvpq9Di
a1HGXr4AM2vlHJYM5f2BkKrZCu093pWsvL8BTacb8sn/I9hzeNt8UfmHLmOVzsD4
vT8q8KudeNN+D5SHla7yGsRuXa25fZkYAp5cZhPrKQz0linb06aunA6lzoOv+S6J
8iMyZcWmCodv+hNBUB+x1lQdiaX9DibFcTWW30qM+sni218x7/maV4+J+L35Hz6G
62r61hR/q1oduBZdwPnfgFNkpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD++FQbw
6TE9SVAxxQVa781MJbNsMB8GA1UdIwQYMBaAFBqtAKYaZJBAq1JqFCtde97loBy/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0U1NC9CRjlGQ0FGMEQ3
RUQxMUVCOEI1NkQ3MUFDNEY5QUUwMi9HcTBBcGhwa2tFQ3JVbW9VSzExNzN1V2dI
TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dxMEFwaHBra0VDclVtb1VLMTE3M3VXZ0hMOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
Q0U1NC9CRjlGQ0FGMEQ3RUQxMUVCOEI1NkQ3MUFDNEY5QUUwMi9HcTBBcGhwa2tF
Q3JVbW9VSzExNzN1V2dITDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIcf1qC8Q7sBQ2znnA4vpOxB3Xs3Wxz6yHmxKjVoKSVpHFw4U0fe0VofjIcMJ
iErhUKvcdYGVSMlZwadQUQlfNIt7AhqqUktYSwhV2nKoVwbbxhUKbi6T2PghnArA
28iloTt5ThzEysHUwYShZRxOSVGoxvin590eY3UvzW++uU1PvMRuiZ2fRNt9G7U2
d8yeWG3eNy1W5jYOsFOyy41vmfnBfjR6kRm+HlRi71cGSigErhUtqFafO5Oxmx0e
CMRuOlfVBVxr59Bicf/6pPdlaskyw8wW4R4Ezcc5fQF9X76vix6mDBHKcs7hul36
BaAUs37manrP9eAQs1h30QCATw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 11:01:46 2026 by rpki-client