
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft
File: Gq0AphpkkECrUmoUK1173uWgHL8.mft (raw, json)
Hash identifier: CnBGMlyZvmBydA+rOpBm8dHPxR1m+YuxGuLuDb1Jgw4=
Subject key identifier: D3:89:5F:39:57:F2:AA:43:C0:3E:0D:D8:84:34:7D:DB:C2:3B:9B:F3
Authority key identifier: 1A:AD:00:A6:1A:64:90:40:AB:52:6A:14:2B:5D:7B:DE:E5:A0:1C:BF
Certificate issuer: /CN=A91CCE54/serialNumber=1AAD00A61A649040AB526A142B5D7BDEE5A01CBF
Certificate serial: 068C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft
Manifest number: 0665
Signing time: Sun 26 Jul 2026 23:26:18 +0000
Manifest this update: Sun 26 Jul 2026 23:26:17 +0000
Manifest next update: Sun 02 Aug 2026 23:26:17 +0000
Files and hashes: 1: Gq0AphpkkECrUmoUK1173uWgHL8.crl (hash: K0tx0QTJpgElXzNpbkYIuy58JYjjpouXEiH7/GTYFGA=)
2: B3394AE0D7F511EB82D62F73C4F9AE02.roa (hash: +b28DC3M8noSBj1HATRUiJdTviNU2GCdVTBihwET6Yg=)
3: 956B1C7AD81111EB8C3ACC5DC4F9AE02.roa (hash: G6iya46vlEQxXzbvqDbW4DK4nSfKAqlJ0GQSPlu04mw=)
4: 9659D3F6D81111EB8C3ACC5DC4F9AE02.roa (hash: /lzYlyTLMVfaGt+Jef9OOqRfUsRdfvmKL6qV7+rtCAM=)
5: B62A6E82D7F511EB82D62F73C4F9AE02.roa (hash: MOXNPP0Z5FDw+7dHenMPVPHPJqhtHn3B3TzOutXmyJQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.crl
rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 23:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1676 (0x68c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCE54, serialNumber=1AAD00A61A649040AB526A142B5D7BDEE5A01CBF
Validity
Not Before: Jul 26 23:26:17 2026 GMT
Not After : Aug 2 23:26:17 2026 GMT
Subject: CN=6a66979a-fdbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:af:b3:15:d0:8a:74:34:aa:a2:c2:3b:a6:84:
4f:2f:25:21:ec:b6:02:cf:d0:b8:e6:2a:85:de:a2:
2b:17:62:82:8a:e1:c0:3a:8b:b2:85:51:11:1b:47:
51:40:bd:b6:2b:7e:00:b8:09:66:5e:67:5a:4b:60:
20:c7:8a:c3:af:d8:e9:b8:d9:05:e2:cb:45:f1:76:
ae:76:08:57:91:5c:53:bf:7b:33:05:c0:1b:29:4b:
21:a8:fb:90:11:92:a3:9d:66:11:fb:25:c5:9b:fd:
05:d1:bd:6c:28:2f:3c:e7:39:1b:d2:eb:c7:a2:ad:
ea:00:5a:66:0b:ed:af:81:28:f4:d9:64:d5:31:02:
a5:54:7d:a3:ca:9b:88:14:8d:a4:02:5f:ba:8a:97:
8f:7a:2c:1e:60:23:be:d5:dd:30:ed:01:a9:9b:97:
46:e8:e0:2f:fc:85:b9:d4:42:f3:4f:ee:e6:e2:3b:
86:14:b9:b2:dd:f8:2f:0a:30:c4:72:a0:3e:50:b6:
2b:03:55:66:06:d2:15:46:c5:2c:d2:4f:aa:a2:1f:
7d:bc:46:97:39:e6:09:97:4e:fa:01:ba:fb:ee:3b:
6f:4c:d6:6f:79:dd:62:63:19:d7:76:32:6f:ee:cc:
d2:35:80:92:05:3f:4d:67:e7:72:57:72:be:77:a1:
6a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:89:5F:39:57:F2:AA:43:C0:3E:0D:D8:84:34:7D:DB:C2:3B:9B:F3
X509v3 Authority Key Identifier:
keyid:1A:AD:00:A6:1A:64:90:40:AB:52:6A:14:2B:5D:7B:DE:E5:A0:1C:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:39:45:d2:d9:a1:f1:69:00:a4:1c:66:b4:a3:2f:92:ac:e0:
4f:b3:52:97:74:4b:bf:3b:c3:80:f2:e9:6e:00:e4:e1:9d:8e:
c0:bb:f3:31:d1:5d:a5:e3:da:b2:d7:4f:2c:d8:9c:06:1e:91:
83:95:fe:6d:7c:7a:c4:7c:a5:44:5b:fd:ff:fd:26:51:9a:39:
1c:33:bc:1b:f9:11:be:aa:d9:d8:ad:44:a9:cd:95:3c:4b:85:
d7:cb:45:98:8a:4a:a4:b2:63:a7:90:11:a2:0b:1e:51:31:a7:
1b:99:1e:b0:a0:7e:53:44:fe:0b:c5:a3:91:e7:be:a4:17:f6:
81:b3:9b:50:60:bb:25:4e:2c:85:8b:12:12:c1:88:3f:d8:bd:
a8:6d:d6:8a:15:34:0d:ec:70:01:1c:f1:24:78:2c:03:b3:84:
e8:29:ae:e1:71:6e:59:bf:21:dc:54:f6:9d:5e:8b:e0:ff:ab:
61:af:4f:26:42:a1:f4:ca:9f:2f:fd:1e:cf:c3:cc:b5:a7:71:
3a:ef:8c:5d:b8:84:e8:6b:71:61:3f:a2:e6:55:c5:fc:f7:c1:
fe:81:8a:49:2b:93:21:f9:82:66:e9:78:12:cf:de:a4:6a:bf:
d0:aa:42:8d:c3:f9:37:ae:c7:ab:88:56:fb:af:e6:81:74:d9:
04:87:e8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:06:08 2026 by rpki-client