
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft
File: GAee5DmNZxvWR_yoKieU5QowR70.mft (raw, json)
Hash identifier: mb4CPrnLhSa5fvp7td+di1vqSEhGurtJY/R9iYTgD1U=
Subject key identifier: D5:63:FB:FF:35:38:33:71:78:E3:B1:D0:5F:6C:E0:2A:B7:D5:FF:B6
Authority key identifier: 18:07:9E:E4:39:8D:67:1B:D6:47:FC:A8:2A:27:94:E5:0A:30:47:BD
Certificate issuer: /CN=A91DFBE1/serialNumber=18079EE4398D671BD647FCA82A2794E50A3047BD
Certificate serial: 0B18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft
Manifest number: 0B0C
Signing time: Tue 28 Jul 2026 19:38:22 +0000
Manifest this update: Tue 28 Jul 2026 19:38:21 +0000
Manifest next update: Tue 04 Aug 2026 19:38:21 +0000
Files and hashes: 1: GAee5DmNZxvWR_yoKieU5QowR70.crl (hash: Z94hZA5HvjuLV+UKvJcY7Ve6SE+2PHxDACccuTHgAI8=)
2: F23D65727CAF11ED87752A6BC4F9AE02.roa (hash: QfaWCwe/qZDBNL7SvK9BdlJZP0tZLuQpHfGjUMElff4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.crl
rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:38:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2840 (0xb18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFBE1, serialNumber=18079EE4398D671BD647FCA82A2794E50A3047BD
Validity
Not Before: Jul 28 19:38:21 2026 GMT
Not After : Aug 4 19:38:21 2026 GMT
Subject: CN=6a69052e-9f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c0:0a:75:96:47:41:4a:52:81:7a:20:05:d8:
77:27:fa:df:c0:23:3f:46:e2:1d:76:c2:b1:d5:4d:
13:be:be:7f:2d:1d:1f:f0:de:30:95:15:da:46:f5:
42:4f:71:67:d4:36:2e:31:fc:84:d1:d0:3b:31:43:
0e:f5:56:f4:11:8e:86:85:b8:48:91:0b:50:41:14:
55:7c:10:dc:11:f7:4a:69:5c:79:a2:4e:a7:1e:88:
14:a8:4c:46:9c:d1:25:c0:18:99:21:6f:57:f1:57:
6a:9c:f7:4f:28:b3:a1:05:55:ae:9e:2d:51:e2:30:
2f:44:5b:a1:fd:fe:f6:28:0a:0c:1c:0c:63:b8:47:
f0:d8:c4:06:fb:13:84:b2:4b:8a:88:12:de:8f:84:
d5:20:a8:08:7f:cf:e1:b6:bc:4e:b4:54:b2:6f:6c:
e5:3d:31:b5:55:9c:c4:cd:47:36:db:b5:7f:51:af:
32:71:38:36:ba:09:6b:8a:24:24:21:dd:fa:90:1c:
66:65:e8:fb:0b:55:8a:c5:8d:77:e1:c5:21:95:be:
b6:d8:7c:8f:83:e3:32:73:7e:dd:23:a4:a1:6e:97:
79:3b:8b:b5:f6:c2:db:f8:3a:14:df:db:4e:31:e8:
eb:75:ee:54:ba:08:4b:17:ab:87:7a:a6:0c:10:6d:
09:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:63:FB:FF:35:38:33:71:78:E3:B1:D0:5F:6C:E0:2A:B7:D5:FF:B6
X509v3 Authority Key Identifier:
keyid:18:07:9E:E4:39:8D:67:1B:D6:47:FC:A8:2A:27:94:E5:0A:30:47:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:48:78:ab:49:13:fa:1e:7e:c9:5e:6a:4c:82:ea:cb:f4:9a:
eb:da:58:7d:bb:42:7f:55:3a:9c:91:00:6a:02:29:2d:ec:6f:
df:a6:d7:c0:54:8c:b8:58:f1:fa:96:c1:79:70:58:3a:89:8e:
ff:72:40:b9:da:8e:77:04:6b:28:20:8f:6d:91:50:d1:8c:14:
cd:d5:5b:91:a3:7e:c3:6d:a5:ca:1e:9d:79:cd:60:76:f3:7d:
fd:e2:64:af:27:99:2d:8c:12:36:cd:cd:a6:48:40:e1:71:9f:
d2:9e:c5:6c:18:49:57:ef:61:02:1f:8c:b2:50:d9:e2:85:22:
ed:9d:b0:7c:5b:a4:55:47:ef:86:1e:4e:c0:64:e8:4d:8f:80:
82:5c:e0:30:a2:e8:c9:7c:f3:5b:5b:2c:c9:fa:bf:ad:f4:76:
16:35:5b:cc:ff:3c:5a:24:a1:01:08:0d:83:b3:1e:1a:4c:25:
8e:07:b9:14:93:1c:5a:db:b0:80:4a:56:e3:9e:8f:78:e0:4b:
3e:e0:57:aa:cb:c4:66:3a:3d:d3:2e:1c:3d:54:d5:1b:39:b9:
06:87:98:0c:19:19:7a:3f:02:f0:38:39:0c:43:f5:35:07:89:
25:1e:25:35:2e:2a:26:b7:50:4f:28:58:e9:6f:f9:96:f3:d4:
0e:d3:a2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:31:51 2026 by rpki-client