
$ rpki-client -vvf rpki.apnic.net/member_repository/A91259CA/A9F2722E08A011F0B158565AC4F9AE02/G7ThccrEGeYWe6On1yU8dhYxoo0.mft
File: G7ThccrEGeYWe6On1yU8dhYxoo0.mft (raw, json)
Hash identifier: F9avGgoHsCAvZGFRoJTQlA9gIFJVTE+e+q5HRxRDzpo=
Subject key identifier: D6:B9:C5:96:0D:89:3C:5E:D2:B5:4D:88:89:F5:52:A7:C5:41:11:97
Authority key identifier: 1B:B4:E1:71:CA:C4:19:E6:16:7B:A3:A7:D7:25:3C:76:16:31:A2:8D
Certificate issuer: /CN=A91259CA/serialNumber=1BB4E171CAC419E6167BA3A7D7253C761631A28D
Certificate serial: C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G7ThccrEGeYWe6On1yU8dhYxoo0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91259CA/A9F2722E08A011F0B158565AC4F9AE02/G7ThccrEGeYWe6On1yU8dhYxoo0.mft
Manifest number: BF
Signing time: Wed 25 Mar 2026 06:12:07 +0000
Manifest this update: Wed 25 Mar 2026 06:12:06 +0000
Manifest next update: Wed 01 Apr 2026 06:12:06 +0000
Files and hashes: 1: G7ThccrEGeYWe6On1yU8dhYxoo0.crl (hash: N3EkNyOV4F17B9v5uHsOcatDwGVrUvNlBthoHrcNRBA=)
2: 2031308808A111F09B131E5BC4F9AE02.roa (hash: juXx+QFhQF8vj+ZkRwd9Nami1UHPEHz/7C9vpG4VCkQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91259CA/A9F2722E08A011F0B158565AC4F9AE02/G7ThccrEGeYWe6On1yU8dhYxoo0.crl
rsync://rpki.apnic.net/member_repository/A91259CA/A9F2722E08A011F0B158565AC4F9AE02/G7ThccrEGeYWe6On1yU8dhYxoo0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G7ThccrEGeYWe6On1yU8dhYxoo0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:12:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194 (0xc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91259CA, serialNumber=1BB4E171CAC419E6167BA3A7D7253C761631A28D
Validity
Not Before: Mar 25 06:12:06 2026 GMT
Not After : Apr 1 06:12:06 2026 GMT
Subject: CN=69c37cb7-73cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bc:28:eb:7b:d6:b7:61:46:93:18:f3:d0:75:
60:a7:d7:81:a8:1b:8f:0d:01:30:3f:7d:1c:dd:58:
e0:7c:34:ea:9f:ea:be:6c:16:00:8b:5c:93:ce:2b:
be:ef:26:3c:9a:c8:aa:27:43:97:2d:a7:5c:78:98:
b4:b2:04:d8:fd:a7:78:5c:99:c9:21:d2:00:fb:4c:
62:7b:cc:9b:21:82:5d:a1:87:22:a3:d7:67:eb:1d:
01:89:87:b7:ba:f7:f7:3d:f3:fa:eb:48:9e:d9:26:
72:30:ce:b8:ef:10:fd:cd:92:d5:8b:7e:d9:dc:30:
2b:b0:0a:06:11:b4:d0:ac:c2:8a:8d:4e:7f:48:a9:
e8:84:14:fe:75:83:2a:0e:4b:d9:70:fd:6d:0d:5a:
64:df:4d:4c:a0:c8:e7:dd:e0:e6:68:ee:eb:67:c4:
81:e4:3b:f2:5b:30:b6:a5:ae:2b:5a:3d:3c:23:bd:
da:ad:5a:f3:a6:4d:97:15:f4:fe:07:7b:f1:4c:e8:
cf:88:aa:86:81:7c:30:b5:a8:92:b5:1a:48:83:a3:
23:b7:9d:d1:5b:2b:ec:d0:22:ec:9d:7a:2c:9e:6b:
47:e3:59:58:d9:86:28:9e:11:c7:13:47:e4:6c:1e:
f5:e9:1e:81:7d:a1:5f:de:65:16:90:2d:17:53:01:
57:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B9:C5:96:0D:89:3C:5E:D2:B5:4D:88:89:F5:52:A7:C5:41:11:97
X509v3 Authority Key Identifier:
keyid:1B:B4:E1:71:CA:C4:19:E6:16:7B:A3:A7:D7:25:3C:76:16:31:A2:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91259CA/A9F2722E08A011F0B158565AC4F9AE02/G7ThccrEGeYWe6On1yU8dhYxoo0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G7ThccrEGeYWe6On1yU8dhYxoo0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91259CA/A9F2722E08A011F0B158565AC4F9AE02/G7ThccrEGeYWe6On1yU8dhYxoo0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ba:bc:a9:25:e3:e1:03:b0:55:30:ee:2f:d6:70:3f:dd:75:
f6:04:e1:2d:0a:8e:85:cd:dd:a2:e5:64:4f:fe:8a:90:d5:55:
a6:cd:65:6d:d8:9f:70:d9:1c:38:38:36:89:10:a8:55:8e:7b:
b1:b0:a8:7a:72:f3:5a:32:06:80:83:5c:3a:a0:60:fa:32:db:
0e:8e:c2:72:a6:45:de:55:4a:24:f6:a2:d4:bf:03:8c:86:e5:
1e:56:43:28:79:c9:17:dd:ba:7c:5e:9a:a0:d5:31:5c:eb:2c:
78:5f:cb:0b:b5:da:46:46:f8:69:9b:7d:1f:75:7f:6e:e0:9d:
e8:30:07:e7:fa:10:a2:89:6d:80:ff:a7:2a:b7:01:fc:88:c8:
33:80:eb:2a:09:f0:2f:0e:a0:5f:e9:9a:47:ed:4b:c8:0b:8b:
62:5b:24:8f:ef:84:03:14:9d:0a:28:a3:d5:a2:38:a6:c2:84:
8b:7f:3a:70:06:ef:5a:e2:8e:04:83:48:38:a8:ac:85:4b:c3:
4b:c7:8a:3a:f3:c2:a2:a5:56:b6:90:5d:72:d5:4b:1b:33:80:
1c:29:b4:bf:71:81:46:f0:5a:f1:8c:fa:7f:a1:e0:5e:25:a1:
f1:35:31:2c:10:4e:24:a9:bb:a2:af:17:ed:ab:97:30:b1:7e:
99:33:18:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:56:30 2026 by rpki-client