
$ rpki-client -vvf rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft
File: gxf8eoKw7oZSDfGP_VcpURbaXfI.mft (raw, json)
Hash identifier: eIjXCrrBRU8HuZOJUs7fYrVi57JXXI0yyiL5QTteeYk=
Subject key identifier: 94:12:90:49:2A:A3:72:E6:3B:0C:40:4C:5F:6E:83:AB:4B:BA:9A:8B
Authority key identifier: 83:17:FC:7A:82:B0:EE:86:52:0D:F1:8F:FD:57:29:51:16:DA:5D:F2
Certificate issuer: /CN=A91338F0/serialNumber=8317FC7A82B0EE86520DF18FFD57295116DA5DF2
Certificate serial: 011F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxf8eoKw7oZSDfGP_VcpURbaXfI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft
Manifest number: 010E
Signing time: Fri 27 Mar 2026 05:31:59 +0000
Manifest this update: Fri 27 Mar 2026 05:31:58 +0000
Manifest next update: Fri 03 Apr 2026 05:31:58 +0000
Files and hashes: 1: gxf8eoKw7oZSDfGP_VcpURbaXfI.crl (hash: 3proRGrtCxlXcvF2aup8OIfDx2SE4QK7wJb37vaEwc4=)
2: 5B39EBD693B511EF8AEA6810C4F9AE02.roa (hash: tSNIVaYMK+oXyIkQHVMErHW5lgyCKOgm8t2Q8V04jJo=)
3: 1A824A0E993511EF9BB0A677C4F9AE02.roa (hash: bdzoKNZt8/XWHS83YkqdwCHBasuCUkb2vXGrsks4FPo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.crl
rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxf8eoKw7oZSDfGP_VcpURbaXfI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 05:31:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 287 (0x11f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91338F0, serialNumber=8317FC7A82B0EE86520DF18FFD57295116DA5DF2
Validity
Not Before: Mar 27 05:31:58 2026 GMT
Not After : Apr 3 05:31:58 2026 GMT
Subject: CN=69c6164f-4f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2d:c8:95:66:4d:36:7a:fd:6b:15:77:31:93:
a7:4b:60:57:47:ae:ec:bf:26:cb:29:de:52:e5:9e:
09:77:77:58:2e:f7:48:b9:a9:3a:98:9b:e1:dd:b1:
45:a3:3e:17:37:e3:6c:cd:24:a1:8c:49:3e:bc:81:
37:6e:d3:fc:bf:f9:8e:9f:e5:f8:17:a8:21:b9:2b:
1a:47:8e:f1:19:d6:83:b7:3b:01:9f:ce:0b:3a:1d:
4f:d0:e0:27:5a:d8:d0:ba:00:b4:f6:1d:6e:34:cf:
eb:a1:90:1c:61:b4:ee:2d:d9:70:4a:08:72:41:c6:
68:df:d3:d6:6c:e4:00:eb:0d:09:0a:2e:a7:57:a4:
85:29:3e:ce:ce:28:a2:30:8d:d7:80:bd:2e:66:06:
dd:9f:9e:b0:11:07:ff:cb:f8:25:5b:81:2a:30:be:
02:39:f5:f1:cf:5c:f7:1c:87:9c:bc:3a:10:ec:18:
18:ea:c2:28:8b:d0:fa:b6:82:cb:92:c1:54:7f:e0:
21:ef:4e:6c:62:1f:28:81:48:3b:04:3c:1b:18:fd:
77:da:9b:33:7a:4f:94:16:9a:4e:25:85:e1:c3:44:
f8:66:76:0d:f4:de:90:31:3a:07:ed:a0:9d:f6:b5:
49:8d:b2:2e:59:16:b4:11:e5:e5:e7:61:3e:5e:ee:
72:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:12:90:49:2A:A3:72:E6:3B:0C:40:4C:5F:6E:83:AB:4B:BA:9A:8B
X509v3 Authority Key Identifier:
keyid:83:17:FC:7A:82:B0:EE:86:52:0D:F1:8F:FD:57:29:51:16:DA:5D:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxf8eoKw7oZSDfGP_VcpURbaXfI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:28:97:8f:c1:77:e2:ed:43:d6:a5:c0:21:3b:49:82:74:39:
2f:a3:5b:f7:44:f7:9f:4f:e1:03:db:c5:90:8f:4f:ba:59:5a:
12:1b:e2:16:06:00:19:60:a8:34:28:0c:5b:d4:39:ec:de:aa:
97:c2:66:30:4b:c6:42:6b:4f:1f:09:4b:9c:8a:fb:7f:66:08:
8c:a4:cb:4b:83:72:bd:13:87:74:a7:b3:18:ec:f6:ba:c3:42:
7d:48:ae:b3:bc:35:88:a5:fa:27:cf:ae:b6:5e:1d:a1:63:e8:
44:1b:be:d1:4b:7f:84:bb:2c:91:32:68:05:2d:4f:41:14:ab:
2e:6f:6e:af:b8:15:ed:38:45:85:d8:3d:87:21:66:e6:9e:88:
75:64:c6:7f:f6:8a:07:5f:24:46:93:18:5a:5c:75:be:d4:66:
78:6f:4d:30:34:96:f7:9e:23:f1:11:16:aa:b0:72:dc:d5:1c:
86:e8:39:11:ca:46:22:db:16:83:c4:f1:3b:b5:0d:b6:f3:1f:
78:62:56:3f:5f:de:69:35:e1:8a:83:8a:e5:a4:d3:11:d0:23:
96:c5:00:1f:61:e0:d1:54:2c:53:9c:50:8e:eb:44:30:fa:1e:
8b:8f:8f:0b:43:cc:7c:c5:c6:ae:cb:9f:55:cb:7b:68:55:62:
7e:5e:bc:0d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzM4RjAxMTAvBgNVBAUTKDgzMTdGQzdBODJCMEVFODY1MjBERjE4RkZENTcyOTUx
MTZEQTVERjIwHhcNMjYwMzI3MDUzMTU4WhcNMjYwNDAzMDUzMTU4WjAYMRYwFAYD
VQQDEw02OWM2MTY0Zi00ZjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqy3IlWZNNnr9axV3MZOnS2BXR67svybLKd5S5Z4Jd3dYLvdIuak6mJvh3bFF
oz4XN+NszSShjEk+vIE3btP8v/mOn+X4F6ghuSsaR47xGdaDtzsBn84LOh1P0OAn
WtjQugC09h1uNM/roZAcYbTuLdlwSghyQcZo39PWbOQA6w0JCi6nV6SFKT7Oziii
MI3XgL0uZgbdn56wEQf/y/glW4EqML4COfXxz1z3HIecvDoQ7BgY6sIoi9D6toLL
ksFUf+Ah705sYh8ogUg7BDwbGP132pszek+UFppOJYXhw0T4ZnYN9N6QMToH7aCd
9rVJjbIuWRa0EeXl52E+Xu5y9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJQSkEkq
o3LmOwxATF9ug6tLupqLMB8GA1UdIwQYMBaAFIMX/HqCsO6GUg3xj/1XKVEW2l3y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzhGMC8wQTc3MUEzNjkz
QUUxMUVGOEY0OEFCNDNDNEY5QUUwMi9neGY4ZW9LdzdvWlNEZkdQX1ZjcFVSYmFY
ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d4Zjhlb0t3N29aU0RmR1BfVmNwVVJiYVhmSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MzhGMC8wQTc3MUEzNjkzQUUxMUVGOEY0OEFCNDNDNEY5QUUwMi9neGY4ZW9Ldzdv
WlNEZkdQX1ZjcFVSYmFYZkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhSiXj8F34u1D1qXAITtJgnQ5L6Nb90T3n0/hA9vFkI9PullaEhviFgYAGWCo
NCgMW9Q57N6ql8JmMEvGQmtPHwlLnIr7f2YIjKTLS4NyvROHdKezGOz2usNCfUiu
s7w1iKX6J8+utl4doWPoRBu+0Ut/hLsskTJoBS1PQRSrLm9ur7gV7ThFhdg9hyFm
5p6IdWTGf/aKB18kRpMYWlx1vtRmeG9NMDSW954j8REWqrBy3NUchug5EcpGItsW
g8TxO7UNtvMfeGJWP1/eaTXhioOK5aTTEdAjlsUAH2Hg0VQsU5xQjutEMPoei4+P
C0PMfMXGrsufVct7aFVifl68DQ==
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:09:38 2026 by rpki-client