
$ rpki-client -vvf rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft
File: G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft (raw, json)
Hash identifier: TqRw0vdBvJIjdiLd4qSuMzW3fl/ACWFxiwD1RquoJk0=
Subject key identifier: FB:8C:A9:A0:5E:5C:54:E8:82:DA:9F:12:A4:79:E5:64:76:82:40:52
Authority key identifier: 1B:8A:E7:C7:43:01:72:9D:85:C3:15:95:24:9C:3B:48:F1:B9:15:1E
Certificate issuer: /CN=A91340D8/serialNumber=1B8AE7C74301729D85C31595249C3B48F1B9151E
Certificate serial: 02E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft
Manifest number: 02D0
Signing time: Wed 25 Mar 2026 01:01:54 +0000
Manifest this update: Wed 25 Mar 2026 01:01:53 +0000
Manifest next update: Wed 01 Apr 2026 01:01:53 +0000
Files and hashes: 1: G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl (hash: WxqX67WmxFQQTx0cecNnEgyks/6sSz2CcL89081DFxw=)
2: F2257AC0289011ED8AEEB43CC4F9AE02.roa (hash: vLKPklVP43k6OROJ42PijdvI9ys2gzzUNgh6DMpb1V4=)
3: BDDB04B633DC11EF82BB2E27C4F9AE02.roa (hash: dkeJym/v87RKiKKUryyLDWvUYJU8ndSZ66o3idoC4+8=)
4: BE608B1833DC11EF82BB2E27C4F9AE02.roa (hash: yGjZ2qr+BhGngGtcisuW8nAIXic6S3m8loWau7p/bRY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl
rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 737 (0x2e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91340D8, serialNumber=1B8AE7C74301729D85C31595249C3B48F1B9151E
Validity
Not Before: Mar 25 01:01:53 2026 GMT
Not After : Apr 1 01:01:53 2026 GMT
Subject: CN=69c33401-c195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:85:71:0d:fe:e0:79:d8:aa:78:15:de:38:ac:
04:8b:8d:80:c4:13:d9:6f:fa:2e:c5:c7:f7:46:12:
26:48:82:ad:13:ed:84:f2:35:d4:da:34:a1:88:3f:
d0:41:77:cd:1e:91:9e:e9:31:c9:6e:0c:b5:b7:ce:
6c:da:1b:89:70:c5:e6:05:9a:fe:a6:92:72:b1:1f:
82:a2:2b:24:f8:de:1d:9b:47:ba:c1:d3:97:e2:fc:
76:f1:99:37:68:be:ce:ad:19:34:16:eb:20:32:2f:
62:db:fe:91:af:89:14:be:7a:ac:98:05:7f:53:b1:
10:36:28:0c:90:9f:a6:92:0c:29:92:90:2e:39:f8:
e6:13:6e:ca:89:1d:04:8a:64:eb:3a:48:44:61:37:
b0:60:f5:a8:1c:7b:cc:d7:77:20:73:6d:d9:41:a2:
e5:02:7e:0d:42:0f:a6:ca:54:16:04:fc:54:42:76:
7c:3d:fd:ce:a3:4c:20:76:ed:0d:ef:9e:2e:a9:13:
e0:3d:94:8e:f8:4f:f7:db:ab:6f:5a:eb:cd:2a:51:
f1:fd:08:17:fe:fa:fa:07:3a:42:6a:a1:a1:36:09:
5d:01:b0:5e:91:42:05:90:c3:46:59:4a:95:26:ff:
99:ea:0d:60:eb:14:0b:dc:69:68:af:03:00:3d:d8:
be:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:8C:A9:A0:5E:5C:54:E8:82:DA:9F:12:A4:79:E5:64:76:82:40:52
X509v3 Authority Key Identifier:
keyid:1B:8A:E7:C7:43:01:72:9D:85:C3:15:95:24:9C:3B:48:F1:B9:15:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:47:58:58:e5:18:85:75:90:27:02:77:b1:67:7d:88:78:07:
aa:8f:af:0c:f8:ae:89:ad:fd:05:0e:8a:32:c1:3e:65:41:c3:
04:a6:54:75:bb:fc:3f:fd:cd:a6:16:ac:c5:d0:6f:9a:f3:f8:
54:b3:f5:9b:0d:92:ca:9b:23:32:31:90:7a:2d:8f:40:34:55:
42:ed:d2:74:c7:4c:2c:fc:81:23:5e:23:c9:76:00:14:13:14:
8d:6d:4c:83:72:1e:20:41:ef:2a:7f:2c:e6:38:1b:d9:23:b7:
fd:1d:1d:0e:10:76:8d:d9:c1:d5:3e:80:00:63:53:56:8e:6a:
21:46:04:21:3c:14:1a:ad:0d:a6:a0:9f:ad:d2:cb:2e:be:1f:
81:e9:7b:2e:7c:2f:84:92:0b:fd:0f:ae:0b:23:c2:4a:08:d1:
dc:78:76:4b:dd:ac:3b:85:c3:9c:86:09:5b:10:86:b4:47:1c:
e3:a3:a5:26:32:67:bd:75:f2:5f:55:31:c6:98:5e:77:a8:7b:
b6:cb:6e:f0:56:bc:58:d2:c8:63:25:17:45:11:ed:b6:ff:d1:
87:13:83:95:65:9a:cb:f0:e6:5a:14:df:45:d4:a8:4c:b9:67:
fe:98:b7:1e:21:6d:54:3c:12:48:cd:65:df:29:15:71:b1:b5:
ea:58:22:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:28:52 2026 by rpki-client