
$ rpki-client -vvf rpki.apnic.net/member_repository/A91676D4/E17ECE2EE2E611EBB7596A75C4F9AE02/g1pslrIJJMfl2PEvBtud0j4lL10.mft
File: g1pslrIJJMfl2PEvBtud0j4lL10.mft (raw, json)
Hash identifier: 2zT5ZoPp5EPLWbVyQoHK9Jzz93INWDnYrdzhh32Ze8M=
Subject key identifier: 2F:6E:53:CB:3C:BD:60:3C:84:88:97:19:FF:E4:88:44:A9:FC:D1:62
Authority key identifier: 83:5A:6C:96:B2:09:24:C7:E5:D8:F1:2F:06:DB:9D:D2:3E:25:2F:5D
Certificate issuer: /CN=A91676D4/serialNumber=835A6C96B20924C7E5D8F12F06DB9DD23E252F5D
Certificate serial: 063C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1pslrIJJMfl2PEvBtud0j4lL10.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91676D4/E17ECE2EE2E611EBB7596A75C4F9AE02/g1pslrIJJMfl2PEvBtud0j4lL10.mft
Manifest number: 0622
Signing time: Tue 24 Mar 2026 22:35:02 +0000
Manifest this update: Tue 24 Mar 2026 22:35:02 +0000
Manifest next update: Tue 31 Mar 2026 22:35:02 +0000
Files and hashes: 1: g1pslrIJJMfl2PEvBtud0j4lL10.crl (hash: a8cBZFosmVbIE02CsCIOmq8igGgYoo1zxX7DodxUG7A=)
2: AE6589F4A9A911F085996109C4F9AE02.roa (hash: andQ6MHVCbyOwqlHoxnSm6TfVpW/Aa3V+Uw8viRV/NA=)
3: 57FD28280C8311ECB6423427C4F9AE02.roa (hash: 6lefPigcpSW8Wi4b/6sq1pzIEJb3RagZMDaEaPM/PV8=)
4: BB8B992A1B6011F0AFD7AF11C4F9AE02.roa (hash: gCQsxZNTWJdexJQs/f6ie8h5A7xmqB+IkDiAih01sSU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91676D4/E17ECE2EE2E611EBB7596A75C4F9AE02/g1pslrIJJMfl2PEvBtud0j4lL10.crl
rsync://rpki.apnic.net/member_repository/A91676D4/E17ECE2EE2E611EBB7596A75C4F9AE02/g1pslrIJJMfl2PEvBtud0j4lL10.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1pslrIJJMfl2PEvBtud0j4lL10.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:35:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1596 (0x63c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91676D4, serialNumber=835A6C96B20924C7E5D8F12F06DB9DD23E252F5D
Validity
Not Before: Mar 24 22:35:02 2026 GMT
Not After : Mar 31 22:35:02 2026 GMT
Subject: CN=69c31196-d79c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3e:56:ef:c2:0d:10:cd:85:15:f6:75:69:78:
0a:cf:5d:7a:d2:b4:88:22:20:94:4f:5b:5a:82:f4:
53:cd:06:2e:c3:1f:84:6c:82:eb:e7:68:4b:58:5d:
72:36:7e:91:76:14:06:d8:bc:1f:82:bf:8d:16:ee:
8f:10:3b:2e:b6:39:1f:3c:57:85:12:8a:8a:ac:fd:
e3:f0:14:c8:41:8c:ae:83:0c:7b:c0:10:00:07:8d:
bb:17:2f:9a:6c:21:f7:c8:0d:32:2e:02:7e:9f:e4:
33:14:f1:c2:a8:2d:bb:08:d2:cf:81:c7:2c:9d:94:
45:a5:15:d8:54:ac:df:4a:d3:bb:39:21:b4:36:a0:
d5:93:41:70:80:06:79:04:b9:d5:17:a2:a6:e3:1a:
51:10:d9:7b:e1:8d:bc:15:d8:7c:a7:b7:c5:d4:9b:
d4:31:ae:37:72:32:1f:df:85:32:27:e5:8c:97:68:
90:25:82:a3:05:ad:79:4c:46:3f:0a:90:f8:a0:1c:
6f:ec:4f:60:0e:e2:62:2c:e2:0e:42:3d:67:3e:5f:
c4:98:d5:16:cc:19:05:9f:80:30:41:a4:5b:6a:c6:
b5:a9:25:53:fb:d9:f8:67:0f:63:12:15:83:46:dd:
81:c5:f3:d7:cd:59:de:a6:6d:b9:13:ad:80:d1:0a:
03:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:6E:53:CB:3C:BD:60:3C:84:88:97:19:FF:E4:88:44:A9:FC:D1:62
X509v3 Authority Key Identifier:
keyid:83:5A:6C:96:B2:09:24:C7:E5:D8:F1:2F:06:DB:9D:D2:3E:25:2F:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91676D4/E17ECE2EE2E611EBB7596A75C4F9AE02/g1pslrIJJMfl2PEvBtud0j4lL10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1pslrIJJMfl2PEvBtud0j4lL10.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91676D4/E17ECE2EE2E611EBB7596A75C4F9AE02/g1pslrIJJMfl2PEvBtud0j4lL10.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:3d:c4:55:c7:c3:09:70:86:11:5a:b2:6e:de:6c:af:25:27:
68:ab:f0:2d:d7:93:69:5c:19:8f:08:96:c1:df:cc:42:49:9a:
43:6b:09:62:79:fe:82:f0:55:8b:7e:0d:85:01:3d:b1:39:5e:
37:29:7f:6e:bc:26:7d:a6:2a:04:a0:c0:87:cc:3e:3c:7f:42:
53:12:b8:2f:2c:f6:c5:b9:15:53:c2:ed:d9:d2:54:18:74:bf:
86:a4:4e:eb:13:53:23:1c:c7:24:98:94:9b:57:93:a0:af:55:
fe:4d:37:39:da:a0:d7:26:7b:32:48:de:52:d1:16:af:e1:89:
a7:60:06:ed:cd:38:4c:3f:0b:3a:25:a7:50:90:74:38:06:fe:
f8:12:cd:cd:a9:d4:a7:31:d2:02:a9:08:74:dc:65:84:3e:2b:
68:f4:8c:18:cf:19:6e:26:d3:f5:66:0c:d6:aa:3a:57:aa:cd:
d1:7f:1c:d1:43:8e:7b:d2:c2:ec:ab:38:28:f5:0d:69:c4:52:
dc:80:ff:d3:99:1a:05:10:25:47:ca:34:94:c8:18:e2:db:a9:
76:cb:56:43:a1:38:22:a0:62:d6:dc:df:57:f4:62:91:d2:9a:
31:e9:13:97:2b:2f:36:b1:15:2e:02:c8:5b:58:5e:60:46:3a:
f9:13:e9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:33:08 2026 by rpki-client