
$ rpki-client -vvf rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.mft
File: GH7u6irWB7ylQi0JLdrMGZCPL9c.mft (raw, json)
Hash identifier: pTMv4jBWHcRF95We1Kzb2LvoKoLvrnMcXzd3rFF1PzA=
Subject key identifier: 01:D2:8E:FF:40:44:6D:B3:9F:C3:D8:69:98:62:72:3A:FA:DA:04:DD
Authority key identifier: 18:7E:EE:EA:2A:D6:07:BC:A5:42:2D:09:2D:DA:CC:19:90:8F:2F:D7
Certificate issuer: /CN=A91767B4/serialNumber=187EEEEA2AD607BCA5422D092DDACC19908F2FD7
Certificate serial: 0275
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GH7u6irWB7ylQi0JLdrMGZCPL9c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.mft
Manifest number: 026F
Signing time: Wed 25 Mar 2026 01:27:16 +0000
Manifest this update: Wed 25 Mar 2026 01:27:16 +0000
Manifest next update: Wed 01 Apr 2026 01:27:16 +0000
Files and hashes: 1: GH7u6irWB7ylQi0JLdrMGZCPL9c.crl (hash: oR+LGH5r8wXDLVUdqBuD9nrZRgq8AAi9/S2+hUqTCSk=)
2: 57C505EA708411EDA8B14246C4F9AE02.roa (hash: rnjwe5YYzLVIXlCM4/xr5SlC/j9WbCn85pwJbjVubyM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.crl
rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GH7u6irWB7ylQi0JLdrMGZCPL9c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 629 (0x275)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91767B4, serialNumber=187EEEEA2AD607BCA5422D092DDACC19908F2FD7
Validity
Not Before: Mar 25 01:27:16 2026 GMT
Not After : Apr 1 01:27:16 2026 GMT
Subject: CN=69c339f4-8ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ed:e8:6c:60:b1:3a:bf:93:ef:40:19:da:62:
7a:dd:25:e3:b4:39:34:54:d3:fb:4f:53:01:9d:03:
51:f1:67:54:62:5c:5a:ec:a8:c9:af:11:4f:24:da:
98:b2:99:08:fe:41:af:e0:87:88:93:cd:d9:cb:b9:
14:c7:d2:ef:7b:f0:4d:2d:58:5a:b3:b7:ea:07:b0:
4c:b0:75:68:2e:7e:58:3d:f3:0a:30:3d:f2:56:b2:
82:77:17:27:78:ee:6c:00:f2:bc:6e:3e:5c:05:1a:
6d:cd:fc:ff:67:8b:c5:92:d4:c3:cf:69:dd:b3:65:
f7:35:2d:09:e1:52:38:7d:04:a8:8c:6b:10:58:cc:
46:d9:6a:71:a0:92:32:f5:d6:5c:bf:2b:0d:1c:ab:
01:27:a9:99:59:77:6f:4f:92:28:47:58:63:90:52:
0c:16:9d:b2:49:95:7e:2f:46:55:10:58:d4:cf:b1:
e1:cb:61:70:2d:1b:7e:ff:fe:8a:14:49:b4:43:0d:
8e:ba:5c:47:40:03:02:a2:45:5a:d2:c6:2d:c2:77:
1c:5a:fa:6d:63:b6:93:32:ed:3e:5c:9b:c1:51:42:
5e:d0:58:7c:29:f5:6b:e0:a5:5e:d2:c3:44:90:b9:
7a:0a:f7:e0:ec:3c:09:e2:c3:32:3b:65:42:42:ec:
6b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D2:8E:FF:40:44:6D:B3:9F:C3:D8:69:98:62:72:3A:FA:DA:04:DD
X509v3 Authority Key Identifier:
keyid:18:7E:EE:EA:2A:D6:07:BC:A5:42:2D:09:2D:DA:CC:19:90:8F:2F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GH7u6irWB7ylQi0JLdrMGZCPL9c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:fa:b4:f2:70:5d:78:51:a9:b0:98:f3:9e:14:42:a5:89:76:
20:52:f8:f0:e5:99:46:8a:ec:0f:ac:76:23:24:50:65:16:11:
f6:71:1e:57:b8:21:3d:75:86:d5:3f:47:84:db:77:7b:0f:1c:
ed:64:73:1a:56:e1:67:db:93:ed:d4:b9:6f:ed:93:74:02:82:
c5:28:65:53:79:bc:32:88:97:fa:ee:09:a4:d3:90:59:dd:36:
e2:09:dd:eb:0c:98:14:9a:51:b9:20:43:23:d9:65:cf:2c:7e:
2e:64:a3:ca:e0:36:5c:77:0e:8e:b6:b9:87:f9:08:d4:66:5b:
f2:99:b6:f6:51:eb:08:75:8b:92:ec:77:bb:c5:35:88:be:49:
42:a6:48:d8:82:bb:78:78:85:c3:99:6e:4b:fe:b5:ad:fa:fb:
39:19:66:e0:77:4d:f0:6f:50:6b:30:ea:20:13:40:a9:f4:fc:
24:c8:23:e5:43:f1:7b:a7:2a:83:62:31:c7:a8:5c:80:41:60:
d0:09:1e:30:89:44:92:c0:4a:b1:11:84:45:dd:79:b6:1d:6b:
3a:7e:53:66:f7:bf:f2:4b:a5:45:24:2a:8d:75:52:63:8e:53:
85:dd:93:3e:c9:62:1a:43:49:97:67:c7:8b:19:3c:89:28:98:
8b:06:8f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:00:03 2026 by rpki-client