
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft
File: gnj0fexbetwgGJf5m8xuK_qI0BU.mft (raw, json)
Hash identifier: daYRAF7HA7ThdC0/nb2wIbMFhF6Cg5ek+I1h6A4hkGQ=
Subject key identifier: 89:E7:71:EB:F5:C6:4C:8D:A7:CD:0F:4E:9E:A1:B0:53:07:F5:17:C5
Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
Certificate issuer: /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Certificate serial: 402A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft
Manifest number: 3BAE
Signing time: Tue 12 May 2026 14:20:12 +0000
Manifest this update: Tue 12 May 2026 14:20:11 +0000
Manifest next update: Tue 19 May 2026 14:20:11 +0000
Files and hashes: 1: gnj0fexbetwgGJf5m8xuK_qI0BU.crl (hash: 5UwCGAcXV8WURMw0D3sY9xN8c0BkDiDroLwaOI9u530=)
2: EF57185A9D5911EEAA9F0413C4F9AE02.roa (hash: dZPIQkB0aEOTr2YhKhn/8aOaubRqYT004bV6OKdDzDs=)
3: F025BAB69D5911EEAA9F0413C4F9AE02.roa (hash: uR51mJszDb9Ae22yXDS7eZ3aiLyh49qcIOPtps96eJ0=)
4: F0F17BEC9D5911EEAA9F0413C4F9AE02.roa (hash: qNU0HHnXHT9xXvXK+8XX/XVLpr9vWCA/nlfZ5ERqMgs=)
5: 9703DB3A870311F099FAB64CC4F9AE02.roa (hash: Ia93k88ZEDJc6d0wi+Tm+6RqZrnm8itW9IDb0N2U2FY=)
6: AF4D576AC55E11E9A634E487C4F9AE02.roa (hash: CbQ0bkGVGRLNvDmdHAGt1dJffFDlaxQ/ygzWLL1NvAM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl
rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16426 (0x402a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A001E, serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Validity
Not Before: May 12 14:20:11 2026 GMT
Not After : May 19 14:20:11 2026 GMT
Subject: CN=6a03371c-5eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e9:87:e3:62:f6:5f:53:bf:11:71:b0:58:93:
0f:2d:b5:c1:56:f1:0c:51:b5:47:1f:9e:b2:78:f3:
39:6f:ac:53:54:db:1e:c6:4b:bd:10:5f:e3:bb:28:
fa:5e:3d:a6:29:ba:7f:49:60:f3:43:dc:8e:e9:19:
d5:62:7a:cd:d4:3d:1c:c7:83:ee:ef:77:b1:92:f9:
c0:55:b1:9a:77:93:02:c4:93:f1:6a:86:6b:2d:eb:
4f:e8:ff:8e:93:6a:a0:2c:e4:8c:30:23:c2:79:cb:
f3:34:12:bc:d9:25:a5:36:cd:5f:eb:70:7b:96:b4:
27:ec:c2:fc:07:64:10:f3:78:57:7c:0b:45:79:8b:
d9:2c:87:dc:8b:b8:87:53:27:59:83:1e:76:4a:fc:
a1:ab:c8:9f:0c:bf:7e:dc:99:01:34:5e:5b:d9:8f:
33:f4:6d:b9:5c:8f:13:3a:d5:0a:f4:87:08:cc:97:
3a:76:cf:15:43:86:29:69:3e:04:3b:01:55:b5:49:
9c:25:cc:bd:ad:54:8a:67:ea:e4:17:6e:f7:9f:5a:
e6:3c:b3:bb:f1:de:1b:57:06:21:a2:4d:54:15:84:
97:cd:e0:4a:9a:56:5c:1f:75:c4:03:4d:39:d8:5a:
dc:c0:f4:49:24:8c:c6:48:7a:fd:7a:fa:84:c2:6f:
fe:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E7:71:EB:F5:C6:4C:8D:A7:CD:0F:4E:9E:A1:B0:53:07:F5:17:C5
X509v3 Authority Key Identifier:
keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:40:a9:30:01:33:a3:41:eb:f6:92:33:1b:5e:46:2a:0b:6f:
55:26:47:2d:6e:3b:b6:e2:c9:79:02:21:18:90:ab:6a:5c:20:
b0:2e:77:a9:43:93:b2:18:3b:7d:37:c3:c2:c3:12:f2:b1:4c:
7b:4e:0a:c2:90:dc:aa:0f:e6:b3:2e:eb:2c:e4:9a:4f:d6:5c:
b8:87:f3:cb:86:5d:98:97:b0:b7:24:0c:96:8f:5f:0c:a6:5a:
bb:3d:a3:7e:be:77:42:4e:09:1e:41:73:7e:7a:7a:91:5d:be:
7e:fa:e9:94:e2:f8:7c:05:55:bf:ba:99:6b:93:e2:06:6a:e6:
33:b0:49:47:44:27:ce:dc:be:32:61:8c:d0:88:5a:99:76:81:
ad:af:70:95:13:5a:31:a0:69:7f:f6:ea:9f:3c:79:40:93:84:
7b:aa:4a:24:36:9c:f4:06:84:98:82:dd:c3:ad:a1:6d:73:29:
7b:56:cd:20:38:0a:21:81:96:05:08:ee:04:36:6d:1b:36:27:
30:dd:63:09:a1:cc:8e:68:48:2f:3e:4c:e1:5e:57:df:79:e3:
dd:8f:28:79:a7:1b:b9:d2:ca:eb:00:55:06:d0:81:63:8d:a7:
04:dd:db:e5:4a:ea:fd:f8:15:2b:83:8f:a9:98:08:68:fc:cd:
4f:2f:20:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:42:32 2026 by rpki-client