
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft
File: gnj0fexbetwgGJf5m8xuK_qI0BU.mft (raw, json)
Hash identifier: lgzCzkmdw4s0BqXlNMbI7RepRSY+7kIU8yUJReSIgJM=
Subject key identifier: FC:1C:63:55:47:46:F1:4A:CB:35:B7:09:26:8D:EB:FE:56:96:0A:60
Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
Certificate issuer: /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Certificate serial: 4012
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft
Manifest number: 3B96
Signing time: Thu 26 Mar 2026 14:19:50 +0000
Manifest this update: Thu 26 Mar 2026 14:19:50 +0000
Manifest next update: Thu 02 Apr 2026 14:19:50 +0000
Files and hashes: 1: gnj0fexbetwgGJf5m8xuK_qI0BU.crl (hash: chDz0d2UzAoOwWlYC5tcCSab9bATuck6qHEKy1rtGGY=)
2: F0F17BEC9D5911EEAA9F0413C4F9AE02.roa (hash: qNU0HHnXHT9xXvXK+8XX/XVLpr9vWCA/nlfZ5ERqMgs=)
3: 9703DB3A870311F099FAB64CC4F9AE02.roa (hash: Ia93k88ZEDJc6d0wi+Tm+6RqZrnm8itW9IDb0N2U2FY=)
4: F025BAB69D5911EEAA9F0413C4F9AE02.roa (hash: uR51mJszDb9Ae22yXDS7eZ3aiLyh49qcIOPtps96eJ0=)
5: EF57185A9D5911EEAA9F0413C4F9AE02.roa (hash: dZPIQkB0aEOTr2YhKhn/8aOaubRqYT004bV6OKdDzDs=)
6: AF4D576AC55E11E9A634E487C4F9AE02.roa (hash: CbQ0bkGVGRLNvDmdHAGt1dJffFDlaxQ/ygzWLL1NvAM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl
rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16402 (0x4012)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A001E, serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Validity
Not Before: Mar 26 14:19:50 2026 GMT
Not After : Apr 2 14:19:50 2026 GMT
Subject: CN=69c54086-1624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:65:ae:68:12:67:aa:55:cd:2c:bc:3a:e2:f0:
e7:e3:08:e0:d5:c6:02:db:35:ae:fb:0a:e0:b7:41:
4d:22:21:c9:69:0b:83:e7:ac:e0:12:21:3f:45:05:
62:2e:19:23:75:75:fd:cd:91:ac:19:c3:9f:f7:28:
af:cc:5d:2f:53:3f:4b:e4:a2:e3:05:cb:38:8d:c7:
7b:89:18:ed:14:2a:00:85:d1:6a:9a:50:02:73:29:
06:68:56:2f:50:49:ba:fb:66:77:9d:1a:44:9f:21:
2d:29:e8:5d:f3:25:fe:aa:20:5b:84:0d:43:89:4d:
37:61:56:49:1d:57:4f:00:4b:e4:3d:fe:e8:6f:6c:
e3:9a:e5:8c:a0:ca:30:5e:37:f1:78:32:58:f6:d8:
7d:4a:2c:ef:c1:7a:46:73:9c:94:62:36:ef:3e:1f:
6e:11:b1:44:66:ef:7b:e8:f0:96:3f:af:3c:e8:d1:
37:04:7e:27:a5:bd:82:23:47:b6:84:9a:fb:1e:0d:
d4:73:6e:07:77:50:97:f6:9d:d6:05:ea:17:b1:30:
63:63:f3:ce:47:ff:b5:e2:49:f4:e8:e4:86:af:02:
0b:ff:53:3a:23:d3:4d:c8:f1:b5:55:e6:ef:ef:6b:
2d:2a:6d:6e:05:d0:e5:c3:89:3e:38:9e:a3:28:76:
42:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:1C:63:55:47:46:F1:4A:CB:35:B7:09:26:8D:EB:FE:56:96:0A:60
X509v3 Authority Key Identifier:
keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:70:57:2b:4a:76:3b:08:8f:e9:54:9e:8b:11:35:78:f7:31:
70:52:5e:c0:c5:99:f1:66:a4:c9:a0:f5:bf:8c:b0:95:5f:4f:
db:da:6d:03:de:1d:fc:8d:ff:bc:ee:2a:37:a5:d3:3a:45:2c:
50:fe:34:5f:56:9b:fa:25:f7:a5:ae:b1:1c:f7:2f:fc:1f:f6:
8e:40:16:38:1d:22:55:ba:94:6d:c9:ca:99:95:e8:b5:b1:6b:
24:c9:80:3c:78:bb:fe:ba:12:49:97:20:55:e8:a2:c5:1d:5c:
74:c1:cd:f7:db:d7:d3:94:b5:81:ef:82:66:54:17:ad:4e:45:
1b:4f:04:46:41:24:0a:d6:9e:66:34:d7:64:8d:32:24:70:22:
5d:17:cb:38:da:8d:1c:a4:4a:c4:d4:e9:8f:8b:fe:7b:18:fb:
9e:48:ab:34:5f:42:2a:42:f3:ab:a0:6e:cb:20:71:b9:a3:3b:
5c:46:5f:2b:cb:92:55:9a:41:15:66:0a:95:62:3b:6d:56:44:
ed:f0:a0:b7:42:7e:e4:73:99:34:e4:c0:cf:20:cf:c9:77:f8:
f6:fe:85:06:d9:b3:27:c1:bc:82:79:25:df:69:0e:e3:73:3f:
72:4b:7e:6c:b5:89:46:ba:c6:7a:14:30:b9:fa:c8:3f:fd:66:
bd:55:73:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:44:41 2026 by rpki-client