
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft
File: GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft (raw, json)
Hash identifier: JxpcJlkV8jTc2wVCuNjKHKqLUKlj571Wx5hclTldMUk=
Subject key identifier: 3B:DC:7F:4C:84:A6:DF:20:C7:C1:DA:46:97:2E:E0:F3:F9:8C:F2:10
Authority key identifier: 18:39:88:FC:0D:EE:9D:BB:81:11:5E:82:BF:DC:95:41:25:61:41:3C
Certificate issuer: /CN=A91A09DE/serialNumber=183988FC0DEE9DBB81115E82BFDC95412561413C
Certificate serial: 04E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDmI_A3unbuBEV6Cv9yVQSVhQTw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft
Manifest number: 04DD
Signing time: Tue 24 Mar 2026 23:28:40 +0000
Manifest this update: Tue 24 Mar 2026 23:28:39 +0000
Manifest next update: Tue 31 Mar 2026 23:28:39 +0000
Files and hashes: 1: GDmI_A3unbuBEV6Cv9yVQSVhQTw.crl (hash: H+uKDsYbZyll2CHNcP7OHrYPsdh6zfslu62w3TPrWlk=)
2: C7EAFB5AB62011EC9060CD0FC4F9AE02.roa (hash: GqrG1fpjl/FS6/QcFeouUYo3Nekrspl6hyOuNMZABaQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.crl
rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDmI_A3unbuBEV6Cv9yVQSVhQTw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:28:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1251 (0x4e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A09DE, serialNumber=183988FC0DEE9DBB81115E82BFDC95412561413C
Validity
Not Before: Mar 24 23:28:39 2026 GMT
Not After : Mar 31 23:28:39 2026 GMT
Subject: CN=69c31e27-2ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:84:e7:d9:55:a9:ac:e3:98:16:06:af:5b:ea:
09:19:c9:88:23:e5:d8:2f:89:24:f1:eb:d8:30:5a:
38:1d:da:98:3d:d9:1a:2d:77:2a:5c:5e:e1:1e:d2:
97:81:a9:09:6b:67:b2:04:35:fc:d0:f3:66:87:c7:
87:b3:57:d7:7a:31:78:14:f4:e3:08:7f:6a:49:69:
a5:79:be:ae:c5:44:64:25:85:5b:98:f1:bc:87:62:
ed:31:67:3f:a7:2e:cb:11:41:ec:de:7e:d5:5d:86:
c0:0d:49:84:fe:1d:af:3e:06:ba:dc:a2:06:ce:a3:
f6:5d:85:d6:1e:69:e0:29:27:52:ae:20:aa:6d:93:
61:94:c0:9e:19:e8:07:cc:a8:39:a4:57:eb:17:3b:
23:65:75:b9:82:32:b4:41:36:0e:45:eb:01:36:d6:
86:d2:cf:c5:d2:48:3a:72:3b:d9:9f:93:a7:f7:96:
fb:ef:11:4e:27:77:62:e7:b0:4c:73:e0:e2:c3:24:
4e:04:9b:bd:15:8d:6d:f4:f7:34:d0:0c:27:2c:3b:
fc:d4:46:26:70:10:2b:51:b6:c7:e9:f0:b4:02:e3:
de:8a:7c:2f:0c:2d:4b:c9:bc:e9:fd:49:ec:11:7a:
21:be:fe:c0:a3:d8:e7:ef:9f:0c:e0:ab:6d:2d:5b:
3f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DC:7F:4C:84:A6:DF:20:C7:C1:DA:46:97:2E:E0:F3:F9:8C:F2:10
X509v3 Authority Key Identifier:
keyid:18:39:88:FC:0D:EE:9D:BB:81:11:5E:82:BF:DC:95:41:25:61:41:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDmI_A3unbuBEV6Cv9yVQSVhQTw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:3e:e3:61:58:64:bd:e5:45:3e:94:00:56:ea:36:d0:5f:2a:
65:1b:52:f7:fb:2c:6b:95:a9:34:0a:e4:36:25:7f:16:42:09:
df:0a:d3:c7:94:76:82:42:55:80:5e:25:86:3f:c3:8d:96:2c:
b9:a2:2e:34:99:f6:cb:fd:e8:41:8c:00:cf:f1:86:04:5b:95:
d9:88:5f:de:5e:94:58:55:00:5b:52:11:c8:ce:87:05:d8:8f:
46:94:b9:af:bf:9c:4d:ed:d3:3c:bb:40:88:32:b2:d1:1d:4c:
dd:ff:82:f1:70:1e:7c:ea:6c:10:b6:84:4a:f4:bb:7b:7b:73:
a5:de:38:91:7b:c3:ea:77:f0:66:0d:6c:8a:35:87:99:c2:60:
de:40:67:fd:3c:ea:37:e0:14:48:aa:ea:e7:7f:5a:a6:7f:79:
7e:7f:6d:95:8a:a9:c8:6f:24:6f:cf:d3:dd:2c:14:59:a8:33:
ab:84:8e:21:8e:03:0f:28:95:3e:9b:55:1f:1e:5a:00:c3:54:
50:f4:d3:92:63:45:2f:20:fc:24:a9:8c:d4:9a:3d:a2:bc:70:
3c:75:9f:55:61:21:11:9e:32:fd:6f:16:80:f0:99:1c:46:a7:
cf:e0:61:20:53:b9:6a:1c:7f:2d:b0:a0:fb:86:ab:a0:9f:cc:
11:75:b3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:59:36 2026 by rpki-client