
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft
File: GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft (raw, json)
Hash identifier: EtkNThLWxp7nzPa2VX66DWBzkDogBn1SY6nVa3HEJxs=
Subject key identifier: 2E:AF:3F:4D:BA:BE:D8:A6:CC:FA:1F:83:2E:08:A0:65:6F:A3:3C:0A
Authority key identifier: 19:9D:4B:E0:60:8A:56:F5:04:80:C0:AD:26:45:DA:D7:B6:90:02:59
Certificate issuer: /CN=A91A470C/serialNumber=199D4BE0608A56F50480C0AD2645DAD7B6900259
Certificate serial: 55
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GZ1L4GCKVvUEgMCtJkXa17aQAlk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft
Manifest number: 50
Signing time: Fri 27 Mar 2026 07:55:53 +0000
Manifest this update: Fri 27 Mar 2026 07:55:52 +0000
Manifest next update: Fri 03 Apr 2026 07:55:52 +0000
Files and hashes: 1: GZ1L4GCKVvUEgMCtJkXa17aQAlk.crl (hash: Dw1K52iiQG4rxpbjZr9E7qlkOD1I/6MtO1OCfMiT+tE=)
2: 7B31D5E4CD0B11F0A1E66D5FC4F9AE02.roa (hash: NnPs85doUGI8wBjuyfyV3CMN9xCSIH8SHzO99MPJ70I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.crl
rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GZ1L4GCKVvUEgMCtJkXa17aQAlk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 07:55:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85 (0x55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A470C, serialNumber=199D4BE0608A56F50480C0AD2645DAD7B6900259
Validity
Not Before: Mar 27 07:55:52 2026 GMT
Not After : Apr 3 07:55:52 2026 GMT
Subject: CN=69c63809-aa24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3c:f6:d3:44:04:c3:19:66:6f:3b:a1:b7:76:
24:83:3e:bc:e4:cd:80:d0:31:98:f3:03:8f:64:b0:
a6:40:eb:4f:ee:da:b4:cc:3c:eb:4b:fe:48:fa:ff:
94:50:45:d0:03:89:b8:50:00:2e:0a:94:57:32:28:
bd:07:b8:6a:eb:91:0d:97:9c:f0:e3:5f:40:2b:ec:
5b:b9:a9:1f:8b:5c:4b:4d:e7:ac:4d:92:0b:32:03:
46:a7:3f:cc:c6:41:7b:1d:e1:55:9f:d8:e9:0f:80:
d9:22:86:12:18:65:5b:0c:2e:ee:db:79:e5:3d:f5:
af:58:6e:1d:1d:a0:a9:80:98:c6:10:2a:56:cd:ac:
8e:f8:8d:0c:ef:8a:82:bd:d0:3c:06:ca:c3:2d:88:
21:7b:47:e4:23:39:49:40:36:4e:55:80:6d:db:a7:
3e:43:f4:df:b9:fc:b3:72:54:8d:6e:52:b1:c1:99:
2b:e2:87:c4:ab:9c:a7:bf:00:aa:b0:e1:d8:01:58:
d7:c7:9a:a0:26:a7:37:5c:23:98:4b:6f:18:7f:d9:
dd:10:35:a4:7d:a5:fc:11:91:93:f9:ad:22:fb:32:
5f:43:29:80:5a:fc:3a:1b:43:62:be:34:c9:56:a3:
ec:fc:9e:d1:98:7a:76:85:67:81:74:01:fe:ac:d8:
11:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:AF:3F:4D:BA:BE:D8:A6:CC:FA:1F:83:2E:08:A0:65:6F:A3:3C:0A
X509v3 Authority Key Identifier:
keyid:19:9D:4B:E0:60:8A:56:F5:04:80:C0:AD:26:45:DA:D7:B6:90:02:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GZ1L4GCKVvUEgMCtJkXa17aQAlk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:d3:38:2f:bd:70:c0:78:e6:af:33:de:c4:76:e7:81:cd:8e:
30:77:0a:ec:d3:a3:2f:b5:3b:c8:96:73:3f:9d:4f:17:06:52:
56:5d:fe:01:01:34:8b:fe:7c:6e:16:86:70:13:56:52:49:d9:
7f:86:47:fa:4d:6c:6f:ab:da:e0:14:8f:9f:f2:5d:da:36:0d:
5c:a0:45:27:10:a5:3f:7e:06:75:4b:ca:74:b5:e3:8d:a3:d9:
ea:7d:8a:36:80:95:f1:f5:53:b9:24:d9:74:03:d4:1b:e0:64:
6b:2e:73:4d:3a:5a:44:9b:6a:43:bf:f0:d3:59:bb:57:fe:46:
52:c4:e4:d1:e8:da:07:d9:7f:5b:5a:74:46:b8:ab:f5:d8:e9:
aa:7a:66:7a:0b:0b:7c:ef:0a:14:26:ad:84:96:b2:59:e2:d2:
bf:83:72:4f:0f:72:af:b8:f0:c5:84:de:4a:e1:ef:e7:c3:7e:
70:56:6a:59:da:06:aa:92:cc:73:26:c3:86:90:31:ca:6d:63:
dd:0a:7c:22:ca:78:06:e1:0c:78:b4:1f:1a:66:9d:3f:58:b2:
0d:6e:b0:fc:df:4f:3b:3d:2f:89:08:12:44:8a:dd:c5:d1:24:
8d:84:71:5e:07:0c:ea:02:2d:65:13:13:92:e0:7c:a5:b4:42:
b4:10:7f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:40:45 2026 by rpki-client