
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft
File: glI0BAdpP4vHwTIlP0BsBORndvY.mft (raw, json)
Hash identifier: QEAPmcAlOV/V2lAOKKxcYV0D9/yEe1+dk+hUUN9YkjI=
Subject key identifier: 9F:B7:DF:E5:BA:4D:A6:8A:B9:46:E4:03:60:7F:AB:64:E7:C8:A1:53
Authority key identifier: 82:52:34:04:07:69:3F:8B:C7:C1:32:25:3F:40:6C:04:E4:67:76:F6
Certificate issuer: /CN=A91B0514/serialNumber=8252340407693F8BC7C132253F406C04E46776F6
Certificate serial: 0293
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft
Manifest number: 0288
Signing time: Wed 25 Mar 2026 01:13:07 +0000
Manifest this update: Wed 25 Mar 2026 01:13:06 +0000
Manifest next update: Wed 01 Apr 2026 01:13:06 +0000
Files and hashes: 1: glI0BAdpP4vHwTIlP0BsBORndvY.crl (hash: fEqxv/9bSe9aJZfdBAVc3vPsRE2k7ZRtJe67ITIXCpo=)
2: 81055570A5C611F09009BB3EC4F9AE02.roa (hash: VEI8px2anVG8cZfCHh405MajK0/zl7ELNzRvGRaIcvk=)
3: 5382BB6AA5C611F0900E7F3EC4F9AE02.roa (hash: HHD0wlUVnVxAudrxvBwUFKWMsBYPEVEp5DArYrdk6Yg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.crl
rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:13:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 659 (0x293)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0514, serialNumber=8252340407693F8BC7C132253F406C04E46776F6
Validity
Not Before: Mar 25 01:13:06 2026 GMT
Not After : Apr 1 01:13:06 2026 GMT
Subject: CN=69c336a3-4eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:72:c8:cd:df:98:80:a3:ac:f0:c0:b0:ad:32:
89:a9:11:85:59:71:d6:5e:47:ea:c2:e6:e6:24:a1:
e0:d4:2f:bb:c3:4a:be:89:23:9c:15:0b:69:ef:67:
04:4f:da:ee:2f:b1:83:4a:23:13:71:da:c0:dd:00:
bc:18:ee:c6:bf:fb:a0:d8:a8:81:f3:2d:2c:05:b6:
79:9c:71:1b:7a:7a:07:c5:f3:b1:33:99:3f:12:e5:
5c:d5:62:a1:8e:fb:68:25:00:2a:09:71:61:31:f6:
d7:ab:76:df:32:73:37:5c:aa:14:79:d9:4c:53:8a:
52:9a:40:ff:a5:da:67:4f:70:99:d9:3e:a8:30:bd:
e1:7e:f7:64:62:1f:9c:b5:90:6d:b9:b4:69:65:c1:
21:37:6d:ea:fd:17:05:f1:e7:27:d5:da:91:de:6e:
31:3f:42:d6:23:45:4e:49:6f:72:cb:5b:8d:3e:af:
1c:81:f3:98:7d:7f:18:0d:d7:1d:25:45:20:c8:85:
36:96:f1:12:05:37:28:cb:6a:14:e1:d1:20:3d:c5:
f8:46:d6:52:c7:38:23:e6:d0:7c:00:66:fe:1a:f8:
4f:de:5c:51:5f:87:36:10:84:1a:cf:75:a4:c8:a8:
87:5c:bf:c2:bc:fa:1d:03:c6:a9:06:9e:a3:77:2b:
ac:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B7:DF:E5:BA:4D:A6:8A:B9:46:E4:03:60:7F:AB:64:E7:C8:A1:53
X509v3 Authority Key Identifier:
keyid:82:52:34:04:07:69:3F:8B:C7:C1:32:25:3F:40:6C:04:E4:67:76:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:27:bb:53:e8:db:67:8b:4b:79:93:63:e4:3e:62:e5:d7:19:
04:f1:61:2d:57:2d:8d:5c:a2:7f:8d:c8:33:96:0b:e8:e5:cd:
be:95:18:1b:68:00:d7:c9:d6:fc:45:33:8c:38:c5:2a:e3:64:
44:6a:15:66:14:23:23:c5:7c:7d:3d:5a:2f:b2:79:59:fd:85:
09:1c:32:b3:b6:fa:0b:f5:e3:78:72:52:8c:da:58:bd:26:9e:
fe:17:7b:7a:db:04:a2:86:a4:eb:60:cb:ec:d1:67:a8:4f:5c:
7d:ec:a1:29:ec:97:16:fe:bd:78:b4:a7:06:88:22:3d:fb:6b:
d1:17:09:a8:11:9c:01:dc:c9:3c:95:03:4e:d2:42:c8:ff:38:
eb:cd:b8:57:4c:24:93:49:00:9e:36:2d:77:bb:3a:d8:b3:04:
f7:b3:40:ef:84:b4:b8:3a:31:8d:a3:0e:e9:fa:37:b8:f6:bb:
cc:63:a1:7e:7c:dc:cf:90:39:b9:22:e8:f0:a5:39:fb:f6:f2:
09:7b:31:14:33:77:61:34:f6:b1:a6:8d:e0:f8:0a:82:3b:ed:
fb:cd:18:0e:95:aa:1d:49:04:b5:bd:bb:70:d5:2b:17:84:8d:
17:7c:91:7b:21:8d:c6:69:cd:93:76:91:41:55:d1:52:d9:bb:
c2:1c:91:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:43:51 2026 by rpki-client