
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
File: G1Zt71944xm_wNFADedV4mSoK7w.mft (raw, json)
Hash identifier: oDSNVv5e5ifxZzdzNI0HCtbyuDsumJVRwB4NGeeBawM=
Subject key identifier: 36:87:0C:96:E2:CD:63:FF:A3:52:8B:89:67:66:04:27:E1:D3:D4:15
Authority key identifier: 1B:56:6D:EF:5F:78:E3:19:BF:C0:D1:40:0D:E7:55:E2:64:A8:2B:BC
Certificate issuer: /CN=A91C20AB/serialNumber=1B566DEF5F78E319BFC0D1400DE755E264A82BBC
Certificate serial: 098C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
Manifest number: 0971
Signing time: Tue 24 Mar 2026 19:51:16 +0000
Manifest this update: Tue 24 Mar 2026 19:51:16 +0000
Manifest next update: Tue 31 Mar 2026 19:51:16 +0000
Files and hashes: 1: G1Zt71944xm_wNFADedV4mSoK7w.crl (hash: aQpQ0RJ6byrzmRoZbKuP6iOy1eZdvB8K1hWCHHAs4eg=)
2: 28D36892B09411EAA964465EC4F9AE02.roa (hash: uB90XoJd0h+ZsfjSZb2jo0kKEK2zlo/T12QD2KhR6to=)
3: AB659244056211EBAE3DBC4CC4F9AE02.roa (hash: 6SFxnAYtEmDY0FSpqWSl0msvr8nqW/ZhQvTYvJBPZWo=)
4: 2979BC38B09411EAA964465EC4F9AE02.roa (hash: 3TgfJcKtVv25yE8b/IOKhDazNbjHxuANTNvhbFUhyMk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.crl
rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:51:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2444 (0x98c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C20AB, serialNumber=1B566DEF5F78E319BFC0D1400DE755E264A82BBC
Validity
Not Before: Mar 24 19:51:16 2026 GMT
Not After : Mar 31 19:51:16 2026 GMT
Subject: CN=69c2eb34-f2a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:62:1b:cc:3a:dd:01:49:b2:50:3a:08:77:e0:
c8:0e:4d:48:29:73:32:0a:df:63:1b:f5:32:6b:b7:
3d:d5:99:85:a3:b0:95:f5:ee:33:66:68:6f:56:7a:
ce:ec:a5:3d:f6:7a:17:dd:54:db:83:c5:f6:b5:8a:
db:8b:3f:42:81:a9:e7:86:b9:55:31:eb:2c:88:36:
7a:aa:df:68:6c:bb:18:2d:6d:1c:8c:ef:46:ac:36:
4d:b3:b9:d4:f4:94:58:35:06:b1:25:ca:29:43:ed:
2d:95:11:d7:60:11:cc:c1:04:2e:01:f0:de:be:f3:
3b:09:e9:ae:ce:57:81:66:a4:65:6e:d1:3b:e2:30:
8c:2d:52:25:d0:17:a7:87:a3:71:0c:18:47:83:d8:
9d:36:d8:95:34:d2:e8:6a:06:00:a1:1b:3a:75:a6:
bc:90:34:3f:f9:8e:02:fa:54:38:59:d1:ac:cc:81:
5f:a5:ea:a3:d1:30:be:32:11:b8:2c:4b:4b:cd:2e:
52:90:15:41:3e:d9:dc:16:1f:d2:d9:c6:0e:fa:83:
1c:c7:46:f5:bb:de:1f:4c:34:d8:e6:b5:1d:a2:86:
5e:c5:de:7d:77:33:8f:17:af:13:f7:be:d9:9f:be:
3b:26:37:b8:cc:0d:f2:53:e5:68:b0:9c:11:10:6e:
a6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:87:0C:96:E2:CD:63:FF:A3:52:8B:89:67:66:04:27:E1:D3:D4:15
X509v3 Authority Key Identifier:
keyid:1B:56:6D:EF:5F:78:E3:19:BF:C0:D1:40:0D:E7:55:E2:64:A8:2B:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:ce:e8:c5:11:a9:72:98:a5:cf:b8:a6:bd:fb:10:ed:31:cd:
60:07:18:5f:f1:a6:da:77:4b:e4:ae:4c:8d:ec:b8:a6:f2:02:
99:ac:b2:23:b6:1b:ba:a4:b2:68:4e:49:32:2f:a1:0a:38:0e:
3d:79:0b:46:36:8f:e6:82:d0:9d:d6:49:35:3d:c1:e3:19:ea:
14:19:30:1e:ee:c8:db:c2:71:5f:61:fc:bc:dd:4f:a9:c9:5a:
2d:27:e8:9d:bf:7e:e2:15:41:da:4f:a4:69:72:6a:5a:f0:89:
64:60:d4:bc:d0:73:2a:74:12:70:30:d6:61:4a:7e:b0:d6:f7:
91:d6:41:19:4a:42:eb:fc:1a:4e:6f:c2:83:10:47:b7:32:1f:
4d:c9:31:29:4c:10:d1:c9:f2:7a:98:79:67:5a:dd:c3:73:20:
d7:53:f9:8c:8c:99:0a:e8:28:b4:7c:9a:63:f4:c8:36:3d:57:
9e:07:af:4a:d8:42:4f:c2:ec:8d:8d:eb:06:d9:16:63:09:a6:
04:46:e4:63:32:ee:1f:69:7d:eb:4e:90:22:21:47:87:20:1e:
53:53:ff:f7:8e:bc:12:4e:54:b1:65:eb:90:bc:ad:99:18:80:
31:89:24:39:be:54:6e:46:d0:08:02:6d:21:74:f9:d5:95:8a:
b9:ca:c0:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:52:28 2026 by rpki-client