
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE9F1/EE695FE6875D11EE8F489913C4F9AE02/Gns-z0RjPh6iTJBhetOXRV505rI.mft
File: Gns-z0RjPh6iTJBhetOXRV505rI.mft (raw, json)
Hash identifier: lp1Obg7gJZTEDHaUztxniYztDW93YXvSUA38KB3wEPg=
Subject key identifier: 88:10:CF:03:41:D4:AC:29:34:3D:90:35:97:8D:39:6E:44:ED:1C:C1
Authority key identifier: 1A:7B:3E:CF:44:63:3E:1E:A2:4C:90:61:7A:D3:97:45:5E:74:E6:B2
Certificate issuer: /CN=A91CE9F1/serialNumber=1A7B3ECF44633E1EA24C90617AD397455E74E6B2
Certificate serial: 01D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gns-z0RjPh6iTJBhetOXRV505rI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE9F1/EE695FE6875D11EE8F489913C4F9AE02/Gns-z0RjPh6iTJBhetOXRV505rI.mft
Manifest number: 01D2
Signing time: Mon 11 May 2026 03:39:43 +0000
Manifest this update: Mon 11 May 2026 03:39:43 +0000
Manifest next update: Mon 18 May 2026 03:39:43 +0000
Files and hashes: 1: Gns-z0RjPh6iTJBhetOXRV505rI.crl (hash: EAR7ID80Nxg3GvApU9bup/mrGa3SMScLdO/lu9GaScA=)
2: 398B4EEE875E11EEBCAB2514C4F9AE02.roa (hash: t10meiycpjtLJ/5vDavAMDin3n4ylNyYCIEx6WOGCC4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE9F1/EE695FE6875D11EE8F489913C4F9AE02/Gns-z0RjPh6iTJBhetOXRV505rI.crl
rsync://rpki.apnic.net/member_repository/A91CE9F1/EE695FE6875D11EE8F489913C4F9AE02/Gns-z0RjPh6iTJBhetOXRV505rI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gns-z0RjPh6iTJBhetOXRV505rI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 03:39:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 471 (0x1d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE9F1, serialNumber=1A7B3ECF44633E1EA24C90617AD397455E74E6B2
Validity
Not Before: May 11 03:39:43 2026 GMT
Not After : May 18 03:39:43 2026 GMT
Subject: CN=6a014f7f-c08a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5a:7c:ed:8c:35:a7:03:71:ec:eb:27:45:48:
b9:42:41:c4:fc:35:43:b6:d0:9d:73:52:6f:e6:42:
a7:2b:49:69:df:0b:cb:db:8b:9a:ff:83:d1:93:8b:
34:68:84:46:43:91:20:07:71:63:72:cd:20:20:74:
48:6d:4b:bd:ac:90:64:a3:58:7f:19:c3:95:c0:57:
d1:e4:13:f2:61:ec:9c:03:44:82:cd:50:c7:9b:07:
27:7c:11:e5:ca:8c:f3:e8:ab:7b:74:41:6e:41:a8:
ea:4b:24:a8:87:43:9a:40:b5:0f:bb:45:e0:ba:65:
26:17:ab:df:ad:20:f2:93:2d:27:91:18:74:2f:bf:
af:ab:ae:ac:5a:c6:97:38:60:a2:7c:24:03:66:75:
02:29:a3:1c:c7:42:bb:e6:2f:91:c8:20:4f:8d:65:
8f:e6:30:93:95:27:74:d0:94:1a:52:b5:88:1a:2a:
43:ad:2b:de:77:97:c1:e3:a6:d6:22:40:12:53:6d:
5c:32:e7:52:58:43:e8:e1:be:15:9e:51:81:4d:a0:
c2:a3:ed:4f:09:8c:ec:9e:72:88:77:c6:02:e7:7a:
e1:68:33:44:c7:bc:9c:e7:2f:34:02:e6:e8:6f:f0:
e9:d8:99:1e:8e:80:99:60:6d:0b:06:0c:36:d0:00:
97:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:10:CF:03:41:D4:AC:29:34:3D:90:35:97:8D:39:6E:44:ED:1C:C1
X509v3 Authority Key Identifier:
keyid:1A:7B:3E:CF:44:63:3E:1E:A2:4C:90:61:7A:D3:97:45:5E:74:E6:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE9F1/EE695FE6875D11EE8F489913C4F9AE02/Gns-z0RjPh6iTJBhetOXRV505rI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gns-z0RjPh6iTJBhetOXRV505rI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE9F1/EE695FE6875D11EE8F489913C4F9AE02/Gns-z0RjPh6iTJBhetOXRV505rI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:9c:59:08:8a:8e:a8:9d:4b:91:90:23:43:e1:75:0e:73:69:
6f:0d:c6:4b:33:13:ee:a7:3e:22:3a:cb:e7:da:e9:99:09:1b:
d8:5c:8e:ad:5f:1e:1a:b4:9e:a1:dc:a1:25:1f:81:09:38:80:
ad:6d:ad:cf:27:9a:fd:b2:f2:f3:37:80:66:01:b6:bf:1c:ef:
a6:c5:2e:66:52:b2:32:be:0c:a0:28:86:6f:bf:3d:bf:23:cc:
b7:22:f2:f2:32:bf:46:43:71:04:c5:40:ee:20:3e:72:cc:b7:
96:a0:ac:68:47:46:c0:b1:95:e1:32:09:9b:03:a4:58:fa:dc:
4e:27:34:8d:47:b0:80:0a:2d:13:a2:1c:13:c4:f7:d1:02:a0:
5b:e4:c3:de:9e:e6:9b:01:b0:e8:69:a1:45:46:73:8c:94:52:
56:ba:6b:a2:85:b6:85:38:ee:73:c6:56:9c:d5:b8:e5:d3:74:
b2:0a:72:12:65:e2:bf:f3:25:65:a1:a2:58:a8:e3:da:06:87:
09:53:f0:bd:59:1b:9b:46:a5:0a:02:c5:52:9e:3a:68:94:dd:
15:3a:94:eb:1e:82:7e:9c:3d:8c:1c:42:64:33:82:68:0c:f0:
1e:4d:8a:ee:98:86:9c:f2:f0:0c:7c:4d:8f:92:68:14:ef:4c:
9a:36:1c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:31:38 2026 by rpki-client