
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft
File: GJZ9zbckqEpxcR5niqsdLnIhXWw.mft (raw, json)
Hash identifier: AU5YDTyXAHvf8duzYyBnvxuUT4d4KrOjZSHL5AKYZ+U=
Subject key identifier: F6:1C:AC:9C:5A:E3:68:3E:77:DD:F4:B7:32:D6:CA:34:D4:45:F7:21
Authority key identifier: 18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C
Certificate issuer: /CN=A91D243F/serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C
Certificate serial: EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft
Manifest number: BF
Signing time: Wed 25 Mar 2026 06:20:18 +0000
Manifest this update: Wed 25 Mar 2026 06:20:18 +0000
Manifest next update: Wed 01 Apr 2026 06:20:18 +0000
Files and hashes: 1: GJZ9zbckqEpxcR5niqsdLnIhXWw.crl (hash: +C6jbjUorqzPByUsbOkff3++zIPX8quGCvOOU0/D/GY=)
2: 5E6EBAF64D0611F09396603CC4F9AE02.roa (hash: EQ/dGxeAiZ6vHXkroDIcnJlL4m1F5+KIqXhx9EpVY3I=)
3: 1808A790318411F0BC1DD041C4F9AE02.roa (hash: Yprm848X+Zm8Tq1T0Mdhgazd/B8nteAp3m1HTdOALK4=)
4: 372E72941F7811F0AC4FFF82C4F9AE02.roa (hash: aIPk2IIOdSh9CObI9EP0QJCswO68I2tnkEvU/YLg9Zk=)
5: 6896A446318411F0BBC4F91DC4F9AE02.roa (hash: MfzN1k54/wkCiAendoymZC3ZEWqOCUIUy5Y1tmrtH+A=)
6: 17894A68318411F0BC1DD041C4F9AE02.roa (hash: LAExrJE538PRX43tpAGuI2fnl3to7F90HEFOP88VoQE=)
7: 37B448241F7811F0AC4FFF82C4F9AE02.roa (hash: KXmFtf/aIxVULwWU2AV8/gJ5ecdsYrZWDPGXWWMJwLA=)
8: 349ACBB2450811F09650FF5FC4F9AE02.roa (hash: wVIVQYayEMOatDoFauwoUEJLMsb5B+2FoO+m1LHPbJc=)
9: 3408F1BA450811F09650FF5FC4F9AE02.roa (hash: LgIHG0W8PH+BYBIWZChDxWTeWm+mE0UsFagnNkGmodQ=)
10: 1879BE8A318411F0BC1DD041C4F9AE02.roa (hash: n9iP0WPrNjOJsc8gp31zfQ/gYNuAttaaJx8o5oGeAlU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl
rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:20:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 236 (0xec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D243F, serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C
Validity
Not Before: Mar 25 06:20:18 2026 GMT
Not After : Apr 1 06:20:18 2026 GMT
Subject: CN=69c37ea2-0813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:00:e6:5e:e1:e8:a1:25:cf:75:6f:2f:ca:0a:
f6:8d:bd:ad:a0:e0:e7:de:81:36:b7:9a:d7:0f:0d:
5e:07:df:a9:ea:07:d2:06:9a:26:ed:68:37:c4:47:
66:62:22:05:91:f0:76:6c:58:f1:2e:a9:d7:bf:a2:
4b:11:55:0c:89:56:eb:f1:ff:54:11:29:90:5c:0e:
0c:78:e2:86:9a:40:8d:14:94:1b:2d:ee:b5:fa:67:
17:ad:a3:8e:9a:47:cd:6b:53:ce:ed:59:6f:74:b6:
08:04:dd:7a:f7:70:75:e7:fa:04:60:a7:1f:56:fa:
3d:52:6a:cc:4b:d9:2c:05:c6:2e:4b:c6:16:fe:d0:
74:12:14:12:f4:3e:38:e7:72:3d:6b:c2:04:89:1f:
63:60:dd:7d:6b:2e:4d:ef:8c:18:26:0d:e3:9c:b6:
9c:d9:67:70:85:78:85:13:a6:18:a6:9d:32:49:23:
b3:93:e1:14:4e:32:e8:43:bb:19:d2:60:1c:b2:56:
12:5a:ba:38:7d:02:db:70:c0:8f:3b:3c:7f:f2:28:
b9:34:7d:3e:63:1c:d2:83:b6:a7:da:f1:d2:85:89:
a9:56:82:b1:f6:34:ab:ab:34:e9:4a:8c:29:80:d3:
36:32:90:0e:26:2d:e9:b7:c8:2f:c3:eb:c3:40:27:
12:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:1C:AC:9C:5A:E3:68:3E:77:DD:F4:B7:32:D6:CA:34:D4:45:F7:21
X509v3 Authority Key Identifier:
keyid:18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:bb:a8:19:32:a2:7b:b8:ad:00:45:6a:d6:a7:1e:6a:38:a8:
63:2a:c2:0a:a1:a9:ca:46:52:97:01:69:9c:87:5e:fe:55:e5:
3b:7c:7e:3d:26:e5:50:a6:79:9c:ec:ba:73:0f:0e:8f:f0:f5:
01:b6:57:1e:86:0b:b8:cb:fb:a6:f7:12:9a:fe:f4:16:b4:22:
21:63:27:18:82:69:cf:67:a0:9e:df:1e:b9:7e:a8:c8:7c:3e:
56:57:37:53:1d:e0:c2:06:95:e9:aa:c9:5f:90:62:98:1e:a4:
5b:72:a4:be:8c:1d:da:05:1a:a3:d1:5e:62:94:8d:60:55:64:
2b:e6:d2:97:28:05:0d:a1:7b:a5:5c:9f:85:5f:c6:9b:ae:50:
92:29:53:9b:14:a1:18:c7:d7:74:49:ae:80:6b:aa:15:61:54:
c1:7c:00:5b:3a:c4:db:cb:5b:70:ca:ba:3d:34:56:19:cb:b0:
66:fe:83:26:61:fa:d5:e2:81:e6:0f:2c:cb:02:8f:6d:a4:eb:
a7:08:65:e8:3e:de:b4:e1:50:59:ba:eb:93:c8:8a:38:e4:14:
a5:b6:c9:4b:1c:cc:cf:28:40:52:99:2b:d7:c9:29:4d:81:e6:
d8:35:50:87:b4:ef:ea:d0:cd:a8:ec:ab:1d:0c:19:97:82:5c:
e9:da:e6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:03:10 2026 by rpki-client