
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft
File: gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft (raw, json)
Hash identifier: kaywsKcTOnefhLsJGrg1XikfUKOhjzji/7t9tAKwXsc=
Subject key identifier: D1:EE:41:28:C2:2D:90:50:8A:C9:76:07:AB:02:46:E0:83:67:6C:C5
Authority key identifier: 80:84:01:72:3C:2E:41:84:56:AF:9A:0F:B2:5F:8C:32:1C:49:70:CB
Certificate issuer: /CN=A91D959F/serialNumber=808401723C2E418456AF9A0FB25F8C321C4970CB
Certificate serial: 081C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gIQBcjwuQYRWr5oPsl-MMhxJcMs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft
Manifest number: 0814
Signing time: Tue 24 Mar 2026 20:48:36 +0000
Manifest this update: Tue 24 Mar 2026 20:48:36 +0000
Manifest next update: Tue 31 Mar 2026 20:48:36 +0000
Files and hashes: 1: gIQBcjwuQYRWr5oPsl-MMhxJcMs.crl (hash: zxEyziLLgp1aFd2uq6/Pn1U8+tX0z/wK4zuQRCGYUs0=)
2: F75AEA8A13F111EB950DBC4EC4F9AE02.roa (hash: jOVkHlbZCBgwXHvRYiey/5/5qsAljK9sG8lXCEjLe4U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.crl
rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gIQBcjwuQYRWr5oPsl-MMhxJcMs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:48:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2076 (0x81c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D959F, serialNumber=808401723C2E418456AF9A0FB25F8C321C4970CB
Validity
Not Before: Mar 24 20:48:36 2026 GMT
Not After : Mar 31 20:48:36 2026 GMT
Subject: CN=69c2f8a4-f673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d7:e0:b7:9c:a8:fa:79:9b:5e:d2:7f:07:8b:
cd:cf:67:57:58:7f:9d:40:3f:7f:12:96:88:0b:ef:
d6:0d:15:42:04:6a:e6:da:1f:ac:8e:9d:d6:e4:4f:
a1:a3:58:cb:3f:44:4a:72:d3:89:5f:e3:f4:75:6d:
81:4e:71:0e:63:78:16:63:ea:e2:94:92:19:30:ed:
7f:23:6f:37:41:f8:e0:47:2a:0e:3c:f5:83:11:63:
02:0e:f3:33:e8:01:52:d4:c5:93:5b:d3:20:ac:56:
9d:05:29:38:4b:5e:c0:43:a9:81:48:9f:02:3c:1a:
69:e6:c4:20:59:bf:7a:ef:1f:c6:47:91:23:a6:15:
0d:df:b0:78:73:02:2e:32:58:23:c4:39:c6:0f:88:
e3:31:93:7c:9e:29:1e:8d:5f:f1:b6:77:33:16:f3:
51:81:4d:4d:4f:81:16:29:18:98:30:65:c2:21:76:
a8:3b:80:99:83:c5:1a:41:e8:35:8c:97:59:95:5a:
11:5c:bb:1d:ee:6d:2f:f3:23:3f:c7:b0:89:1c:1e:
44:ad:e5:55:88:ee:8f:2e:b0:fc:13:4b:3e:7d:b5:
b2:dd:0f:98:af:f3:fb:d4:b0:cc:66:56:da:6c:9c:
79:13:81:a7:b3:a6:1a:d0:4b:12:b7:08:fc:04:2e:
d0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:EE:41:28:C2:2D:90:50:8A:C9:76:07:AB:02:46:E0:83:67:6C:C5
X509v3 Authority Key Identifier:
keyid:80:84:01:72:3C:2E:41:84:56:AF:9A:0F:B2:5F:8C:32:1C:49:70:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gIQBcjwuQYRWr5oPsl-MMhxJcMs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:a1:af:6f:86:1c:c6:a7:10:57:4e:b7:21:17:7d:0b:25:1a:
06:1b:27:66:26:15:6a:44:09:08:88:f7:30:5b:44:dd:7e:db:
ef:36:54:71:88:57:8e:45:ef:c3:67:a5:7b:fe:2b:fb:88:48:
37:3c:90:79:0d:06:ec:09:08:ec:d7:a8:9e:cf:84:c2:8d:a3:
27:c5:81:09:d4:e7:07:60:65:fb:1a:e7:08:ce:52:59:d8:f0:
62:ff:00:20:94:91:79:ab:82:4e:68:96:7f:9e:94:c6:15:59:
61:77:f4:dc:f8:f0:7d:b9:35:55:5e:33:07:cc:57:09:5b:37:
d0:f0:12:a4:3a:ee:0b:01:23:6b:c1:b7:3a:93:4a:fc:56:0a:
96:4c:6b:be:05:a9:0d:3e:f5:18:8b:8e:73:95:7b:53:6d:5b:
49:f3:72:89:17:34:30:b1:e3:92:6c:23:39:79:bf:1d:8a:1b:
31:a6:18:f0:76:2a:1a:89:1f:4e:a3:92:f2:9e:af:9b:ee:32:
2a:94:c4:22:66:1d:6a:a2:52:c1:5f:83:6a:41:31:34:30:73:
35:4d:55:32:6a:f4:c2:ed:a8:3d:12:a8:a2:3f:b8:dc:a6:e0:
04:93:d5:98:52:be:4a:01:ab:b1:9d:7c:95:29:d3:40:02:93:
58:f0:3a:fd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCBwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDk1OUYxMTAvBgNVBAUTKDgwODQwMTcyM0MyRTQxODQ1NkFGOUEwRkIyNUY4QzMy
MUM0OTcwQ0IwHhcNMjYwMzI0MjA0ODM2WhcNMjYwMzMxMjA0ODM2WjAYMRYwFAYD
VQQDEw02OWMyZjhhNC1mNjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn9fgt5yo+nmbXtJ/B4vNz2dXWH+dQD9/EpaIC+/WDRVCBGrm2h+sjp3W5E+h
o1jLP0RKctOJX+P0dW2BTnEOY3gWY+rilJIZMO1/I283QfjgRyoOPPWDEWMCDvMz
6AFS1MWTW9MgrFadBSk4S17AQ6mBSJ8CPBpp5sQgWb967x/GR5EjphUN37B4cwIu
MlgjxDnGD4jjMZN8nikejV/xtnczFvNRgU1NT4EWKRiYMGXCIXaoO4CZg8UaQeg1
jJdZlVoRXLsd7m0v8yM/x7CJHB5EreVViO6PLrD8E0s+fbWy3Q+Yr/P71LDMZlba
bJx5E4Gns6Ya0EsStwj8BC7QuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNHuQSjC
LZBQisl2B6sCRuCDZ2zFMB8GA1UdIwQYMBaAFICEAXI8LkGEVq+aD7JfjDIcSXDL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTU5Ri8wNjgxMDBFQTEz
RjExMUVCOTc0RDk3NEVDNEY5QUUwMi9nSVFCY2p3dVFZUldyNW9Qc2wtTU1oeEpj
TXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dJUUJjand1UVlSV3I1b1BzbC1NTWh4SmNNcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
OTU5Ri8wNjgxMDBFQTEzRjExMUVCOTc0RDk3NEVDNEY5QUUwMi9nSVFCY2p3dVFZ
UldyNW9Qc2wtTU1oeEpjTXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsKGvb4YcxqcQV063IRd9CyUaBhsnZiYVakQJCIj3MFtE3X7b7zZUcYhXjkXv
w2ele/4r+4hINzyQeQ0G7AkI7Neons+Ewo2jJ8WBCdTnB2Bl+xrnCM5SWdjwYv8A
IJSReauCTmiWf56UxhVZYXf03Pjwfbk1VV4zB8xXCVs30PASpDruCwEja8G3OpNK
/FYKlkxrvgWpDT71GIuOc5V7U21bSfNyiRc0MLHjkmwjOXm/HYobMaYY8HYqGokf
TqOS8p6vm+4yKpTEImYdaqJSwV+DakExNDBzNU1VMmr0wu2oPRKooj+43KbgBJPV
mFK+SgGrsZ18lSnTQAKTWPA6/Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:08:49 2026 by rpki-client