
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft
File: GlXbYnoqLksmZy7g4ddRL4ZBToM.mft (raw, json)
Hash identifier: kljiqPPpkSStxFXnPoAdn0Tl84B0C+8lOL+/byBdQdc=
Subject key identifier: 9E:35:3E:9B:77:07:A8:2F:C9:1F:8D:27:A9:B4:C2:2C:DC:E8:CE:8E
Authority key identifier: 1A:55:DB:62:7A:2A:2E:4B:26:67:2E:E0:E1:D7:51:2F:86:41:4E:83
Certificate issuer: /CN=A91DA898/serialNumber=1A55DB627A2A2E4B26672EE0E1D7512F86414E83
Certificate serial: 355D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GlXbYnoqLksmZy7g4ddRL4ZBToM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft
Manifest number: 3541
Signing time: Thu 26 Mar 2026 14:39:00 +0000
Manifest this update: Thu 26 Mar 2026 14:39:00 +0000
Manifest next update: Thu 02 Apr 2026 14:39:00 +0000
Files and hashes: 1: GlXbYnoqLksmZy7g4ddRL4ZBToM.crl (hash: Ogn8EFGMZTTk3mqe7ZAqny06S3dugh0rba2OtiCbMw0=)
2: AB9A0D320D6011EDA50DFA25C4F9AE02.roa (hash: tJ8Z7JmN38ewagG4q09uJOSNlnpYV6I5xzkgsPx/uek=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.crl
rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GlXbYnoqLksmZy7g4ddRL4ZBToM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:38:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13661 (0x355d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA898, serialNumber=1A55DB627A2A2E4B26672EE0E1D7512F86414E83
Validity
Not Before: Mar 26 14:39:00 2026 GMT
Not After : Apr 2 14:39:00 2026 GMT
Subject: CN=69c54504-0ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4f:b0:b0:dc:5a:f5:33:89:18:31:64:f8:5b:
a2:6c:86:96:da:d7:c6:bd:7b:5d:15:29:b6:95:eb:
20:13:8e:2a:c0:b6:7d:66:09:7d:54:51:97:5e:d1:
90:be:98:3b:7f:4a:d7:36:67:84:d9:89:63:eb:5a:
25:f0:f6:7c:b1:b5:50:61:d4:1a:9e:e1:43:e4:4e:
b1:91:e0:49:09:8a:8f:01:47:d6:be:85:91:ce:94:
05:e7:d9:c2:bc:b3:c9:7b:2c:3b:45:c4:85:53:c2:
1f:83:77:f4:ee:9a:a7:e4:84:49:10:38:a2:e3:83:
d5:bb:8b:6b:7f:a8:f8:22:79:ee:20:1d:cf:a0:ba:
0b:23:05:99:3e:af:7d:68:7e:cf:74:68:76:16:f3:
09:0f:5a:3d:2e:aa:c7:9a:b8:08:ce:59:df:c3:3d:
0c:28:da:fc:bf:8d:49:90:9c:06:51:1d:e5:af:89:
7d:d7:3a:66:c4:a3:a5:34:3c:01:67:fc:75:ad:f2:
74:84:1f:26:12:e1:f1:e3:7d:f0:15:c1:2b:0d:7f:
2b:38:2a:b8:e6:4a:fa:77:8e:9f:fc:42:88:a0:11:
1f:3e:a8:e5:7d:b3:5d:4d:f3:fa:c6:b6:18:44:b9:
9d:fa:2e:1a:26:ca:ac:20:ae:7e:53:e2:21:72:fb:
e7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:35:3E:9B:77:07:A8:2F:C9:1F:8D:27:A9:B4:C2:2C:DC:E8:CE:8E
X509v3 Authority Key Identifier:
keyid:1A:55:DB:62:7A:2A:2E:4B:26:67:2E:E0:E1:D7:51:2F:86:41:4E:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GlXbYnoqLksmZy7g4ddRL4ZBToM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:aa:d2:ea:f5:c7:e9:a7:28:dd:8f:bb:57:62:f5:d3:4c:c3:
e5:57:77:3d:bc:de:38:2d:2d:bc:2e:d8:9a:c2:4d:0e:72:a1:
bf:34:cd:31:4b:af:2a:12:4b:74:a6:b6:76:f0:bf:d2:99:bb:
d5:13:df:e5:47:15:b1:43:d8:c8:49:da:de:8c:14:c6:fc:cc:
02:60:5e:81:ff:3d:5a:d6:bc:de:59:3c:60:d7:d2:df:24:44:
35:92:d5:d8:b9:58:8e:67:e6:47:a8:fe:c6:5b:e0:18:f8:0e:
d3:12:68:4b:e3:13:02:d9:3e:00:b8:c4:f0:d4:be:04:61:46:
39:f3:70:0f:21:ad:8f:2c:30:24:fb:86:6c:ae:21:82:c8:7f:
08:b2:2b:94:9c:15:9a:75:77:6b:74:26:14:c5:c0:a9:7b:d2:
30:85:5e:46:7e:b2:41:7c:0f:71:de:99:ab:65:fe:b8:71:a8:
cc:08:b6:a3:5c:92:aa:89:48:0d:08:81:6a:2c:6a:02:52:e6:
61:2b:29:84:18:8e:38:ba:f7:f5:00:d5:a1:42:71:83:e3:22:
17:f7:a5:c7:e8:e7:ca:cd:51:ef:3c:77:a3:ac:39:51:2c:72:
0a:59:4c:12:ca:52:81:be:72:53:ce:dd:e7:ad:05:12:a1:fd:
91:cb:8a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:11:51 2026 by rpki-client