
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft
File: GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft (raw, json)
Hash identifier: tcehKEE5nUmeTxi05tWmhVTbzbGAKzI2KL9g6PanYQk=
Subject key identifier: 30:DC:B6:80:BC:6C:EB:3B:99:AB:2C:0F:CE:63:1E:7F:91:01:7E:84
Authority key identifier: 18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B
Certificate issuer: /CN=A91DDCB6/serialNumber=18DC531D44F05962E97F23845736141D3E02681B
Certificate serial: 074B
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft
Manifest number: 0739
Signing time: Tue 24 Mar 2026 20:08:30 +0000
Manifest this update: Tue 24 Mar 2026 20:08:29 +0000
Manifest next update: Tue 31 Mar 2026 20:08:29 +0000
Files and hashes: 1: GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl (hash: IKW8fGPMmzTmeNvBaeYuV+V2mqdvDhRxIr+NmSAZRz8=)
2: 00756F7E63F011EC987F5B19C4F9AE02.roa (hash: NJ2yttVg/1tKklwG0b4mf3B8YWLlDm4GZ+hgK2zNvsU=)
3: 48D65BC2D28F11EB9F83683DC4F9AE02.roa (hash: PKuAHlg7IDQmqtBcmxC313Us4ZuOMAlQSrtZq4f+5Bg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl
rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:08:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1867 (0x74b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DDCB6, serialNumber=18DC531D44F05962E97F23845736141D3E02681B
Validity
Not Before: Mar 24 20:08:29 2026 GMT
Not After : Mar 31 20:08:29 2026 GMT
Subject: CN=69c2ef3e-0248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:72:70:a5:fc:b9:2f:76:a6:e1:65:bc:5d:1e:
43:d9:21:fb:3d:5d:81:9e:1c:fb:9b:c5:93:c0:5b:
c0:79:55:39:e5:d3:fd:9c:57:c0:8c:a8:e3:9a:a5:
1f:d0:28:10:4a:fc:67:a4:db:6d:9d:05:32:a2:a3:
0b:cc:d8:e7:73:4d:dc:29:be:d6:4c:6a:89:00:bf:
d4:58:ae:6b:e0:40:82:87:0d:36:b9:d2:00:b3:ac:
eb:9c:8a:e8:31:53:c3:59:35:aa:3c:0b:cf:3a:23:
b5:1f:9f:20:27:98:80:71:7a:4b:1e:b0:53:6c:74:
97:bf:eb:96:77:61:11:c5:44:1c:9c:7e:52:72:19:
35:a9:1c:28:85:46:11:af:36:04:76:9d:51:78:95:
69:2d:ed:56:ab:e5:a6:1d:61:67:6c:e4:cf:bd:73:
b3:cb:bd:6f:4c:06:c8:94:86:94:94:ab:5c:62:8e:
67:3b:8f:7f:e5:d3:e3:b5:32:62:ee:7d:10:ed:2f:
95:6c:db:2e:ac:ca:fe:b5:55:2f:d1:27:61:fe:79:
03:a3:61:76:a4:fb:fe:6c:c7:85:43:81:32:12:7c:
e4:91:40:ec:05:22:94:b2:d9:64:54:f0:06:15:a2:
f9:08:98:20:cd:12:df:a5:e1:81:a1:b2:2b:a5:0b:
e4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:DC:B6:80:BC:6C:EB:3B:99:AB:2C:0F:CE:63:1E:7F:91:01:7E:84
X509v3 Authority Key Identifier:
keyid:18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:1d:f1:43:24:a8:96:13:67:42:3b:2a:53:49:cc:bc:1a:84:
6d:21:2b:fe:0b:b0:fb:14:98:66:14:d8:0b:93:0b:66:47:15:
57:68:76:6e:81:a4:8c:44:2c:da:0c:80:38:66:60:6c:28:e2:
f8:07:0a:56:d4:8f:65:88:55:80:c0:62:fe:68:43:53:ae:9a:
37:2f:b9:e9:2e:50:22:d7:7b:93:23:3b:e9:4c:8c:0a:0e:4e:
fd:29:48:87:10:b9:a5:69:66:85:89:50:b1:83:85:26:03:49:
09:1c:bb:a1:2e:fc:ac:c0:b4:75:45:15:5a:6d:00:e7:80:fb:
7d:2e:11:08:c7:59:0f:e6:82:cc:fa:6f:ff:21:12:bb:c6:a8:
ac:ec:7a:db:f4:ff:63:3d:09:4f:b0:b2:4d:7b:20:6e:f5:80:
38:8c:a9:be:e9:2a:81:84:ae:62:a9:be:87:ba:14:49:8f:2e:
cf:d7:4d:29:98:17:f1:00:0e:6c:42:4b:c2:60:d3:b9:14:87:
a4:fc:9a:27:4e:02:13:e6:fb:51:e7:5b:cd:5e:24:74:58:2e:
87:c2:f7:79:c4:19:b2:a4:26:31:71:1c:bf:d6:8c:0d:e9:74:
d1:22:58:c0:56:09:00:9b:a7:f1:42:b1:fb:d8:5f:65:77:ef:
44:2f:ba:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:35 2026 by rpki-client