
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft
File: 4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft (raw, json)
Hash identifier: R8yMrvNaJdn7r/JBWQFcyO3HhlKvTwg8t8Uil5LHiys=
Subject key identifier: 92:DE:09:D9:70:B5:6D:A9:79:E8:7F:76:64:A5:2D:D0:97:71:52:7B
Authority key identifier: E3:F1:8D:41:20:26:F3:1B:A4:43:EA:33:F5:67:06:FF:B2:F0:F1:62
Certificate issuer: /CN=A91FD8BE/serialNumber=E3F18D412026F31BA443EA33F56706FFB2F0F162
Certificate serial: 019B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft
Manifest number: 0184
Signing time: Fri 27 Mar 2026 04:06:20 +0000
Manifest this update: Fri 27 Mar 2026 04:06:19 +0000
Manifest next update: Fri 03 Apr 2026 04:06:19 +0000
Files and hashes: 1: 4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl (hash: Zaivr/tAnJkwhzaxBGJqPrtqUIuBU4GmUVO5F11OUQE=)
2: A475B3E000B511EF96C1B911C4F9AE02.roa (hash: XjHUkWL+sFmZoNR2qFeU0dNbQ2ZM/7PQGFCwI1qnX4A=)
3: DAEB24B0176111EFAB2AD122C4F9AE02.roa (hash: /p0IRebK1ecfFLpUcCA3qAEpMKVqatFf1hx/y6EBTmI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl
rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 04:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 411 (0x19b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD8BE, serialNumber=E3F18D412026F31BA443EA33F56706FFB2F0F162
Validity
Not Before: Mar 27 04:06:19 2026 GMT
Not After : Apr 3 04:06:19 2026 GMT
Subject: CN=69c6023c-43ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8d:be:3a:ea:75:1c:b3:eb:28:7f:43:6d:cc:
5f:b3:05:2d:24:5c:53:83:f7:20:58:56:91:58:d0:
4b:36:8c:d3:d8:95:46:90:e5:dd:8a:1d:38:7b:8e:
7f:0d:44:9e:e0:18:a0:73:12:5c:e9:9f:48:d2:3b:
e1:28:59:7b:76:13:33:6a:68:c9:a4:64:8f:66:19:
c3:59:24:9f:aa:60:db:13:fb:6a:f5:0d:82:cd:35:
9f:15:56:c6:36:4f:26:f2:de:b8:76:14:e0:12:c0:
7a:53:85:fa:95:d5:a4:df:cf:a0:99:fe:99:c0:c3:
0c:56:57:a5:e9:d2:0e:30:ce:bb:ff:e0:3e:c1:03:
9a:57:ff:83:69:a9:ba:4d:36:c4:eb:3a:35:8f:1c:
d1:f6:5a:dc:0b:b7:da:ce:c7:57:19:06:b3:e0:57:
56:d5:ba:6c:f0:45:9f:98:0b:56:6c:b6:b7:85:1f:
f4:02:f4:09:26:9c:58:93:3a:ad:fa:27:45:bc:bc:
19:54:b7:e1:b2:05:f1:a6:e8:9f:18:59:56:d2:e4:
56:32:6f:04:50:97:16:e8:9d:20:f3:6c:8c:70:fc:
c6:27:12:75:a6:e7:6f:96:6a:75:e6:75:0d:d9:1c:
4f:8d:33:62:a5:61:0a:ac:4c:61:44:ce:75:70:c4:
67:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:DE:09:D9:70:B5:6D:A9:79:E8:7F:76:64:A5:2D:D0:97:71:52:7B
X509v3 Authority Key Identifier:
keyid:E3:F1:8D:41:20:26:F3:1B:A4:43:EA:33:F5:67:06:FF:B2:F0:F1:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:81:65:84:7d:52:6b:3e:da:af:70:6f:d9:d2:b5:7c:f5:f6:
d0:a9:55:93:21:21:dc:24:d8:88:d1:06:52:1d:35:ea:e8:e8:
7d:5e:cb:02:10:4b:21:89:e7:c5:ae:7b:aa:15:cf:6e:97:22:
33:ab:0f:f4:09:45:68:ed:4d:29:0d:82:ff:c4:38:f0:49:57:
3d:62:10:f7:ef:5e:36:ef:05:27:fe:91:f7:c5:6e:3a:a3:be:
1d:b0:ba:37:5b:fb:fd:69:84:42:2c:54:e7:be:77:7d:f9:12:
66:ee:b1:dc:93:e3:7c:81:28:fa:f6:77:a7:b5:68:64:c1:51:
49:6f:cc:8b:89:cf:59:c9:86:57:37:13:cd:08:8f:3d:34:72:
27:94:27:44:f2:cf:29:6e:63:3c:f4:8f:03:66:8c:39:68:26:
6a:b3:21:8c:7d:09:f8:f9:bd:57:60:1d:8e:f3:54:16:28:8b:
ee:85:e0:62:0d:ec:ed:c9:a5:49:5b:3c:9a:e6:f2:83:0b:38:
32:db:15:ac:5c:2b:be:0d:14:6e:30:df:80:9b:8d:18:b2:da:
58:8c:7d:d7:15:3a:e5:c4:15:38:ac:fb:ee:48:a3:1b:65:35:
0d:a9:63:4c:71:c8:d1:78:09:5d:ad:ee:e1:4c:49:44:35:8f:
a4:fb:d7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:32:21 2026 by rpki-client