
$ rpki-client -vvf rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft
File: gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft (raw, json)
Hash identifier: t6rC3PHmJJK8MWN0KQzs3soWxCwfwb9kARWko1I7bOs=
Subject key identifier: 24:B2:47:DF:B5:13:BA:B1:CC:C6:03:45:13:19:FE:40:D0:0B:75:D3
Authority key identifier: 82:73:5B:3F:9C:9E:A9:75:D4:E0:2A:94:E2:A1:08:1B:A4:A8:AB:24
Certificate issuer: /CN=A91196F9/serialNumber=82735B3F9C9EA975D4E02A94E2A1081BA4A8AB24
Certificate serial: 0163
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft
Manifest number: 015E
Signing time: Fri 17 Apr 2026 04:40:10 +0000
Manifest this update: Fri 17 Apr 2026 04:40:10 +0000
Manifest next update: Fri 24 Apr 2026 04:40:10 +0000
Files and hashes: 1: gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl (hash: Ziu4dJu1Bs7prdQicd0sGTsw4y3KzQ/47sVuB6zoklA=)
2: CFD2FAA62A2811EF8313971CC4F9AE02.roa (hash: 7pTLODEiwxdgiEvkl8qH82EnqbNP4jVD6G5IWDrN454=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl
rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:40:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 355 (0x163)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91196F9, serialNumber=82735B3F9C9EA975D4E02A94E2A1081BA4A8AB24
Validity
Not Before: Apr 17 04:40:10 2026 GMT
Not After : Apr 24 04:40:10 2026 GMT
Subject: CN=69e1b9aa-34d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9b:31:0b:a6:d3:74:23:27:c3:75:10:14:59:
f7:c1:3d:8c:fc:13:ca:78:68:db:39:ac:e3:8a:ed:
66:41:1f:fd:f9:55:b0:14:68:ee:8c:e9:93:70:9a:
81:98:39:48:ad:e6:54:16:6d:78:78:f8:34:1a:5f:
8f:36:80:3a:84:7b:b8:86:41:83:b0:e2:d1:7c:ff:
86:5e:3f:89:2e:9b:ea:ba:db:e3:24:20:65:b2:32:
d1:4a:5e:7e:ab:6e:44:3c:b0:55:be:a0:60:10:6a:
40:d5:3c:78:00:31:62:70:43:9d:78:26:de:f7:8a:
ce:ad:ff:ca:5b:64:5c:94:e1:b9:02:51:55:b9:ae:
99:9e:7c:2d:92:5a:44:d7:11:1f:f1:8d:24:3d:1d:
36:8b:10:fc:ff:3d:57:9f:b8:c4:63:43:9f:27:59:
9f:02:25:c3:a8:51:af:4d:6c:48:bf:bc:33:eb:12:
ae:2a:a4:af:57:33:33:32:fc:f1:c3:91:56:08:44:
df:e6:4b:db:21:d6:38:44:e6:44:57:3a:df:d1:e3:
0d:3d:fb:1f:2b:cb:bd:06:73:aa:9c:86:0a:5a:75:
6b:06:82:de:32:b2:11:26:a5:db:cb:bc:97:57:c1:
2a:51:1b:69:c9:eb:51:ba:cd:4f:00:b4:19:c3:26:
e0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B2:47:DF:B5:13:BA:B1:CC:C6:03:45:13:19:FE:40:D0:0B:75:D3
X509v3 Authority Key Identifier:
keyid:82:73:5B:3F:9C:9E:A9:75:D4:E0:2A:94:E2:A1:08:1B:A4:A8:AB:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:57:64:48:8d:ab:79:79:db:66:72:c7:a7:4c:42:27:e5:6f:
8f:d8:15:57:ea:74:a3:cc:09:12:c5:e9:1d:c2:78:82:19:ad:
bd:21:95:18:ab:06:9a:87:cd:72:b2:a2:bd:04:70:46:cb:67:
27:59:1c:19:55:1a:5b:31:6d:69:31:d4:18:e5:cc:ba:84:25:
50:69:c7:17:95:5e:bf:c8:ea:9f:72:d6:de:82:4a:9e:3e:c2:
74:d2:d4:21:ba:b0:73:39:a5:c6:47:bd:7e:9a:f3:3f:37:87:
34:28:d7:4a:c5:72:9a:8d:4b:20:2f:b0:08:c4:46:fa:3c:5e:
da:a1:be:bd:c0:d9:19:c5:de:00:e2:70:e9:b3:bb:9c:cf:cb:
a6:cd:88:9c:20:e0:1d:d4:c5:a0:fe:5b:b3:7e:40:0c:0d:9b:
5d:c7:de:f4:20:fa:81:94:af:f7:00:f0:22:26:84:21:ff:73:
47:15:d0:42:e8:7d:42:9c:2c:b2:30:59:f6:76:1f:61:5d:1f:
03:81:a0:c8:b8:56:f2:96:85:f2:9d:3c:84:33:ac:90:20:f1:
63:af:40:34:82:07:63:d3:2b:08:fe:24:19:df:c8:b7:1d:41:
de:98:af:66:79:16:12:05:fe:17:e4:3f:95:c2:3e:41:48:35:
a5:0c:cb:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:48:36 2026 by rpki-client