
$ rpki-client -vvf rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft
File: gxf8eoKw7oZSDfGP_VcpURbaXfI.mft (raw, json)
Hash identifier: aqVZBnkZzySt9Qvp1kC7UqVFe1VjMmpa7uhInL3Oxyc=
Subject key identifier: F8:82:3D:FF:AB:B9:29:4B:CC:16:24:FC:E0:8F:AA:2F:E3:B9:7E:5C
Authority key identifier: 83:17:FC:7A:82:B0:EE:86:52:0D:F1:8F:FD:57:29:51:16:DA:5D:F2
Certificate issuer: /CN=A91338F0/serialNumber=8317FC7A82B0EE86520DF18FFD57295116DA5DF2
Certificate serial: 0109
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxf8eoKw7oZSDfGP_VcpURbaXfI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft
Manifest number: 0100
Signing time: Sun 01 Mar 2026 07:16:13 +0000
Manifest this update: Sun 01 Mar 2026 07:16:12 +0000
Manifest next update: Sun 08 Mar 2026 07:16:12 +0000
Files and hashes: 1: gxf8eoKw7oZSDfGP_VcpURbaXfI.crl (hash: HznSyhI96oZG/8NB1nudtjUr6avA//Ig7znc3rcHGjc=)
2: 5B39EBD693B511EF8AEA6810C4F9AE02.roa (hash: yGKrGrha2kCV2lgqPYgRrMzRC6pO0Rv10XuxGhmx1oA=)
3: 1A824A0E993511EF9BB0A677C4F9AE02.roa (hash: Wov/fGWwE46zeG8/aS8pJUUxgZwuFIk+0TXxAf2AhQQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.crl
rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxf8eoKw7oZSDfGP_VcpURbaXfI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:16:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 265 (0x109)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91338F0, serialNumber=8317FC7A82B0EE86520DF18FFD57295116DA5DF2
Validity
Not Before: Mar 1 07:16:12 2026 GMT
Not After : Mar 8 07:16:12 2026 GMT
Subject: CN=69a3e7bd-4133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cf:89:57:5f:a7:0a:57:35:f0:cc:34:18:cf:
dc:08:fd:25:fd:bd:39:33:5f:ec:7b:1f:8f:9c:1c:
1e:cc:5b:85:f4:91:1a:8f:7e:06:fd:0f:7b:dd:26:
52:04:66:ed:37:cb:5a:eb:b8:b3:9f:28:81:25:5c:
ef:6c:07:be:1f:63:54:86:36:4a:66:1d:46:da:53:
bb:54:58:57:12:7a:df:22:aa:0c:fc:a1:b6:a4:d4:
6f:ef:28:ac:f1:d3:41:37:07:07:9c:23:22:9d:b7:
31:cb:ea:89:ba:c1:6b:67:7a:92:a6:b8:3a:a6:8e:
e8:e9:aa:34:b6:f5:0e:fa:cb:62:05:27:d6:59:f3:
8b:47:28:f7:b7:37:32:4c:af:01:b3:f9:d7:48:75:
5b:61:af:64:bf:c0:70:0b:7b:d0:65:85:6e:bf:6e:
40:e4:b3:c4:ae:f7:68:f2:09:ed:6d:e2:5b:84:c3:
b3:9b:34:6a:06:bd:56:69:04:bc:9d:06:d6:0d:04:
7d:32:96:ef:19:96:cc:c3:ee:65:00:3c:03:22:ae:
be:15:47:83:f5:65:42:63:ac:9c:f6:ee:14:af:f0:
69:cf:ee:7c:7c:d7:26:78:dc:4c:b1:3c:df:b0:2e:
f3:87:bc:33:e1:dc:69:e0:75:cc:cd:bf:18:ac:06:
bf:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:82:3D:FF:AB:B9:29:4B:CC:16:24:FC:E0:8F:AA:2F:E3:B9:7E:5C
X509v3 Authority Key Identifier:
keyid:83:17:FC:7A:82:B0:EE:86:52:0D:F1:8F:FD:57:29:51:16:DA:5D:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxf8eoKw7oZSDfGP_VcpURbaXfI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:00:05:d1:fc:16:c1:a0:e2:a2:2e:02:a1:25:1f:b6:4f:56:
64:5e:a5:dd:bb:83:ee:50:46:36:74:ba:5e:89:7c:9f:e7:4d:
2f:22:5b:d0:bd:44:52:e6:e0:92:7c:ee:08:79:ab:b1:a5:24:
1b:5c:6e:c6:c1:17:c8:5c:f2:f0:d2:12:0e:17:93:ed:cb:4c:
49:c7:8b:03:a7:f3:b9:7b:d5:9c:18:fd:db:76:a0:03:8f:df:
28:fa:dc:df:ca:9e:80:ff:41:50:0e:ae:e2:51:a7:d2:b9:41:
36:e7:79:4e:29:0c:a1:b2:5b:47:cc:c0:e8:51:a8:da:a7:99:
3e:ff:48:f8:7d:13:e3:af:85:78:00:ef:f4:c5:32:9d:1b:17:
74:44:f4:35:17:6c:3a:a9:99:18:60:17:5c:97:46:47:a2:4e:
26:84:1e:86:42:95:19:2a:d2:04:d6:27:15:d4:ed:0f:54:ba:
87:b9:68:df:0b:fc:58:57:cc:52:8d:ff:7d:36:e3:35:6d:ba:
2d:dd:43:33:30:3f:e6:fb:67:9a:a1:1b:1a:42:98:52:2e:8b:
2a:57:6e:49:0f:6b:a7:8a:cd:77:b9:b1:02:80:c5:d1:bf:0c:
1c:b2:85:28:2a:be:47:57:96:51:1f:51:08:f7:03:40:71:6d:
03:4e:d8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:25:54 2026 by rpki-client