
$ rpki-client -vvf rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft
File: Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft (raw, json)
Hash identifier: +OhjRADCPbjm5hhauKJh2SCGgicVo4vlcyHc7KtTbT0=
Subject key identifier: 17:AE:E0:81:4A:F8:72:5A:D1:C8:3E:60:16:31:DA:74:77:3B:18:50
Authority key identifier: 19:BE:5B:E6:35:55:F1:1B:73:41:DC:4E:1C:BC:9F:44:C9:ED:A0:F7
Certificate issuer: /CN=A91753AE/serialNumber=19BE5BE63555F11B7341DC4E1CBC9F44C9EDA0F7
Certificate serial: 0891
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gb5b5jVV8RtzQdxOHLyfRMntoPc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft
Manifest number: 0889
Signing time: Sun 01 Mar 2026 22:29:33 +0000
Manifest this update: Sun 01 Mar 2026 22:29:32 +0000
Manifest next update: Sun 08 Mar 2026 22:29:32 +0000
Files and hashes: 1: Gb5b5jVV8RtzQdxOHLyfRMntoPc.crl (hash: r3lm7oxUtA1yvFqQqFGgWo5ozcE/rv6Fc4TYWR5yigY=)
2: B3078DFAE1E411EAAD5D8545C4F9AE02.roa (hash: b3YBOBqsogHj2YbhgRinWyCzx0033g+UhkF2zMZqVrQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.crl
rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gb5b5jVV8RtzQdxOHLyfRMntoPc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2193 (0x891)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91753AE, serialNumber=19BE5BE63555F11B7341DC4E1CBC9F44C9EDA0F7
Validity
Not Before: Mar 1 22:29:32 2026 GMT
Not After : Mar 8 22:29:32 2026 GMT
Subject: CN=69a4bdcc-94dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:20:42:1f:de:59:19:e1:b5:b1:5b:9e:9f:37:
ba:c8:b7:4f:57:af:9b:74:57:4e:09:aa:e8:c2:8b:
dd:bc:34:25:77:02:2f:96:70:37:6a:8a:00:0c:1e:
95:6e:35:5e:21:f5:21:6f:ef:bb:39:fd:67:9f:18:
1e:c4:e2:2b:85:02:23:01:45:bc:52:da:c6:ca:24:
c6:6b:45:b3:0d:d4:5b:a5:50:54:f1:83:f9:b6:ec:
6b:72:80:29:77:23:a7:84:29:02:9e:50:b6:e1:58:
f2:cc:3f:c0:23:38:b3:a1:81:2c:cb:ee:61:63:3a:
cd:43:9a:30:15:14:75:06:7f:7c:70:95:62:4d:2a:
bf:84:07:cb:12:13:ed:fb:d0:40:a8:b6:a4:12:6f:
ec:a4:f9:f3:75:e9:70:bd:34:54:1c:5e:f9:b0:7e:
6c:28:de:f0:4e:b3:19:f1:ec:9b:f2:cd:e1:dd:69:
4e:59:4e:c9:0c:7d:24:4b:7e:c9:6d:51:33:24:94:
2c:9f:43:2d:c0:42:09:6e:d7:64:5e:ab:08:c5:d5:
61:96:92:66:1e:2d:38:0e:65:6d:23:51:26:84:ee:
51:92:5e:35:23:c0:7e:28:32:b9:b5:7a:2d:13:ae:
0d:1c:09:82:3f:74:07:46:62:68:dc:99:4e:36:2c:
e3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:AE:E0:81:4A:F8:72:5A:D1:C8:3E:60:16:31:DA:74:77:3B:18:50
X509v3 Authority Key Identifier:
keyid:19:BE:5B:E6:35:55:F1:1B:73:41:DC:4E:1C:BC:9F:44:C9:ED:A0:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gb5b5jVV8RtzQdxOHLyfRMntoPc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c7:9e:ad:31:49:39:3d:dd:fc:15:d3:6a:8b:25:c3:84:0e:
90:26:1c:00:1e:b9:91:b6:49:a8:1c:7e:09:24:82:da:a5:5b:
10:68:e5:d4:4c:af:f9:c8:50:fc:43:78:ac:79:ed:6f:29:fc:
53:00:93:be:48:91:1b:ff:ed:f5:75:68:ba:e7:70:a2:94:cf:
ef:3e:6e:2b:15:6b:31:0a:97:d2:bb:65:94:91:6a:fe:7d:be:
ee:f3:e9:57:2b:e6:ff:0d:bc:00:ae:fe:d3:dd:3d:49:aa:bf:
bd:0d:fb:91:f1:fd:b7:47:fd:ec:4e:42:e5:25:c8:30:62:d5:
fe:88:e5:86:da:ef:cf:2c:2c:80:21:07:19:59:b2:b4:e9:cb:
19:a2:d1:99:02:7a:20:c2:27:1d:dd:7d:0c:e6:71:f3:fa:63:
4c:3f:b3:57:c9:23:d4:25:62:04:82:9e:61:4c:a8:e2:e5:d1:
5c:b6:57:2c:4f:80:51:d8:66:18:c0:16:3c:e2:ac:3c:9e:23:
66:07:db:a9:d6:f4:84:d3:53:54:4f:b4:96:1e:65:a1:ec:b8:
43:94:f8:bf:46:70:6d:99:30:72:1f:4f:25:2b:47:11:90:17:
17:dc:63:26:8b:5c:e9:61:a5:3d:63:4c:7d:c1:03:27:c0:62:
fa:75:4f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:06:56 2026 by rpki-client