
$ rpki-client -vvf rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft
File: gqdp3XRsgx9MTbKdamXeCNatle0.mft (raw, json)
Hash identifier: 4ZbjsuEWYb7KS/CE4Z06Ztfzz3Q5exHz4Uvhg8kPRe8=
Subject key identifier: F9:6B:C6:3F:53:81:77:D0:F8:4E:18:2F:6E:8E:8E:00:7F:47:66:1C
Authority key identifier: 82:A7:69:DD:74:6C:83:1F:4C:4D:B2:9D:6A:65:DE:08:D6:AD:95:ED
Certificate issuer: /CN=A91921AE/serialNumber=82A769DD746C831F4C4DB29D6A65DE08D6AD95ED
Certificate serial: F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqdp3XRsgx9MTbKdamXeCNatle0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft
Manifest number: F4
Signing time: Mon 02 Mar 2026 00:14:31 +0000
Manifest this update: Mon 02 Mar 2026 00:14:30 +0000
Manifest next update: Mon 09 Mar 2026 00:14:30 +0000
Files and hashes: 1: gqdp3XRsgx9MTbKdamXeCNatle0.crl (hash: ab3v1bSZrW39lc61lIUEm2dHnAScOGKCIC2X6lsZX9s=)
2: DC76F25EBCFD11EFAF51D253C4F9AE02.roa (hash: BtHfDz8Hw6cGvROOr50leZJ/AmtKCEWaHsU3HjKIGvY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.crl
rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqdp3XRsgx9MTbKdamXeCNatle0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:14:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 249 (0xf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91921AE, serialNumber=82A769DD746C831F4C4DB29D6A65DE08D6AD95ED
Validity
Not Before: Mar 2 00:14:30 2026 GMT
Not After : Mar 9 00:14:30 2026 GMT
Subject: CN=69a4d667-027f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:68:2b:5d:ea:48:7a:9e:a1:e7:78:24:f9:bd:
9f:de:ad:6d:f4:1e:7d:f9:92:d2:c9:de:89:d3:a8:
81:1d:00:dd:6f:99:37:74:fc:1a:62:c1:0d:18:50:
45:b7:ee:6e:4a:e8:02:65:b7:67:dc:ea:1f:cb:f6:
5e:b8:6a:10:0a:65:1c:c0:21:a8:4f:18:9a:f2:45:
c3:d4:3f:cb:47:7d:87:8b:fd:a5:85:fd:c3:35:77:
65:7e:00:e5:09:2e:4f:a8:44:ed:15:3c:20:4a:84:
20:8c:1b:32:fb:84:71:72:c6:d2:2d:05:91:84:a4:
b5:07:5c:4c:ee:08:d3:ad:18:fa:21:49:24:5c:2e:
78:e3:21:f8:76:c1:b9:26:b3:15:59:0c:bc:0c:2a:
a5:9f:b6:6b:20:90:36:00:15:c8:1b:b8:8c:cc:7d:
70:25:80:06:85:5e:d1:29:0f:1e:9e:a4:bb:0d:7c:
5e:0a:e1:27:ba:36:36:5e:57:02:19:59:b9:ec:9a:
78:93:89:ef:27:2b:b0:3a:7e:25:85:d2:e1:11:f8:
f2:c4:60:83:71:3e:7f:d4:bb:c2:13:07:0d:3c:37:
45:d4:11:6c:89:f8:d4:cc:ef:84:eb:fe:5e:16:b2:
18:a7:54:fa:dc:0b:19:3a:98:2e:c2:80:94:ba:23:
d6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:6B:C6:3F:53:81:77:D0:F8:4E:18:2F:6E:8E:8E:00:7F:47:66:1C
X509v3 Authority Key Identifier:
keyid:82:A7:69:DD:74:6C:83:1F:4C:4D:B2:9D:6A:65:DE:08:D6:AD:95:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqdp3XRsgx9MTbKdamXeCNatle0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:3f:3f:e0:21:11:2f:dd:20:b0:1d:b6:19:2e:1d:2c:fa:96:
c8:f9:ad:ed:33:1a:be:66:ce:11:96:da:86:bb:11:f0:a2:49:
9e:8b:21:4a:6c:d0:55:55:f8:8e:71:bb:e4:b6:ed:7d:fd:25:
18:84:18:4f:75:0e:26:ca:ba:4f:2c:d8:ed:b3:f7:d5:ad:64:
f1:f2:5c:1c:a7:e1:f3:ca:bc:e7:c6:d1:aa:f1:cd:0f:b7:12:
23:f6:e8:1e:b5:a7:bc:43:88:5c:7b:3c:e8:e5:89:4f:a2:98:
4c:dc:de:16:b1:82:1a:4f:f6:3a:c4:a3:02:46:dc:86:4b:c3:
4c:c5:48:ba:5c:ee:72:1a:7c:c1:10:f5:fa:ab:f4:4f:b6:02:
b8:df:81:8c:5c:05:12:7d:37:d2:10:ed:5e:7e:c0:ca:40:c4:
4b:69:aa:56:7a:38:0b:51:cf:06:b9:25:23:27:8b:ba:c7:4c:
47:2c:e3:10:48:b8:fe:cc:ea:1e:82:54:a2:14:14:b5:a0:6e:
54:28:ad:c1:00:00:80:c6:94:7c:6b:f4:86:1d:04:19:50:79:
e9:62:b8:13:1a:da:df:3e:d4:aa:18:72:3c:6b:58:42:88:ed:
e2:0e:1a:31:00:80:ae:f4:6a:64:2a:6f:2e:93:19:1f:d1:10:
43:a2:c9:55
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTIxQUUxMTAvBgNVBAUTKDgyQTc2OURENzQ2QzgzMUY0QzREQjI5RDZBNjVERTA4
RDZBRDk1RUQwHhcNMjYwMzAyMDAxNDMwWhcNMjYwMzA5MDAxNDMwWjAYMRYwFAYD
VQQDEw02OWE0ZDY2Ny0wMjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2WgrXepIep6h53gk+b2f3q1t9B59+ZLSyd6J06iBHQDdb5k3dPwaYsENGFBF
t+5uSugCZbdn3Oofy/ZeuGoQCmUcwCGoTxia8kXD1D/LR32Hi/2lhf3DNXdlfgDl
CS5PqETtFTwgSoQgjBsy+4RxcsbSLQWRhKS1B1xM7gjTrRj6IUkkXC544yH4dsG5
JrMVWQy8DCqln7ZrIJA2ABXIG7iMzH1wJYAGhV7RKQ8enqS7DXxeCuEnujY2XlcC
GVm57Jp4k4nvJyuwOn4lhdLhEfjyxGCDcT5/1LvCEwcNPDdF1BFsifjUzO+E6/5e
FrIYp1T63AsZOpguwoCUuiPWDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPlrxj9T
gXfQ+E4YL26OjgB/R2YcMB8GA1UdIwQYMBaAFIKnad10bIMfTE2ynWpl3gjWrZXt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjFBRS83NDkxMkIyQ0FD
NzMxMUVGQTNDQkQxNEFDNEY5QUUwMi9ncWRwM1hSc2d4OU1UYktkYW1YZUNOYXRs
ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dxZHAzWFJzZ3g5TVRiS2RhbVhlQ05hdGxlMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MjFBRS83NDkxMkIyQ0FDNzMxMUVGQTNDQkQxNEFDNEY5QUUwMi9ncWRwM1hSc2d4
OU1UYktkYW1YZUNOYXRsZTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjz8/4CERL90gsB22GS4dLPqWyPmt7TMavmbOEZbahrsR8KJJnoshSmzQVVX4
jnG75Lbtff0lGIQYT3UOJsq6TyzY7bP31a1k8fJcHKfh88q858bRqvHND7cSI/bo
HrWnvEOIXHs86OWJT6KYTNzeFrGCGk/2OsSjAkbchkvDTMVIulzuchp8wRD1+qv0
T7YCuN+BjFwFEn030hDtXn7AykDES2mqVno4C1HPBrklIyeLusdMRyzjEEi4/szq
HoJUohQUtaBuVCitwQAAgMaUfGv0hh0EGVB56WK4Exra3z7UqhhyPGtYQojt4g4a
MQCArvRqZCpvLpMZH9EQQ6LJVQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:34:08 2026 by rpki-client