
$ rpki-client -vvf rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft
File: gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft (raw, json)
Hash identifier: CCKBigwzpfta8KwPoV+kTcCnT/zXZw8i2mJsTLU02Mo=
Subject key identifier: 7C:A6:78:02:FD:48:85:06:D3:D2:DD:5C:18:3D:43:DE:8F:C7:4B:F1
Authority key identifier: 80:21:B1:6B:92:42:1F:77:B7:26:0E:97:E6:AD:8C:1D:24:BD:29:9A
Certificate issuer: /CN=A91936BE/serialNumber=8021B16B92421F77B7260E97E6AD8C1D24BD299A
Certificate serial: 08C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft
Manifest number: 08A9
Signing time: Thu 16 Apr 2026 20:26:15 +0000
Manifest this update: Thu 16 Apr 2026 20:26:14 +0000
Manifest next update: Thu 23 Apr 2026 20:26:14 +0000
Files and hashes: 1: gCGxa5JCH3e3Jg6X5q2MHSS9KZo.crl (hash: dzB5CqZ8p9X1BiPRuMwiLsaUhtNR6MXy/LrvQtFBC0I=)
2: 538866F6E44B11EAA31DD984C4F9AE02.roa (hash: a1CNS+aw2qVdCSuRRm//a5IPz4YXPjTaG+Ec6by8sVk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.crl
rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:26:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2244 (0x8c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91936BE, serialNumber=8021B16B92421F77B7260E97E6AD8C1D24BD299A
Validity
Not Before: Apr 16 20:26:14 2026 GMT
Not After : Apr 23 20:26:14 2026 GMT
Subject: CN=69e145e6-5c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7a:f9:b8:a7:1a:b5:7c:de:26:b7:0f:ff:51:
66:50:c3:26:45:57:0b:b7:ea:df:24:64:31:71:de:
6f:cb:15:ea:c0:40:2c:41:e8:5c:9e:06:d3:5f:1d:
19:82:b2:7e:bf:5e:f7:7e:21:78:6d:57:a3:fd:06:
17:3c:80:21:67:8d:27:3a:df:54:2d:14:7f:26:8c:
84:4a:f7:89:7a:0c:fa:ac:04:ef:cb:b7:49:a5:27:
ce:df:21:13:b9:a6:4a:43:86:1c:bf:ed:1a:71:65:
89:c1:ef:64:dd:89:fe:b8:a8:f1:23:f0:4f:d0:c6:
e1:e7:e7:1a:b9:b1:fd:a3:9a:f1:6c:24:fe:ff:53:
e2:8e:1b:51:d7:5c:74:d0:4c:86:75:45:8c:f6:db:
74:67:53:73:88:7f:60:4a:8a:91:f4:bf:f6:89:fe:
a9:96:3e:9d:b3:37:63:16:f8:c5:dc:71:37:16:bf:
c8:c7:5b:14:7e:45:65:0f:75:18:30:e4:60:d9:ab:
3c:27:5f:3d:6f:26:1d:d0:62:33:25:f1:75:38:79:
5f:f8:32:70:d5:91:5e:b7:ce:72:02:49:2c:0b:01:
99:de:b4:43:5f:c0:d5:d6:52:97:56:59:c5:c2:5d:
cb:22:14:33:22:3d:d7:50:bf:a8:81:a1:99:f9:3e:
1d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A6:78:02:FD:48:85:06:D3:D2:DD:5C:18:3D:43:DE:8F:C7:4B:F1
X509v3 Authority Key Identifier:
keyid:80:21:B1:6B:92:42:1F:77:B7:26:0E:97:E6:AD:8C:1D:24:BD:29:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:d6:4c:5d:41:5c:99:8a:de:40:90:8c:38:87:ff:6d:dd:0e:
63:a0:83:f5:36:1f:59:dd:4b:d4:78:8e:39:f2:15:de:53:b9:
d7:e7:b1:48:67:10:8c:11:fe:8b:53:aa:65:a8:9d:dc:86:6f:
b7:3a:96:50:e8:6e:e5:0e:3d:53:1d:c8:50:37:fb:08:31:b8:
75:8a:64:94:00:ac:bc:57:69:20:ad:84:c1:a5:a2:71:1d:c7:
cd:10:6d:f8:c0:68:59:95:62:a5:e4:61:45:e9:57:ba:91:bb:
15:0b:79:cd:c7:f7:84:58:28:cf:9b:21:da:f3:7b:b3:00:54:
b8:f4:e8:13:d7:a8:ea:4d:9d:02:61:40:2c:b5:37:08:31:5b:
6f:39:b5:c1:48:cf:3d:15:65:f8:88:50:24:38:c2:16:cc:c4:
00:e8:f0:ec:76:7b:74:6a:5b:fc:fe:dd:41:73:42:47:29:5b:
48:2f:0f:d1:91:b3:e2:10:4e:69:91:1f:de:d7:af:d4:f8:d4:
79:4d:27:60:9a:f0:5a:98:6f:2a:b0:aa:a4:28:ff:b3:6f:af:
b0:85:b8:5a:71:8d:3a:21:94:03:e4:59:2e:18:28:7a:f5:c4:
57:6e:2a:64:1f:8f:38:6d:6d:e1:50:fd:60:a6:c8:e0:82:27:
63:bb:8f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:22:20 2026 by rpki-client