
$ rpki-client -vvf rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/GnpQ1SFaklkRBAawtpNvrhTqfYM.mft
File: GnpQ1SFaklkRBAawtpNvrhTqfYM.mft (raw, json)
Hash identifier: KrFTL8+B5wf9v0+NpwuNgj9JJP88uWi1vU4FIvIDnYk=
Subject key identifier: 45:20:42:1A:D8:DE:D8:1D:AD:13:5D:73:1E:56:CC:0A:A8:78:03:5E
Authority key identifier: 1A:7A:50:D5:21:5A:92:59:11:04:06:B0:B6:93:6F:AE:14:EA:7D:83
Certificate issuer: /CN=A91944F8/serialNumber=1A7A50D5215A9259110406B0B6936FAE14EA7D83
Certificate serial: 0565
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GnpQ1SFaklkRBAawtpNvrhTqfYM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/GnpQ1SFaklkRBAawtpNvrhTqfYM.mft
Manifest number: 055F
Signing time: Mon 02 Mar 2026 02:59:50 +0000
Manifest this update: Mon 02 Mar 2026 02:59:49 +0000
Manifest next update: Mon 09 Mar 2026 02:59:49 +0000
Files and hashes: 1: GnpQ1SFaklkRBAawtpNvrhTqfYM.crl (hash: OZAFEl0wutRtmWiuaWDJnb1aO9DPb3n0TY8FMgpmkOc=)
2: 6458CE6420F711EC896F8D43C4F9AE02.roa (hash: bjwHJgIAjp1ePwBiVlLfrkF52RM00mIDsMOa0Tbg8Jc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/GnpQ1SFaklkRBAawtpNvrhTqfYM.crl
rsync://rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/GnpQ1SFaklkRBAawtpNvrhTqfYM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GnpQ1SFaklkRBAawtpNvrhTqfYM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:59:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1381 (0x565)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91944F8, serialNumber=1A7A50D5215A9259110406B0B6936FAE14EA7D83
Validity
Not Before: Mar 2 02:59:49 2026 GMT
Not After : Mar 9 02:59:49 2026 GMT
Subject: CN=69a4fd26-fdf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d3:67:cd:88:58:b0:fb:00:3b:c0:3e:ad:fe:
3c:1d:3d:45:78:bf:85:58:f3:63:b5:32:36:2d:47:
1b:66:b1:b9:40:41:32:85:04:93:0a:77:62:05:0a:
7f:8b:68:bb:dd:ab:61:76:ce:f5:f9:97:7d:eb:9e:
ec:76:85:af:72:83:5b:ed:10:cd:39:50:55:2a:ab:
c7:46:17:74:81:06:56:2b:08:b8:7a:3e:1e:09:cb:
15:c4:16:0e:45:01:38:8b:bd:28:6a:00:1f:9e:3e:
22:b9:8f:7a:ae:d8:10:ca:5c:f2:63:e9:f5:51:4b:
87:c0:2f:05:99:fe:33:1e:fe:de:70:18:25:45:0f:
21:a6:5a:1d:0b:75:06:49:30:06:83:54:38:c8:e7:
4f:a4:3b:a8:44:f5:52:22:4b:3b:fb:3f:18:ca:8a:
94:d1:a8:29:f6:bc:7c:6d:5e:de:e3:5a:66:0d:94:
f0:53:3e:1e:b4:a5:4b:27:5f:7b:46:ca:a8:64:13:
a2:4e:4a:1f:b1:57:6d:25:dc:9b:40:d7:97:b2:a1:
ac:81:5c:2a:0f:1d:8d:44:ce:37:52:73:ac:fe:30:
c7:09:78:95:d8:a2:44:ea:cf:83:74:c5:42:88:8f:
38:a1:7c:4f:4b:b7:e3:54:f7:96:58:c9:07:19:30:
dc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:20:42:1A:D8:DE:D8:1D:AD:13:5D:73:1E:56:CC:0A:A8:78:03:5E
X509v3 Authority Key Identifier:
keyid:1A:7A:50:D5:21:5A:92:59:11:04:06:B0:B6:93:6F:AE:14:EA:7D:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/GnpQ1SFaklkRBAawtpNvrhTqfYM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GnpQ1SFaklkRBAawtpNvrhTqfYM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/GnpQ1SFaklkRBAawtpNvrhTqfYM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:24:45:60:43:64:17:8d:35:98:37:e4:65:53:de:27:ca:df:
bb:4b:20:20:44:61:f3:8e:d9:f0:7b:5b:a4:cb:4c:7c:2f:2e:
82:c3:9b:14:77:e5:29:91:a4:f9:34:b9:53:6f:89:75:0b:04:
1f:4d:1b:16:87:83:32:1f:44:ce:73:07:39:5f:a1:b7:6a:90:
3d:d3:4e:83:af:4e:74:41:a9:6f:b0:e1:59:ab:8c:32:67:4e:
b3:9d:39:22:9f:d4:ca:89:1a:0c:7b:fa:47:f7:08:3e:be:b3:
4a:74:1e:0d:1f:f0:36:dd:a9:7f:fc:02:ab:09:40:ca:ba:ec:
74:78:bf:87:d2:1a:a0:54:70:eb:13:b7:4f:f2:a9:84:2a:68:
a6:77:28:d4:ea:40:7f:ed:2a:4d:04:b9:89:88:84:bd:6a:9e:
04:9c:5d:e1:67:58:69:d1:80:5e:e0:03:1b:f5:13:23:d4:dd:
a4:71:ef:d8:0a:c6:87:db:75:ef:cd:3d:89:72:e2:cf:fb:c4:
a6:7a:aa:85:5b:1a:8f:e4:68:80:ca:13:ed:5c:02:f4:9c:68:
af:83:8d:4d:43:39:5c:64:a1:50:83:6a:0b:57:4c:70:31:cb:
50:82:aa:79:59:a2:be:5d:89:f2:3b:01:65:b3:b1:64:87:b2:
cf:b8:ab:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:44:58 2026 by rpki-client