
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft
File: gnj0fexbetwgGJf5m8xuK_qI0BU.mft (raw, json)
Hash identifier: TXEW9nbleLKaDBRfXh8jWSvXwRwzKsfCi+w6xJCVxfU=
Subject key identifier: AE:D1:77:A6:0E:38:18:9B:13:AE:E7:14:4C:F4:5E:E4:DD:CD:83:C3
Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
Certificate issuer: /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Certificate serial: 401D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft
Manifest number: 3BA1
Signing time: Thu 16 Apr 2026 14:19:58 +0000
Manifest this update: Thu 16 Apr 2026 14:19:58 +0000
Manifest next update: Thu 23 Apr 2026 14:19:58 +0000
Files and hashes: 1: gnj0fexbetwgGJf5m8xuK_qI0BU.crl (hash: jatWax2rx2DsKKDce3JeAuciGLVivFbWDpmil/X1m+4=)
2: AF4D576AC55E11E9A634E487C4F9AE02.roa (hash: CbQ0bkGVGRLNvDmdHAGt1dJffFDlaxQ/ygzWLL1NvAM=)
3: 9703DB3A870311F099FAB64CC4F9AE02.roa (hash: Ia93k88ZEDJc6d0wi+Tm+6RqZrnm8itW9IDb0N2U2FY=)
4: F025BAB69D5911EEAA9F0413C4F9AE02.roa (hash: uR51mJszDb9Ae22yXDS7eZ3aiLyh49qcIOPtps96eJ0=)
5: F0F17BEC9D5911EEAA9F0413C4F9AE02.roa (hash: qNU0HHnXHT9xXvXK+8XX/XVLpr9vWCA/nlfZ5ERqMgs=)
6: EF57185A9D5911EEAA9F0413C4F9AE02.roa (hash: dZPIQkB0aEOTr2YhKhn/8aOaubRqYT004bV6OKdDzDs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl
rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 14:19:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16413 (0x401d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A001E, serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Validity
Not Before: Apr 16 14:19:58 2026 GMT
Not After : Apr 23 14:19:58 2026 GMT
Subject: CN=69e0f00e-e777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:36:7a:c8:60:a1:91:ce:e5:84:ca:9a:7d:86:
cd:41:c6:6e:ef:e3:ac:14:b3:24:ac:37:e7:e3:8d:
c3:3b:c3:71:01:62:82:e5:2a:ce:d6:92:96:c5:11:
41:76:2e:4e:a5:7c:8b:3d:83:31:dc:8b:d6:1d:97:
c0:2e:76:c3:ec:98:45:fe:19:d8:4c:44:39:dc:f8:
69:79:70:79:15:b6:11:99:13:40:a7:5c:cd:6e:1c:
2b:d3:0f:2a:04:f8:00:6b:69:f4:0b:8f:9f:9d:21:
e3:86:ec:eb:17:62:48:8a:79:07:19:fb:2a:11:72:
2a:fa:fa:f2:a1:a0:2a:b7:57:b5:81:f0:b8:8c:a1:
6a:83:8a:5f:59:fb:9f:46:68:ca:cb:09:23:66:5c:
38:6f:6d:c9:ab:ca:64:7e:0f:69:56:0c:3d:8b:d9:
9a:32:57:ef:9e:b6:3f:b6:2c:a8:12:8b:6a:6b:2c:
86:96:43:64:c4:65:4e:bb:04:88:ec:14:5f:fd:25:
a5:b0:da:11:95:de:d6:e3:8b:04:5a:7f:f0:eb:a2:
b6:76:06:f3:27:d8:ff:90:70:8d:3e:41:c6:8a:b9:
f8:23:02:6b:d8:76:cf:27:34:33:7a:56:cc:d2:90:
11:f9:62:1e:29:62:7d:40:3a:d1:dd:72:b6:72:92:
e7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D1:77:A6:0E:38:18:9B:13:AE:E7:14:4C:F4:5E:E4:DD:CD:83:C3
X509v3 Authority Key Identifier:
keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:12:e7:11:cf:a4:32:dc:94:c8:5d:27:c5:5a:99:da:44:f2:
1f:f2:a4:60:c9:42:29:10:38:87:28:36:cc:c9:79:cd:f5:d7:
4e:39:75:a4:1d:c3:08:ef:37:41:6a:06:9c:f4:dd:c6:59:96:
0e:77:f0:0a:a9:24:71:ae:f8:64:74:05:8b:57:1c:10:26:78:
0e:9d:0a:eb:1f:aa:fa:f7:46:a0:20:05:eb:96:84:7a:21:c6:
20:ea:8c:24:9b:b4:8a:9a:08:ae:7f:58:72:5e:6b:65:0f:94:
a7:81:cb:d0:85:56:ab:28:dd:3f:ae:28:61:5f:6b:f1:6c:0c:
42:e9:52:50:e7:71:ff:27:a8:7f:65:a9:3b:e5:ab:1a:57:47:
55:be:2c:60:40:a7:6f:38:3a:d0:9c:5a:f2:ec:de:42:13:26:
38:e0:d3:8b:ea:67:0e:71:12:aa:1e:3b:8f:f0:4e:1f:ce:45:
1e:bf:ca:b3:33:b5:26:85:3b:fe:ec:9e:20:10:2a:82:ee:a6:
19:8a:15:83:3e:d2:35:38:e2:c0:ab:b6:65:2f:74:5c:fb:1e:
81:c7:1a:ab:68:2d:5c:66:bb:d9:70:38:75:e7:bf:15:5d:fa:
1f:eb:c3:ee:f6:8d:03:96:a3:e7:f1:af:fb:f9:a9:97:fc:ea:
4c:37:a5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:03:29 2026 by rpki-client