
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft
File: gnj0fexbetwgGJf5m8xuK_qI0BU.mft (raw, json)
Hash identifier: 17hVip79ncD2zIkCOeP7v/oZmCy/np7KsV9Z68UlSCk=
Subject key identifier: 47:FD:33:39:24:D3:C9:62:7E:5F:66:A7:67:5C:05:55:97:D3:2E:F9
Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
Certificate issuer: /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Certificate serial: 4005
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft
Manifest number: 3B89
Signing time: Mon 02 Mar 2026 02:31:22 +0000
Manifest this update: Mon 02 Mar 2026 02:31:20 +0000
Manifest next update: Mon 09 Mar 2026 02:31:20 +0000
Files and hashes: 1: gnj0fexbetwgGJf5m8xuK_qI0BU.crl (hash: Gv8VpFeeZd/kUiWqfEPdmslPmpC70K4sLxjhF/p8Et8=)
2: AF4D576AC55E11E9A634E487C4F9AE02.roa (hash: CbQ0bkGVGRLNvDmdHAGt1dJffFDlaxQ/ygzWLL1NvAM=)
3: 9703DB3A870311F099FAB64CC4F9AE02.roa (hash: Ia93k88ZEDJc6d0wi+Tm+6RqZrnm8itW9IDb0N2U2FY=)
4: F0F17BEC9D5911EEAA9F0413C4F9AE02.roa (hash: qNU0HHnXHT9xXvXK+8XX/XVLpr9vWCA/nlfZ5ERqMgs=)
5: F025BAB69D5911EEAA9F0413C4F9AE02.roa (hash: uR51mJszDb9Ae22yXDS7eZ3aiLyh49qcIOPtps96eJ0=)
6: EF57185A9D5911EEAA9F0413C4F9AE02.roa (hash: dZPIQkB0aEOTr2YhKhn/8aOaubRqYT004bV6OKdDzDs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl
rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:31:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16389 (0x4005)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A001E, serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Validity
Not Before: Mar 2 02:31:20 2026 GMT
Not After : Mar 9 02:31:20 2026 GMT
Subject: CN=69a4f67a-222a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:33:e0:61:c5:7e:49:9d:d1:23:ef:8d:8e:6c:
5c:ef:9a:46:05:20:69:4a:db:b1:53:ad:c3:41:da:
ab:99:ed:d6:07:eb:98:80:5f:1b:a8:ba:32:52:d9:
11:b6:9c:62:fe:9e:b9:14:28:2f:6f:63:75:88:32:
28:f2:3d:41:61:cc:5d:68:15:b6:9a:2c:72:4c:8e:
3d:5a:c4:89:4c:d6:10:02:45:6d:72:df:86:6d:08:
9a:4f:83:59:42:d7:66:e0:91:81:bd:c1:56:43:a1:
9b:d7:04:35:5a:7b:92:e1:38:61:77:49:d2:43:ec:
7e:42:fa:1b:76:0c:a0:26:d3:75:a2:c6:8f:d0:16:
98:e1:b4:61:43:fc:d1:98:8e:c5:b3:a5:c8:48:ce:
ce:be:43:59:07:07:7f:47:af:84:4b:b9:88:f5:7a:
18:ac:12:9b:4a:57:6e:ca:3e:8c:6d:62:5d:71:5a:
81:3b:d4:27:e8:7a:2a:f7:99:19:ab:7b:dc:46:93:
7d:70:0d:85:4e:81:33:fc:cb:a5:f1:4a:d2:07:10:
74:fe:4e:9b:fb:2d:34:ea:cd:de:99:84:57:ab:87:
82:c7:2d:e8:fb:9d:03:5c:60:91:da:f9:34:53:97:
92:fd:f6:0a:6d:21:83:e4:ba:46:4b:be:f8:e4:67:
6c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:FD:33:39:24:D3:C9:62:7E:5F:66:A7:67:5C:05:55:97:D3:2E:F9
X509v3 Authority Key Identifier:
keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:6b:10:15:e5:46:66:bd:61:92:81:c7:e0:6d:61:ec:08:61:
14:ae:c2:e9:0e:4d:9f:f3:d6:9f:5c:26:8c:28:ce:8f:de:79:
c6:5b:38:9f:26:31:70:1c:ab:cb:78:d3:84:1b:e4:e9:b7:bb:
88:e7:93:16:82:98:84:34:5b:01:be:7a:ee:3e:13:40:0d:d1:
fa:05:8a:7e:e8:86:61:9b:cb:0c:8e:f6:47:15:0d:e1:69:1f:
29:c1:e5:24:9d:6a:1d:40:88:0a:9e:1f:14:83:0e:b9:70:46:
e2:f0:c0:93:7a:c6:b3:70:d6:b3:2e:3c:53:c5:8a:43:a7:3d:
99:30:b0:e7:76:e5:cd:35:68:35:0e:c4:7a:f4:85:dd:71:a2:
2a:90:6d:86:03:48:71:80:b1:79:11:85:1f:00:e6:99:77:4b:
f4:eb:d2:ac:06:24:15:38:e4:3d:6e:88:80:dc:61:c2:d4:f6:
db:f7:4c:5c:e5:da:59:42:bc:d3:52:2f:ba:7e:c1:94:41:83:
5d:df:bd:e6:17:b1:e9:65:c5:fc:e8:99:1a:61:94:e5:86:12:
75:0c:6a:f3:eb:49:c9:dd:b5:74:d7:5d:58:33:4c:56:15:1b:
d5:6f:a8:11:bc:53:d0:57:b5:a9:b3:52:3a:5f:60:c7:1c:fb:
24:8d:f2:74
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICQAUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTAwMUUxMTAvBgNVBAUTKDgyNzhGNDdERUM1QjdBREMyMDE4OTdGOTlCQ0M2RTJC
RkE4OEQwMTUwHhcNMjYwMzAyMDIzMTIwWhcNMjYwMzA5MDIzMTIwWjAYMRYwFAYD
VQQDEw02OWE0ZjY3YS0yMjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzTPgYcV+SZ3RI++Njmxc75pGBSBpStuxU63DQdqrme3WB+uYgF8bqLoyUtkR
tpxi/p65FCgvb2N1iDIo8j1BYcxdaBW2mixyTI49WsSJTNYQAkVtct+GbQiaT4NZ
Qtdm4JGBvcFWQ6Gb1wQ1WnuS4Thhd0nSQ+x+QvobdgygJtN1osaP0BaY4bRhQ/zR
mI7Fs6XISM7OvkNZBwd/R6+ES7mI9XoYrBKbSlduyj6MbWJdcVqBO9Qn6Hoq95kZ
q3vcRpN9cA2FToEz/Mul8UrSBxB0/k6b+y006s3emYRXq4eCxy3o+50DXGCR2vk0
U5eS/fYKbSGD5LpGS7745GdsmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEf9Mzkk
08lifl9mp2dcBVWX0y75MB8GA1UdIwQYMBaAFIJ49H3sW3rcIBiX+ZvMbiv6iNAV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDAxRS8zNUZBMEY1NjFE
NzgxMUUyOTM3NzFGQzQwOEIwMkNEMi9nbmowZmV4YmV0d2dHSmY1bTh4dUtfcUkw
QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2duajBmZXhiZXR3Z0dKZjVtOHh1S19xSTBCVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MDAxRS8zNUZBMEY1NjFENzgxMUUyOTM3NzFGQzQwOEIwMkNEMi9nbmowZmV4YmV0
d2dHSmY1bTh4dUtfcUkwQlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAomsQFeVGZr1hkoHH4G1h7AhhFK7C6Q5Nn/PWn1wmjCjOj955xls4nyYxcByr
y3jThBvk6be7iOeTFoKYhDRbAb567j4TQA3R+gWKfuiGYZvLDI72RxUN4WkfKcHl
JJ1qHUCICp4fFIMOuXBG4vDAk3rGs3DWsy48U8WKQ6c9mTCw53blzTVoNQ7EevSF
3XGiKpBthgNIcYCxeRGFHwDmmXdL9OvSrAYkFTjkPW6IgNxhwtT22/dMXOXaWUK8
01Ivun7BlEGDXd+95hex6WXF/OiZGmGU5YYSdQxq8+tJyd21dNddWDNMVhUb1W+o
EbxT0Fe1qbNSOl9gxxz7JI3ydA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:44:02 2026 by rpki-client