
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft
File: gp8PQIhN2ZESEAWwfQmiy_-03sY.mft (raw, json)
Hash identifier: GuEWLnjQRjzMbl4VoPOpBn4kiYKBwx3Md7NRHr1dqsQ=
Subject key identifier: D9:D2:78:3D:42:8D:85:25:14:C8:6A:8A:42:BE:83:2F:78:97:7A:F0
Authority key identifier: 82:9F:0F:40:88:4D:D9:91:12:10:05:B0:7D:09:A2:CB:FF:B4:DE:C6
Certificate issuer: /CN=A91A16CF/serialNumber=829F0F40884DD991121005B07D09A2CBFFB4DEC6
Certificate serial: 0CAB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft
Manifest number: 0C91
Signing time: Thu 16 Apr 2026 18:30:26 +0000
Manifest this update: Thu 16 Apr 2026 18:30:26 +0000
Manifest next update: Thu 23 Apr 2026 18:30:26 +0000
Files and hashes: 1: gp8PQIhN2ZESEAWwfQmiy_-03sY.crl (hash: icevnye0OCBsZC8bVJTx33+SEJeV9gZ9/2Uiml5nEmo=)
2: 2D2322ECF53111F0B165BC265F6F56BC.roa (hash: tZiy66LheF6UARgLL7DjkA4ZOPMuv3MTdVKtCblCRCI=)
3: 46D7B1B468F911EFAB3D9424C4F9AE02.roa (hash: EANYonIlLAQsD77itNqvU5Ar2XS9wRUAE//HQHxkYJ8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.crl
rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3243 (0xcab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A16CF, serialNumber=829F0F40884DD991121005B07D09A2CBFFB4DEC6
Validity
Not Before: Apr 16 18:30:26 2026 GMT
Not After : Apr 23 18:30:26 2026 GMT
Subject: CN=69e12ac2-bf18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9e:55:55:63:1b:de:9e:34:8c:10:f3:9b:4f:
b3:23:ff:19:eb:8f:d2:85:6a:1e:b3:3e:42:e0:be:
bf:eb:3e:50:42:94:f3:ca:59:31:35:22:86:83:bf:
ee:89:43:8e:f7:d1:77:ca:7d:ef:3f:10:a8:ca:72:
ed:20:d0:f6:17:ef:b5:5d:3b:8b:ff:97:96:d0:4a:
c7:43:8c:60:32:dc:2b:84:67:ea:d4:7c:90:2a:bf:
ec:dd:22:91:c8:90:32:58:e9:16:dc:b8:14:0b:41:
7e:ac:77:a8:b5:c1:3c:7f:c0:cf:43:7c:aa:b4:b2:
8d:97:af:c0:e7:38:49:30:b9:d1:c1:08:b2:d5:ec:
86:31:38:39:cd:eb:fa:82:7d:55:f7:24:c1:5e:b3:
e8:92:6a:23:ad:87:7d:72:52:d0:93:d0:5b:f9:04:
be:53:8f:35:72:0a:89:90:9f:e8:bb:cc:f9:fe:3c:
6a:6a:05:f1:46:99:6e:c0:f9:b6:48:7c:11:bc:5c:
8a:fa:fc:f6:42:47:6b:bd:86:42:f1:5e:48:67:3a:
41:f4:d1:55:90:53:74:b4:d2:f5:5d:69:4d:f6:d0:
f3:53:20:0f:9e:a9:20:1f:52:c2:eb:5c:02:77:c6:
ec:c0:15:1f:54:85:d6:2c:1a:59:cc:18:27:f2:7a:
4e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D2:78:3D:42:8D:85:25:14:C8:6A:8A:42:BE:83:2F:78:97:7A:F0
X509v3 Authority Key Identifier:
keyid:82:9F:0F:40:88:4D:D9:91:12:10:05:B0:7D:09:A2:CB:FF:B4:DE:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:5c:8a:27:98:00:93:20:58:ee:e0:ab:ab:22:42:73:48:9a:
fa:24:b6:9b:01:04:af:31:4e:ea:9e:4a:6c:73:5f:c6:80:5f:
46:c4:63:00:75:9b:a7:b2:05:84:35:b5:e4:ec:e1:5e:bf:df:
04:c4:b1:da:82:7f:0f:24:fb:8c:25:ce:de:3b:57:97:5d:5e:
f1:db:de:f0:86:85:25:9f:1f:32:1d:05:97:a0:f8:a8:26:da:
cd:41:99:76:8f:bb:e2:60:5e:d7:94:44:54:bc:86:0d:48:d4:
d6:7f:e2:ef:93:e8:fd:9f:21:fe:21:01:4f:2a:19:42:6e:b4:
3c:8f:f9:cd:56:7d:d2:ef:25:c2:e1:3e:3c:fd:92:26:68:1f:
54:44:91:b9:84:db:42:ee:23:91:3a:25:cf:1a:2c:0f:3d:d8:
58:db:d9:03:53:7f:c1:e4:9b:b7:d0:a0:d0:48:71:e4:52:4c:
98:19:42:38:ac:92:4a:8c:6f:16:b9:dc:d5:60:b3:0d:44:6a:
88:69:34:97:34:e2:94:c0:56:7c:f0:25:2d:c8:ba:5b:d8:97:
91:01:cf:a8:de:88:78:85:7f:6e:8c:6e:d4:cc:0a:52:cd:19:
8d:90:20:22:b5:b8:67:fb:e3:8a:09:d0:9a:99:6e:1d:c5:6e:
54:8c:69:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:02:46 2026 by rpki-client