
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft
File: GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft (raw, json)
Hash identifier: 7AYNW7aeu28JCkwtPUb1JjG0zWbviVq/xW/9OdtKVzw=
Subject key identifier: DD:93:77:15:83:4F:71:7E:07:EB:C8:65:5C:7F:8D:9A:F8:DA:22:4B
Authority key identifier: 19:9D:4B:E0:60:8A:56:F5:04:80:C0:AD:26:45:DA:D7:B6:90:02:59
Certificate issuer: /CN=A91A470C/serialNumber=199D4BE0608A56F50480C0AD2645DAD7B6900259
Certificate serial: 60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GZ1L4GCKVvUEgMCtJkXa17aQAlk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft
Manifest number: 5B
Signing time: Fri 17 Apr 2026 07:57:17 +0000
Manifest this update: Fri 17 Apr 2026 07:57:17 +0000
Manifest next update: Fri 24 Apr 2026 07:57:17 +0000
Files and hashes: 1: GZ1L4GCKVvUEgMCtJkXa17aQAlk.crl (hash: AuR4oxzQnqiMUHsi3oD2HV82WiRo5ovpaLcE9DBjaAQ=)
2: 7B31D5E4CD0B11F0A1E66D5FC4F9AE02.roa (hash: NnPs85doUGI8wBjuyfyV3CMN9xCSIH8SHzO99MPJ70I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.crl
rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GZ1L4GCKVvUEgMCtJkXa17aQAlk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96 (0x60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A470C, serialNumber=199D4BE0608A56F50480C0AD2645DAD7B6900259
Validity
Not Before: Apr 17 07:57:17 2026 GMT
Not After : Apr 24 07:57:17 2026 GMT
Subject: CN=69e1e7dd-dfd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:60:1f:39:97:a3:43:cf:9f:5c:7a:4c:30:53:
04:14:ce:79:1a:d5:99:44:c8:b1:06:e1:8e:cc:a1:
5b:91:aa:b0:a1:4b:ad:eb:b8:45:24:b6:c0:29:e7:
96:0e:29:9e:cd:2a:b3:60:49:7c:81:13:4a:42:54:
e3:07:1e:7b:11:b6:d0:37:04:4c:f3:03:75:0e:d1:
f1:74:51:b5:e8:05:d0:64:54:06:0f:7b:a5:21:d1:
12:be:e9:45:36:49:14:0e:04:19:e9:81:24:c4:26:
d4:e9:6e:30:b4:f7:c4:71:29:e1:7d:43:c5:10:40:
4a:b6:d4:4f:46:0e:dc:e3:17:66:2b:01:a4:cd:f6:
d8:af:a4:28:37:72:fc:22:14:ff:f7:b6:c2:35:8e:
18:41:89:91:bf:f1:20:b8:f4:78:15:fa:c3:a6:19:
a9:8b:4d:46:eb:34:81:f9:9b:49:a2:f1:c7:b0:39:
c2:4e:d7:2c:a6:f5:6a:26:2e:11:09:3c:dc:fc:cd:
3f:00:18:84:a8:a0:fe:75:10:a8:d1:d3:fb:c5:8e:
ce:31:a1:d5:c7:15:c2:ad:08:a9:8c:e9:19:4f:20:
5d:26:b4:09:cc:77:33:f9:c2:99:32:66:c0:ed:8c:
36:57:b3:36:22:d7:df:68:e3:b5:16:34:7b:ec:9a:
24:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:93:77:15:83:4F:71:7E:07:EB:C8:65:5C:7F:8D:9A:F8:DA:22:4B
X509v3 Authority Key Identifier:
keyid:19:9D:4B:E0:60:8A:56:F5:04:80:C0:AD:26:45:DA:D7:B6:90:02:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GZ1L4GCKVvUEgMCtJkXa17aQAlk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:27:31:55:06:1a:82:f4:ed:53:b8:ae:ae:a4:d8:31:27:3f:
ad:dd:db:b4:78:a5:cf:fc:91:31:ae:3a:09:17:52:83:da:b9:
bc:b6:5a:b5:be:0b:92:92:42:33:d7:b4:07:71:76:23:7e:32:
33:76:45:92:0c:2d:f2:65:2a:35:ca:b4:15:e6:dd:bb:a5:ad:
3b:fb:25:67:cd:a3:05:89:86:28:fe:f4:bb:2d:3a:34:3b:3d:
a1:74:34:05:1d:9e:5c:1c:06:88:39:84:fa:78:d7:2f:1b:7a:
7d:c1:52:23:46:0d:6a:66:db:d7:03:a7:be:f5:79:8c:73:cb:
96:0b:59:55:78:3c:19:a9:62:2f:8d:2c:4f:af:ee:ae:07:b6:
a0:21:3a:8e:61:61:9b:2b:f9:89:fa:35:55:ea:c3:ac:8e:03:
c5:f9:d0:23:85:1b:32:52:52:a6:3b:5f:d1:59:5e:2c:b3:8b:
0e:8b:ca:c5:20:d7:0d:ee:9f:bc:31:81:21:75:f1:c4:49:45:
eb:ae:e3:97:4e:be:19:8f:da:c5:8f:49:51:25:b5:8d:79:1b:
13:40:86:5a:3d:ce:ff:8f:db:6c:56:c3:56:84:42:89:39:0d:
81:23:d0:96:46:51:da:dd:43:13:26:14:d9:99:d3:85:13:2b:
8a:09:fe:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:43:51 2026 by rpki-client