
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft
File: GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft (raw, json)
Hash identifier: DH5UY/vWQp3a9L6nPxn9kpVfX9MK3mBDylOyQAOYaJU=
Subject key identifier: 71:85:74:79:41:BD:09:AA:97:7B:DC:C5:5F:15:FB:12:23:F7:56:9D
Authority key identifier: 19:9D:4B:E0:60:8A:56:F5:04:80:C0:AD:26:45:DA:D7:B6:90:02:59
Certificate issuer: /CN=A91A470C/serialNumber=199D4BE0608A56F50480C0AD2645DAD7B6900259
Certificate serial: 48
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GZ1L4GCKVvUEgMCtJkXa17aQAlk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft
Manifest number: 43
Signing time: Sun 01 Mar 2026 09:59:38 +0000
Manifest this update: Sun 01 Mar 2026 09:59:38 +0000
Manifest next update: Sun 08 Mar 2026 09:59:38 +0000
Files and hashes: 1: GZ1L4GCKVvUEgMCtJkXa17aQAlk.crl (hash: Nhl0kGwRKuBY+eeZGTr51XgLnaknLXZ915nrfJqWzdw=)
2: 7B31D5E4CD0B11F0A1E66D5FC4F9AE02.roa (hash: NnPs85doUGI8wBjuyfyV3CMN9xCSIH8SHzO99MPJ70I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.crl
rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GZ1L4GCKVvUEgMCtJkXa17aQAlk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:59:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72 (0x48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A470C, serialNumber=199D4BE0608A56F50480C0AD2645DAD7B6900259
Validity
Not Before: Mar 1 09:59:38 2026 GMT
Not After : Mar 8 09:59:38 2026 GMT
Subject: CN=69a40e0a-e903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c5:7b:29:55:58:d7:a4:c0:b1:e8:ae:2a:d3:
fa:56:0c:39:e2:3b:24:2c:f6:d0:7e:3c:b7:48:f9:
69:70:2f:91:c6:cb:c5:d1:3c:7f:c7:52:0a:33:49:
0c:9f:d6:88:4d:94:ab:e7:43:69:02:20:09:00:d2:
16:05:f2:99:bb:ad:ca:1f:c8:b6:41:11:21:05:10:
d5:95:61:e0:1d:8d:4a:38:42:7c:e9:5d:6f:d5:9d:
ed:a7:1d:09:2c:d4:3e:ed:d3:1e:c4:12:95:77:05:
f7:75:71:25:a4:65:4c:ef:82:b5:f4:23:75:3c:b6:
8c:e4:d9:de:ab:7d:28:18:58:0a:82:e6:50:b8:0e:
1a:65:83:5a:99:e9:79:26:82:c3:2b:0b:9b:f5:99:
57:62:4d:54:6d:92:4e:c6:e4:35:f7:3b:4f:3c:3b:
80:f4:2c:32:64:e0:46:0d:40:89:2d:9c:8a:7d:ec:
43:e5:a3:8b:3f:74:4a:0d:7d:ac:00:f4:89:61:52:
99:11:28:44:c0:16:a6:91:85:59:70:6a:ea:e2:aa:
5d:a4:1f:02:3f:40:bb:c2:a9:4b:96:17:d7:64:5c:
60:10:cc:72:9c:96:58:7b:3b:cc:62:08:15:82:6d:
30:eb:ae:8e:2a:90:20:a0:8a:69:b6:f3:18:ef:b6:
2f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:85:74:79:41:BD:09:AA:97:7B:DC:C5:5F:15:FB:12:23:F7:56:9D
X509v3 Authority Key Identifier:
keyid:19:9D:4B:E0:60:8A:56:F5:04:80:C0:AD:26:45:DA:D7:B6:90:02:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GZ1L4GCKVvUEgMCtJkXa17aQAlk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:61:50:29:e3:2d:5a:1b:56:2d:2a:8a:f5:0c:d1:b1:ec:ac:
21:f7:8e:8e:dd:99:5b:e3:cd:f8:0c:14:f9:2d:2f:a5:c2:59:
3e:fa:e0:9a:66:19:21:1b:5c:13:ac:8f:9a:9d:17:00:f6:86:
a5:95:0b:bd:7f:e5:d1:a9:3e:89:15:2e:0b:a9:0a:da:26:4d:
73:1b:bd:c7:3a:2f:e1:57:2a:ac:3f:f4:4f:d4:aa:8e:2b:18:
64:07:23:04:32:01:db:65:d8:25:c4:51:b3:6b:a1:f4:3e:11:
ef:20:e7:bc:a6:45:e4:cd:fe:4e:4a:a2:49:14:f1:15:af:7d:
ef:05:32:86:9b:99:1e:69:57:ee:5b:fb:59:8e:ea:db:15:1c:
d0:7b:70:e8:6d:8d:f8:1b:2f:80:e9:cd:83:9f:fa:2d:66:39:
7f:59:4e:6a:fb:9b:a5:ce:88:23:3f:4b:32:7b:56:e2:28:b6:
65:44:df:bf:df:7f:25:22:6a:7f:21:6d:bd:13:85:16:8a:89:
5b:9b:b9:ee:33:5a:bc:d5:15:32:75:85:22:a0:b0:48:f2:39:
76:b5:fb:93:d3:1b:0a:9b:44:16:74:93:07:24:2a:25:ec:59:
6f:7d:4e:c5:61:a1:eb:de:a6:b5:51:50:d5:7e:76:3b:c9:b8:
10:86:6d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:05:10 2026 by rpki-client