
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.mft
File: GvPInPFH8v61HarolX25nThyY7g.mft (raw, json)
Hash identifier: p4o0e8A/Zo1YHjYZbVUJ20+fVlHxlf80WYQB2UBNl7g=
Subject key identifier: 5A:BA:D7:3C:19:92:06:03:F2:00:50:32:16:95:9D:BD:BF:05:D8:8F
Authority key identifier: 1A:F3:C8:9C:F1:47:F2:FE:B5:1D:AA:E8:95:7D:B9:9D:38:72:63:B8
Certificate issuer: /CN=A91AD09B/serialNumber=1AF3C89CF147F2FEB51DAAE8957DB99D387263B8
Certificate serial: 01E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GvPInPFH8v61HarolX25nThyY7g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.mft
Manifest number: 01D9
Signing time: Sun 01 Mar 2026 23:54:47 +0000
Manifest this update: Sun 01 Mar 2026 23:54:45 +0000
Manifest next update: Sun 08 Mar 2026 23:54:45 +0000
Files and hashes: 1: GvPInPFH8v61HarolX25nThyY7g.crl (hash: BBW+RSxMyAzHFM9JpEC//GU2P66x54sWmU6ZYWO3RrM=)
2: 3763B68C774C11EE81607E76C4F9AE02.roa (hash: 0ZHjGWE0UDuC9zS19ynStMtVYcZ+3d8+hgVY5JE+ZsU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.crl
rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GvPInPFH8v61HarolX25nThyY7g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:54:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 488 (0x1e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AD09B, serialNumber=1AF3C89CF147F2FEB51DAAE8957DB99D387263B8
Validity
Not Before: Mar 1 23:54:45 2026 GMT
Not After : Mar 8 23:54:45 2026 GMT
Subject: CN=69a4d1c6-d231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ec:30:64:46:a2:f5:77:ba:0a:cd:21:55:77:
60:11:f4:da:40:28:5a:a7:c7:5f:c6:6c:e5:b8:be:
9f:6e:78:30:ca:d8:06:7d:2a:1c:0d:be:34:e2:76:
fe:85:60:f9:b9:60:25:22:1b:fe:6c:a3:b4:97:69:
30:64:ed:0b:87:12:2f:7d:12:9a:c8:2b:eb:89:05:
49:31:52:88:17:54:f5:d0:3f:db:43:22:54:63:c0:
cc:84:bc:9b:a9:74:3a:38:de:8e:a6:f0:93:3a:e6:
61:48:82:69:de:1a:31:c1:3e:22:a9:ff:a7:39:9e:
57:cf:0a:6b:9f:21:b2:d6:78:12:bd:fa:d2:2a:c1:
71:40:a0:f8:17:8d:01:f9:d9:fb:a9:47:a5:29:f3:
ee:58:76:19:20:2c:93:dd:71:3a:f6:15:df:34:c4:
ab:76:1e:20:d5:c7:0e:f9:e0:e9:77:b0:58:30:33:
80:fb:51:cb:da:1b:8d:8b:9d:0e:e1:e1:e4:2b:9e:
cd:9e:3d:1a:a5:02:74:c2:e2:33:49:8c:21:92:9f:
04:d4:d7:d3:93:f3:65:a6:7c:ff:3d:2b:65:ab:80:
c3:dc:c0:b8:b5:b6:e3:5b:b7:9e:3f:12:a9:c6:7a:
9b:d9:bc:f2:f4:e5:ab:92:fe:bd:71:7a:b3:f7:01:
00:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BA:D7:3C:19:92:06:03:F2:00:50:32:16:95:9D:BD:BF:05:D8:8F
X509v3 Authority Key Identifier:
keyid:1A:F3:C8:9C:F1:47:F2:FE:B5:1D:AA:E8:95:7D:B9:9D:38:72:63:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GvPInPFH8v61HarolX25nThyY7g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:c3:18:80:2b:12:d4:c1:18:ec:ae:d0:29:a6:d9:d1:50:b7:
39:a5:4f:39:17:23:02:7c:ae:78:36:9b:48:69:d2:fd:56:f4:
28:36:c4:bb:96:4d:a9:7d:cf:9f:47:62:71:64:40:66:2c:95:
3d:70:22:64:ef:f8:5f:67:c0:ca:5a:20:af:a9:81:10:ee:66:
65:fa:aa:4b:61:c7:e3:9e:39:a7:54:6a:1a:8f:da:73:f1:27:
4d:27:8b:d3:7f:a6:aa:b2:f6:88:aa:3a:49:81:4a:ad:b2:ad:
cf:50:0e:a5:62:c2:88:bd:1a:6e:0d:50:d1:35:5b:10:bd:93:
49:f3:37:2a:1c:27:73:57:e6:dc:f5:b5:51:ce:76:44:dc:67:
5b:39:22:79:4c:e6:3e:68:46:59:66:b9:15:77:04:31:b0:1f:
53:d8:a7:fb:01:f6:98:ac:45:ff:a9:4f:ef:c0:24:1e:cf:e4:
16:a5:d9:1f:5f:af:59:4a:6f:00:85:50:b0:d8:4a:2e:42:10:
e8:bf:b6:91:ae:e6:64:13:c6:7b:dc:8c:aa:a3:24:38:fb:95:
51:91:a9:b3:e4:0f:3a:46:30:83:35:07:d0:de:7b:d7:86:fb:
0d:f0:8d:20:64:6a:7a:42:55:a0:0e:57:10:57:78:6e:4c:18:
ef:3f:1a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:43:08 2026 by rpki-client