
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.mft
File: GvPInPFH8v61HarolX25nThyY7g.mft (raw, json)
Hash identifier: Yba3dLBxQze0kT92V7MNi4+2DTJH05sD3KBfdgMy67w=
Subject key identifier: 6D:88:2E:30:D3:32:49:6B:D2:B8:CB:E9:8D:13:1F:B0:8C:BC:63:83
Authority key identifier: 1A:F3:C8:9C:F1:47:F2:FE:B5:1D:AA:E8:95:7D:B9:9D:38:72:63:B8
Certificate issuer: /CN=A91AD09B/serialNumber=1AF3C89CF147F2FEB51DAAE8957DB99D387263B8
Certificate serial: 0200
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GvPInPFH8v61HarolX25nThyY7g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.mft
Manifest number: 01F1
Signing time: Fri 17 Apr 2026 03:11:10 +0000
Manifest this update: Fri 17 Apr 2026 03:11:09 +0000
Manifest next update: Fri 24 Apr 2026 03:11:09 +0000
Files and hashes: 1: GvPInPFH8v61HarolX25nThyY7g.crl (hash: lw7/czCSSQi8v9UiqkwOaMseVK56LJh3ompg50itSdg=)
2: 3763B68C774C11EE81607E76C4F9AE02.roa (hash: 0ZHjGWE0UDuC9zS19ynStMtVYcZ+3d8+hgVY5JE+ZsU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.crl
rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GvPInPFH8v61HarolX25nThyY7g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:11:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 512 (0x200)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AD09B, serialNumber=1AF3C89CF147F2FEB51DAAE8957DB99D387263B8
Validity
Not Before: Apr 17 03:11:09 2026 GMT
Not After : Apr 24 03:11:09 2026 GMT
Subject: CN=69e1a4ce-5f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d3:27:95:1f:20:f4:88:97:0a:f2:4c:7e:26:
37:c1:31:30:ff:25:e2:07:5a:d2:51:ca:39:08:e4:
70:b2:43:6a:9c:d5:43:c8:65:52:9a:fb:9f:c8:f1:
07:66:3e:6a:6f:b0:d9:b8:05:91:41:30:bd:75:3c:
23:29:83:a7:cc:fd:31:36:5a:4a:74:ec:1f:fe:48:
de:9b:76:d0:25:b7:32:9c:82:a6:f3:4e:1f:6a:db:
46:57:87:e9:c4:6c:91:39:5e:4d:dc:b4:1c:30:d1:
fb:80:b9:07:b5:73:7b:a3:3e:f0:71:a1:80:3a:8e:
77:16:bc:31:49:80:51:e8:ab:e2:04:dc:d1:b1:fd:
6c:f0:2f:dd:48:a3:15:d5:b3:5b:35:27:06:01:50:
40:8d:ec:a8:13:84:eb:e7:9f:09:a3:3d:d6:30:31:
43:74:a0:4d:a6:99:cd:2f:f8:24:f9:a9:a4:e8:98:
1b:ee:bf:ce:59:4d:6a:7f:f4:d1:11:74:cf:12:ad:
d7:00:94:81:f0:68:66:67:94:5e:09:5c:fb:71:da:
75:d7:dc:00:40:b5:8d:6f:96:a3:b3:b5:10:7d:90:
af:3a:4b:1b:3c:74:de:7e:97:3e:57:32:c7:f9:19:
db:ee:6a:29:20:ac:ac:f6:d8:79:ab:6d:3e:12:39:
bd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:88:2E:30:D3:32:49:6B:D2:B8:CB:E9:8D:13:1F:B0:8C:BC:63:83
X509v3 Authority Key Identifier:
keyid:1A:F3:C8:9C:F1:47:F2:FE:B5:1D:AA:E8:95:7D:B9:9D:38:72:63:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GvPInPFH8v61HarolX25nThyY7g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:75:51:a4:f0:6d:ed:7a:e6:36:fe:fb:93:ac:65:ec:fe:8f:
79:76:b7:97:00:0b:b2:97:9d:04:44:62:f1:45:3e:e1:ba:6e:
a1:54:73:29:e8:13:92:11:de:9e:bd:96:b2:2e:46:98:e0:cc:
57:38:24:ea:39:c4:42:d2:7c:49:2f:b5:bd:67:e0:9f:03:45:
4d:60:04:04:d6:a7:66:bd:f7:f9:65:dd:84:b1:00:dc:31:7c:
f1:aa:95:be:78:32:10:e2:20:11:af:cc:96:d7:d6:f8:14:34:
94:38:05:8d:23:5a:3d:36:af:2e:23:a6:0d:62:ae:59:a3:4b:
29:6f:0b:8c:fb:af:6a:42:0d:b5:99:24:bd:5d:ca:72:ea:ca:
6d:7f:05:0a:01:57:55:68:4a:0b:ee:84:5c:ce:3c:b4:3b:71:
8a:19:e6:ff:e3:ca:ef:58:4f:3c:f3:55:dd:ee:be:c0:91:de:
10:e7:d3:13:7f:74:a3:6f:53:9c:17:81:83:19:0d:25:48:50:
8f:21:89:0f:27:46:c6:88:a6:60:41:e5:3c:e5:72:97:0c:2f:
9a:29:c5:e0:46:5c:ef:7c:27:0a:ba:d3:a4:d0:02:5d:78:ff:
32:80:8d:ca:4f:50:bc:49:67:a0:11:a2:69:d7:de:a7:9b:99:
7c:87:6c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:03:08 2026 by rpki-client