
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft
File: glI0BAdpP4vHwTIlP0BsBORndvY.mft (raw, json)
Hash identifier: //5PQQNBsZHYkzcsn2mfsZbwsMN9FH0BV8DoK8cJYCo=
Subject key identifier: A4:65:CE:44:9E:3A:34:3C:E5:C2:A9:6B:A2:99:4C:29:94:F9:B1:CB
Authority key identifier: 82:52:34:04:07:69:3F:8B:C7:C1:32:25:3F:40:6C:04:E4:67:76:F6
Certificate issuer: /CN=A91B0514/serialNumber=8252340407693F8BC7C132253F406C04E46776F6
Certificate serial: 0287
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft
Manifest number: 027C
Signing time: Mon 02 Mar 2026 03:04:29 +0000
Manifest this update: Mon 02 Mar 2026 03:04:25 +0000
Manifest next update: Mon 09 Mar 2026 03:04:25 +0000
Files and hashes: 1: glI0BAdpP4vHwTIlP0BsBORndvY.crl (hash: lo8l7zz+AFv81FgDLGxJfFBpmylUUEQvt7bVGcaWXgs=)
2: 5382BB6AA5C611F0900E7F3EC4F9AE02.roa (hash: HHD0wlUVnVxAudrxvBwUFKWMsBYPEVEp5DArYrdk6Yg=)
3: 81055570A5C611F09009BB3EC4F9AE02.roa (hash: VEI8px2anVG8cZfCHh405MajK0/zl7ELNzRvGRaIcvk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.crl
rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 647 (0x287)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0514, serialNumber=8252340407693F8BC7C132253F406C04E46776F6
Validity
Not Before: Mar 2 03:04:25 2026 GMT
Not After : Mar 9 03:04:25 2026 GMT
Subject: CN=69a4fe3c-b4ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3b:61:02:96:77:6e:13:94:a1:b5:c4:71:fd:
c0:ed:0c:d8:4c:86:0d:11:47:d2:97:00:52:dc:9b:
a4:0d:77:85:78:f6:0d:3e:b4:f7:10:c2:a6:a8:ad:
b0:ab:8b:af:b8:00:d6:4f:d9:42:75:56:d7:9d:33:
42:d9:2f:eb:2e:5e:33:72:04:07:2e:9f:5d:04:7a:
5f:93:af:4b:0e:1c:e4:85:2b:8c:37:76:80:e2:53:
ae:45:bb:f4:01:94:4a:e4:20:8e:e8:7e:0d:72:1e:
7d:55:b0:5c:47:aa:1d:80:bc:2f:5a:22:90:2b:8c:
87:b6:4a:be:52:c0:06:1b:31:28:81:63:3c:94:36:
9f:34:3a:4f:e2:37:88:3a:04:fa:bd:31:fc:44:ec:
90:d4:e6:2a:da:02:43:25:f8:c5:ce:ad:f0:b7:45:
f2:09:0b:9f:e0:c1:6b:61:83:85:dd:9b:68:c8:b2:
bf:dd:a4:6e:f7:f2:4e:42:14:72:14:e1:0e:0e:77:
ca:5d:8d:42:91:d9:86:03:4f:97:de:0f:0a:9b:38:
d8:fb:ee:58:e9:87:fc:7e:58:ff:da:64:bd:de:c5:
71:2f:4c:d5:47:37:96:18:3b:55:ec:cb:35:dc:76:
51:e4:84:0e:8b:5d:07:55:bd:0f:8b:96:9a:d6:d5:
2d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:65:CE:44:9E:3A:34:3C:E5:C2:A9:6B:A2:99:4C:29:94:F9:B1:CB
X509v3 Authority Key Identifier:
keyid:82:52:34:04:07:69:3F:8B:C7:C1:32:25:3F:40:6C:04:E4:67:76:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:ab:ef:36:e2:cd:fe:5d:5c:ec:0a:a0:f1:6f:41:a6:57:69:
14:b4:03:1f:44:77:b9:1e:9c:cc:7d:bc:a8:5b:d8:5a:5f:bc:
09:e7:b0:5e:87:be:ff:ad:f8:03:1f:96:f7:24:7b:31:18:72:
e0:93:7c:7c:af:20:25:6b:ec:3e:6e:3a:3f:48:5a:55:e5:b0:
d1:18:0a:d9:9e:17:35:68:d0:ae:12:3b:46:4b:f0:3a:09:61:
73:a7:5a:60:ef:2a:9a:78:ee:22:d7:37:98:f2:12:63:64:70:
1e:fa:10:4e:5b:0f:6d:35:e3:b0:81:b8:d3:f3:a2:07:18:42:
33:a7:6f:bd:d6:d8:08:e7:b2:cc:52:6c:b9:ae:cb:6a:21:ce:
b5:5d:6b:18:04:fa:45:43:1e:99:59:14:e5:e7:d7:5c:eb:ca:
97:90:18:b4:17:f8:a4:e1:8d:28:b0:18:a4:d4:c2:47:fa:d8:
86:db:91:f5:37:6f:6a:61:5e:bf:a5:2d:1d:5e:db:fc:bd:98:
1b:cc:19:c6:01:88:44:db:56:b9:00:e7:e7:79:e8:6f:84:e5:
92:f9:3b:6e:5a:a9:a2:af:7a:a2:91:91:f1:52:27:11:6b:3d:
c2:f4:fb:cc:ec:56:1c:d9:b1:f7:11:5d:1c:7b:2e:29:09:32:
32:e5:1c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:10:39 2026 by rpki-client