
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft
File: glI0BAdpP4vHwTIlP0BsBORndvY.mft (raw, json)
Hash identifier: dx9hvymgJEs6sMYHhKvr5yLmai5s2KIktAHwNX3MYfA=
Subject key identifier: B6:23:51:21:08:7B:1B:F4:D3:35:CE:03:4B:05:CF:37:60:55:22:1B
Authority key identifier: 82:52:34:04:07:69:3F:8B:C7:C1:32:25:3F:40:6C:04:E4:67:76:F6
Certificate issuer: /CN=A91B0514/serialNumber=8252340407693F8BC7C132253F406C04E46776F6
Certificate serial: 029F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft
Manifest number: 0294
Signing time: Fri 17 Apr 2026 01:27:29 +0000
Manifest this update: Fri 17 Apr 2026 01:27:29 +0000
Manifest next update: Fri 24 Apr 2026 01:27:29 +0000
Files and hashes: 1: glI0BAdpP4vHwTIlP0BsBORndvY.crl (hash: KEhjQF9nT8df2ijZhVpsoyffzBOQxl/DpyHuDQbhY9M=)
2: 81055570A5C611F09009BB3EC4F9AE02.roa (hash: VEI8px2anVG8cZfCHh405MajK0/zl7ELNzRvGRaIcvk=)
3: 5382BB6AA5C611F0900E7F3EC4F9AE02.roa (hash: HHD0wlUVnVxAudrxvBwUFKWMsBYPEVEp5DArYrdk6Yg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.crl
rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:27:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 671 (0x29f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0514, serialNumber=8252340407693F8BC7C132253F406C04E46776F6
Validity
Not Before: Apr 17 01:27:29 2026 GMT
Not After : Apr 24 01:27:29 2026 GMT
Subject: CN=69e18c81-9806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f8:8d:ad:6d:5c:4d:de:07:f0:39:6a:69:37:
11:f2:7a:8f:0c:12:e2:1d:9f:bc:98:e8:1c:88:e1:
93:3a:ea:3c:a8:10:0a:51:ac:9f:d0:9d:23:f0:92:
04:0c:20:0c:5f:be:21:a2:ca:0e:57:82:d3:f7:88:
d5:73:97:33:d5:05:69:6d:08:4a:05:5a:28:f6:7e:
a9:31:f6:c9:62:f3:d9:42:57:de:f1:b4:0d:03:ec:
e9:71:f0:ac:0c:0f:45:76:6f:1a:66:e7:dd:f4:71:
09:02:6e:40:78:d4:10:07:7f:2d:77:d1:02:0b:7a:
10:d0:46:0d:4f:6c:5b:13:96:1d:9b:8b:77:2a:ca:
84:30:d7:f1:c6:4d:2f:05:c5:8b:9f:0e:a5:ed:d9:
f0:8e:a0:10:bd:9c:5c:2e:cf:6e:c5:1e:8f:30:3f:
56:24:8c:a8:94:64:b0:28:66:38:4d:25:41:83:39:
b5:b2:9d:18:6e:23:ce:d7:a7:44:b5:dd:52:3a:85:
9c:25:45:ed:17:12:12:9d:d6:d7:ba:58:89:31:de:
f3:8e:e3:d5:29:47:32:16:df:7b:a8:7b:70:b3:7d:
31:98:dd:f6:4a:a7:5a:1a:d5:5d:4f:6c:bf:5c:3f:
d5:6d:b2:f3:50:3a:b0:c1:86:22:4d:1f:f7:bb:3b:
8a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:23:51:21:08:7B:1B:F4:D3:35:CE:03:4B:05:CF:37:60:55:22:1B
X509v3 Authority Key Identifier:
keyid:82:52:34:04:07:69:3F:8B:C7:C1:32:25:3F:40:6C:04:E4:67:76:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:a6:57:b9:07:a1:a1:73:70:1f:46:d3:fe:13:bb:0a:26:f0:
78:d3:e6:6e:63:0e:a2:af:44:c6:5d:6d:97:b1:4e:e7:39:34:
7f:0c:3e:43:bf:ca:92:28:06:a9:d8:32:b6:e1:43:5b:b6:03:
00:0b:77:b4:39:1e:0e:dd:4c:48:5e:97:8c:22:29:a2:58:d0:
a1:d7:6f:6c:aa:8d:28:17:57:88:d7:36:db:21:a9:5a:09:8b:
80:a9:30:36:d4:a3:a2:27:ef:d1:be:86:85:5f:70:b7:80:95:
34:66:9f:f8:76:71:42:3c:f2:26:00:19:ee:94:a1:2b:f1:ec:
15:7c:ac:0f:5d:67:4d:84:2f:59:b2:1c:f8:db:d2:df:29:26:
e6:ec:07:f0:dd:5f:f4:3f:f7:85:82:f6:fd:0a:5d:a3:0b:18:
a6:a8:45:1a:27:3f:c1:2e:c4:ab:4c:c9:23:1f:89:8c:8d:8d:
28:ab:f1:32:d3:4b:9a:16:c8:72:ed:e2:64:47:4d:73:04:05:
d6:9f:e9:3f:9b:3e:7e:ff:f5:dd:52:61:38:6f:b9:e7:6c:74:
76:6c:f5:8d:44:d2:f4:1a:c2:d9:01:89:cf:e8:2e:d5:08:f8:
1f:1a:f7:1b:d6:fe:12:99:f0:38:94:69:c6:10:f4:bc:2a:0a:
f3:24:71:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:24:24 2026 by rpki-client