
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft
File: GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft (raw, json)
Hash identifier: +8kWGGTSTgftc8H5N2vSl1xM3T1rdj6sDuofP154u/Y=
Subject key identifier: 1D:07:85:DA:6B:7E:00:EB:02:22:90:85:8A:BD:0B:E0:74:A1:D2:94
Authority key identifier: 1B:03:6B:FF:87:80:7C:BF:C6:E9:12:36:CB:08:6D:4F:E2:B0:99:3D
Certificate issuer: /CN=A91B0720/serialNumber=1B036BFF87807CBFC6E91236CB086D4FE2B0993D
Certificate serial: 047F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwNr_4eAfL_G6RI2ywhtT-KwmT0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft
Manifest number: 0450
Signing time: Fri 17 Apr 2026 00:16:30 +0000
Manifest this update: Fri 17 Apr 2026 00:16:29 +0000
Manifest next update: Fri 24 Apr 2026 00:16:29 +0000
Files and hashes: 1: GwNr_4eAfL_G6RI2ywhtT-KwmT0.crl (hash: Zj+CvKSjwOhGeHu9q6mc4+6j8lFs0LXcTB1+rAms8Vg=)
2: 3D3FCB5EC8F911EFA0603266C4F9AE02.roa (hash: marPgOXL8N+mZEolgjf6BCSnTAslQuOQxfYiwn9AQDQ=)
3: F0223A56C8F711EFB2542D5FC4F9AE02.roa (hash: K24GaWXpuGSc1Xj5InMQ40A+Qx2+8XHAnL30L+YucdU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.crl
rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwNr_4eAfL_G6RI2ywhtT-KwmT0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:16:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1151 (0x47f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0720, serialNumber=1B036BFF87807CBFC6E91236CB086D4FE2B0993D
Validity
Not Before: Apr 17 00:16:29 2026 GMT
Not After : Apr 24 00:16:29 2026 GMT
Subject: CN=69e17bde-3126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:63:99:67:a1:a6:73:85:f9:50:d1:52:72:89:
32:01:6b:be:02:43:63:7f:eb:f5:d7:0a:6f:3e:c4:
7f:a0:e5:84:26:ba:28:b6:5a:61:2f:b6:1d:9f:bc:
df:4b:7b:ff:9e:8d:99:d9:a8:cd:08:9c:6c:3a:de:
e0:81:c6:58:b2:a1:a1:a6:bd:64:fa:c3:9a:99:de:
1a:97:3c:dc:6c:97:ca:74:5b:f2:41:30:3d:3e:32:
a6:4f:cb:20:81:0c:0a:5d:3d:38:23:a7:15:3f:ea:
4c:4e:5e:2a:bc:94:fa:16:3d:3d:6a:91:ce:c4:07:
69:e2:91:f0:14:46:3c:a1:6e:04:b3:99:cc:ac:7f:
cb:2d:26:3e:03:9c:d7:67:27:dc:a2:eb:76:75:9f:
52:c8:e5:25:fe:e5:13:3b:31:81:f6:8c:88:ae:b4:
84:53:1c:6b:d9:ff:50:c5:80:02:7f:4b:8d:74:2c:
56:33:b1:03:3b:9b:d6:aa:94:7a:82:73:68:bd:70:
98:6a:c2:e4:13:8d:ef:e1:66:ff:64:da:1f:1d:ea:
d1:e2:f3:0b:6f:96:32:72:79:87:db:9f:bd:c3:65:
ed:2f:79:2c:01:8f:b6:bd:72:b5:40:63:b7:4f:89:
1d:62:ff:3d:92:6e:1e:04:0f:09:bf:c0:34:ab:1c:
ee:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:07:85:DA:6B:7E:00:EB:02:22:90:85:8A:BD:0B:E0:74:A1:D2:94
X509v3 Authority Key Identifier:
keyid:1B:03:6B:FF:87:80:7C:BF:C6:E9:12:36:CB:08:6D:4F:E2:B0:99:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwNr_4eAfL_G6RI2ywhtT-KwmT0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:9e:e3:19:0a:cf:f1:42:6d:c9:bc:87:3f:a6:01:f2:fb:6f:
97:48:5f:54:ea:01:46:17:5b:9a:87:fe:cb:77:a9:2f:70:a3:
8b:ad:9d:81:e5:93:dd:d8:85:37:82:d8:02:d2:0b:8c:31:e5:
87:c9:d2:74:1d:59:10:f8:4e:97:65:0b:ca:3d:e6:6d:fd:4d:
5f:86:e2:87:85:b2:f4:f1:f9:56:ca:ef:aa:f3:6b:ad:6c:fd:
a8:10:d0:8d:f3:e2:02:27:5e:6d:9e:bd:e2:32:4d:eb:66:7b:
35:5b:b8:19:f1:d0:ef:c0:5c:5e:16:39:98:28:b6:e6:a4:7e:
15:e2:12:d0:0c:60:b9:91:1f:31:fe:d3:d4:59:5f:b7:98:9e:
11:d7:54:16:cb:93:b9:73:68:87:b1:e7:0b:63:e7:c3:d5:7f:
76:8e:80:36:5c:c6:ef:ac:03:15:a9:e6:3c:bd:87:78:6c:cb:
77:3c:18:2a:7a:ec:2f:45:cb:1b:d1:dd:f7:e8:fe:8a:ce:96:
1c:35:41:e1:22:95:0d:d1:a1:ac:ab:76:b1:f9:44:7b:99:d4:
a5:58:67:53:a2:96:7b:a1:91:53:ba:f7:df:58:16:1d:3b:b8:
a2:31:58:54:63:44:7b:af:53:ef:c0:c9:00:52:28:8d:81:f8:
da:a7:7f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:21:20 2026 by rpki-client