
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft
File: G7spe8goFmqkl9N8cmW_tgGuA2A.mft (raw, json)
Hash identifier: Fr2F8LFRQbPI/bdMHdt6edzCVWnZUOapAcJ5ifMCYrc=
Subject key identifier: 46:E4:AD:48:33:4C:EA:91:CA:11:62:36:21:01:AD:63:88:AE:E4:2E
Authority key identifier: 1B:BB:29:7B:C8:28:16:6A:A4:97:D3:7C:72:65:BF:B6:01:AE:03:60
Certificate issuer: /CN=A91B49F2/serialNumber=1BBB297BC828166AA497D37C7265BFB601AE0360
Certificate serial: 0EC1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft
Manifest number: 0EB6
Signing time: Sat 28 Feb 2026 17:49:15 +0000
Manifest this update: Sat 28 Feb 2026 17:49:15 +0000
Manifest next update: Sat 07 Mar 2026 17:49:15 +0000
Files and hashes: 1: G7spe8goFmqkl9N8cmW_tgGuA2A.crl (hash: ONEjHJOte/yM4rPeW+zQ84jFfHnr90y/+bq8soAgH7c=)
2: BA0CC7060A3D11EB82ECEA4BC4F9AE02.roa (hash: KLPJPe472S0O1L4BKJwaeNcAQbh5Hn42irMA5av03NQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.crl
rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 17:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3777 (0xec1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B49F2, serialNumber=1BBB297BC828166AA497D37C7265BFB601AE0360
Validity
Not Before: Feb 28 17:49:15 2026 GMT
Not After : Mar 7 17:49:15 2026 GMT
Subject: CN=69a32a9b-a3f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:46:71:63:68:5e:07:92:ef:c1:2a:94:75:0d:
9d:3f:a3:38:c3:4f:8b:44:5d:76:cb:dd:58:6e:da:
71:ce:1f:53:e1:b0:2c:70:ec:3b:86:8f:e1:de:06:
2b:8c:eb:dc:85:78:36:b5:ac:e9:40:71:16:a3:11:
f1:a8:e4:8d:a2:c6:97:0a:1b:28:cf:7f:68:cc:b5:
49:23:ee:c4:fd:fa:8d:bf:24:ce:a3:4c:60:54:ce:
fb:80:42:1a:c1:35:76:9f:73:3a:2c:8a:64:dc:a0:
95:a3:b9:b1:df:73:da:1c:1f:ef:06:26:11:ba:28:
03:9e:cb:7f:5d:e2:31:d2:e6:24:8c:03:96:ba:38:
7c:74:a4:ae:6f:b4:d1:32:a4:47:be:f8:6b:a7:86:
46:33:d8:fc:cd:fc:c7:45:ad:b1:5f:3c:4c:06:43:
09:3d:de:a9:26:69:68:d1:49:ad:8a:fb:ff:7f:25:
90:da:f7:f2:aa:e8:14:da:35:b2:ce:9b:b4:ef:29:
d3:a8:a1:4e:c7:e6:5f:c0:aa:d2:19:d6:a4:c9:0a:
f3:29:38:66:8b:6d:e1:b1:5a:0f:9f:98:d6:6f:59:
e9:a1:40:4f:cb:e0:d3:d0:79:c8:84:9e:e0:b7:f1:
6e:1d:4b:dc:9f:e1:db:ed:32:2c:31:47:af:e7:5e:
93:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E4:AD:48:33:4C:EA:91:CA:11:62:36:21:01:AD:63:88:AE:E4:2E
X509v3 Authority Key Identifier:
keyid:1B:BB:29:7B:C8:28:16:6A:A4:97:D3:7C:72:65:BF:B6:01:AE:03:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:dc:f0:b6:e1:84:a7:08:90:ae:f9:96:d7:30:3e:a0:e7:a6:
67:99:b0:79:5a:e9:13:06:62:5e:b1:df:d2:b0:d6:d3:33:ad:
0d:f9:e2:1e:5d:7b:5e:27:4b:3f:17:07:32:d3:61:7a:9a:f2:
d7:e2:70:bd:7c:7d:3a:12:2c:b4:c6:8c:1b:c9:63:e2:73:cd:
a2:ad:38:e1:ca:9d:fb:a7:2e:30:64:75:b3:7f:46:90:d8:a0:
47:f7:d8:7d:18:1d:03:ea:e8:99:9e:df:3b:db:a3:59:12:d6:
bf:b0:77:2c:ec:44:c0:2c:c3:92:84:4c:63:38:9c:b9:fe:5b:
90:13:fa:5a:6b:8f:f4:d3:fb:2c:3b:85:e4:f6:c7:c5:ea:7c:
8a:22:f7:6a:35:f1:84:93:32:91:b1:75:3d:9c:e6:14:c4:62:
2c:ef:86:ce:40:13:0c:23:af:44:40:37:9d:e0:00:d6:3c:1f:
f4:61:80:31:dd:18:01:32:f0:24:8b:15:9d:96:62:ef:65:fa:
9b:b8:f4:f9:a5:12:88:21:61:89:c6:f7:bb:c4:5d:06:69:46:
04:3a:f5:4c:54:07:5f:53:26:b8:37:66:4a:15:16:09:50:4b:
28:5e:18:a8:e4:42:fa:62:be:31:6c:d1:d9:74:ca:70:fc:33:
69:0a:29:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:27:15 2026 by rpki-client