
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft
File: g1GgqJRYpHQmpXCgKQH45lQuguI.mft (raw, json)
Hash identifier: ynsCFRM6hT3CILvPFzQYR77HfEKHMPkqDFYdhZxYKiw=
Subject key identifier: 37:2F:CC:5E:0A:CF:D2:96:62:86:4B:17:47:8B:1D:D0:64:52:F5:F3
Authority key identifier: 83:51:A0:A8:94:58:A4:74:26:A5:70:A0:29:01:F8:E6:54:2E:82:E2
Certificate issuer: /CN=A91B7D3D/serialNumber=8351A0A89458A47426A570A02901F8E6542E82E2
Certificate serial: 04DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft
Manifest number: 04C5
Signing time: Mon 02 Mar 2026 01:30:07 +0000
Manifest this update: Mon 02 Mar 2026 01:30:05 +0000
Manifest next update: Mon 09 Mar 2026 01:30:05 +0000
Files and hashes: 1: g1GgqJRYpHQmpXCgKQH45lQuguI.crl (hash: YlKV+1yKtlkwsvueyqL/4WBCNgqIuWPi9ibmb4BuLvg=)
2: D3E15ECEA1E611EDABFD7D7FC4F9AE02.roa (hash: hWu9qpbg14kuqFs4y0Y3TECEDMGUbIKXFHrFlEBJcKs=)
3: D516EA2AA1E611EDABFD7D7FC4F9AE02.roa (hash: d155T6r7zPawfippoFizBzUuXPCytQbBH2+16a7a1yQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.crl
rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1242 (0x4da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7D3D, serialNumber=8351A0A89458A47426A570A02901F8E6542E82E2
Validity
Not Before: Mar 2 01:30:05 2026 GMT
Not After : Mar 9 01:30:05 2026 GMT
Subject: CN=69a4e81f-eee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:71:bd:6e:57:48:31:69:7c:8f:29:61:94:29:
42:64:bd:a0:7a:15:29:1b:79:e5:9e:67:1a:db:0c:
0f:a1:ef:f3:3e:2d:05:3a:51:e6:8e:a5:6a:4e:45:
06:c5:2e:c9:16:ac:f3:ff:b4:bc:dc:ad:b9:89:a7:
fb:1b:06:86:40:81:c2:17:9f:90:2a:b7:ec:7b:43:
e3:ff:88:2c:b3:06:56:5c:b1:e3:7e:ec:94:ae:6c:
12:83:e7:af:9f:65:2d:ff:8a:69:b3:b1:21:b5:14:
47:43:50:41:43:a4:b7:da:b9:e7:64:5d:66:f2:72:
63:a6:64:5a:61:4f:43:54:de:e3:52:83:9b:6b:8f:
50:e5:90:38:c1:ab:0a:69:a2:3b:fd:6e:67:64:47:
9b:6f:ed:83:ce:74:f1:65:c3:4b:ce:a2:b3:a8:2b:
1e:85:83:96:b6:f8:63:3d:88:e0:23:47:d4:75:30:
cd:a9:2e:bc:66:74:5e:73:d0:b6:5a:c1:19:b7:e7:
86:be:f7:37:d1:94:f8:64:ce:f7:54:4b:2a:cb:80:
dd:c9:96:ad:15:d2:61:2a:78:78:ca:12:d2:b6:8c:
db:0c:c8:8a:bc:c5:1f:85:53:02:9f:44:cd:29:64:
dc:fc:7f:a7:18:fb:c7:70:7c:ed:ca:6e:1b:5c:a4:
4f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:2F:CC:5E:0A:CF:D2:96:62:86:4B:17:47:8B:1D:D0:64:52:F5:F3
X509v3 Authority Key Identifier:
keyid:83:51:A0:A8:94:58:A4:74:26:A5:70:A0:29:01:F8:E6:54:2E:82:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:31:ed:c1:59:9f:34:15:ad:06:ec:ff:59:91:9c:e4:ee:97:
cf:04:13:66:97:16:f1:4c:53:13:3c:d0:24:60:bc:a8:aa:2f:
60:08:13:6d:c5:21:dd:53:72:ac:b7:df:86:fa:2e:e0:6a:24:
fb:d6:24:9a:4f:6d:78:2c:15:a8:d1:b2:c2:dd:9d:2f:07:19:
17:ad:6a:3f:36:de:02:15:6c:c7:7e:e1:2a:b6:cc:5d:af:27:
80:4d:e3:3b:eb:ef:02:94:2f:4d:18:99:18:de:1b:fd:d0:05:
9d:0d:94:33:c2:ac:22:5a:86:71:e3:dd:34:5a:f4:2a:d8:c8:
58:ad:bb:c9:05:ae:aa:e4:49:c6:f0:36:bf:72:81:62:63:8b:
7c:62:37:15:a5:69:2c:48:45:cd:2a:32:e0:c0:0b:a4:27:a3:
37:08:1c:47:a8:f8:73:75:19:83:d5:ad:47:24:e8:a8:41:07:
4d:8b:1d:a7:55:8d:2f:68:f2:9b:52:57:e3:58:11:49:2e:4f:
cc:31:16:31:df:63:0f:ef:52:c2:d2:cf:92:d7:c8:2d:f1:68:
7a:47:76:60:bb:fe:e4:36:6b:f0:20:70:9e:bf:82:f7:13:35:
53:71:6b:f3:19:9e:75:e5:23:00:eb:3a:df:0a:ac:d8:0e:0c:
07:62:03:04
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBNowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjdEM0QxMTAvBgNVBAUTKDgzNTFBMEE4OTQ1OEE0NzQyNkE1NzBBMDI5MDFGOEU2
NTQyRTgyRTIwHhcNMjYwMzAyMDEzMDA1WhcNMjYwMzA5MDEzMDA1WjAYMRYwFAYD
VQQDEw02OWE0ZTgxZi1lZWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp3G9bldIMWl8jylhlClCZL2gehUpG3nlnmca2wwPoe/zPi0FOlHmjqVqTkUG
xS7JFqzz/7S83K25iaf7GwaGQIHCF5+QKrfse0Pj/4gsswZWXLHjfuyUrmwSg+ev
n2Ut/4pps7EhtRRHQ1BBQ6S32rnnZF1m8nJjpmRaYU9DVN7jUoOba49Q5ZA4wasK
aaI7/W5nZEebb+2DznTxZcNLzqKzqCsehYOWtvhjPYjgI0fUdTDNqS68ZnRec9C2
WsEZt+eGvvc30ZT4ZM73VEsqy4DdyZatFdJhKnh4yhLStozbDMiKvMUfhVMCn0TN
KWTc/H+nGPvHcHztym4bXKRPTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDcvzF4K
z9KWYoZLF0eLHdBkUvXzMB8GA1UdIwQYMBaAFINRoKiUWKR0JqVwoCkB+OZULoLi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0QzRC8yMzNDMEI0NjYz
QkMxMUVDOEI4QzgzMkFDNEY5QUUwMi9nMUdncUpSWXBIUW1wWENnS1FINDVsUXVn
dUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2cxR2dxSlJZcEhRbXBYQ2dLUUg0NWxRdWd1SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
N0QzRC8yMzNDMEI0NjYzQkMxMUVDOEI4QzgzMkFDNEY5QUUwMi9nMUdncUpSWXBI
UW1wWENnS1FINDVsUXVndUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPjHtwVmfNBWtBuz/WZGc5O6XzwQTZpcW8UxTEzzQJGC8qKovYAgTbcUh3VNy
rLffhvou4Gok+9Ykmk9teCwVqNGywt2dLwcZF61qPzbeAhVsx37hKrbMXa8ngE3j
O+vvApQvTRiZGN4b/dAFnQ2UM8KsIlqGcePdNFr0KtjIWK27yQWuquRJxvA2v3KB
YmOLfGI3FaVpLEhFzSoy4MALpCejNwgcR6j4c3UZg9WtRyToqEEHTYsdp1WNL2jy
m1JX41gRSS5PzDEWMd9jD+9SwtLPktfILfFoekd2YLv+5DZr8CBwnr+C9xM1U3Fr
8xmedeUjAOs63wqs2A4MB2IDBA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:54:41 2026 by rpki-client