
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft
File: g1GgqJRYpHQmpXCgKQH45lQuguI.mft (raw, json)
Hash identifier: Lx2JqvNoQbsV/gsPrU/IkwgBx1YKAVaD7JzQJc/K6HA=
Subject key identifier: 0F:26:30:84:E6:4D:24:63:B3:CA:FD:CD:0C:0E:1C:F0:18:2B:73:6F
Authority key identifier: 83:51:A0:A8:94:58:A4:74:26:A5:70:A0:29:01:F8:E6:54:2E:82:E2
Certificate issuer: /CN=A91B7D3D/serialNumber=8351A0A89458A47426A570A02901F8E6542E82E2
Certificate serial: 04D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft
Manifest number: 04C3
Signing time: Sun 01 Mar 2026 00:36:51 +0000
Manifest this update: Sun 01 Mar 2026 00:36:50 +0000
Manifest next update: Sun 08 Mar 2026 00:36:50 +0000
Files and hashes: 1: g1GgqJRYpHQmpXCgKQH45lQuguI.crl (hash: iM5NjuF/hz6Ow4P8bl2qbMUMpWc3PyHKmHfkSPfK4fo=)
2: D516EA2AA1E611EDABFD7D7FC4F9AE02.roa (hash: wbYCGm+1axvE0aS+cKEcLvjURoI0PJE5ThxHAgZI7bw=)
3: D3E15ECEA1E611EDABFD7D7FC4F9AE02.roa (hash: +BYl77h2EHm5f3Sy4khQbwC160GglRJOCrGuYcAO2eM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.crl
rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 00:36:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1236 (0x4d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7D3D, serialNumber=8351A0A89458A47426A570A02901F8E6542E82E2
Validity
Not Before: Mar 1 00:36:50 2026 GMT
Not After : Mar 8 00:36:50 2026 GMT
Subject: CN=69a38a23-2771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8a:78:3e:a0:4a:a9:91:5d:ca:37:7f:4d:78:
cb:96:fe:a6:76:50:0f:74:e2:cb:ad:cf:21:96:e5:
29:13:b5:88:56:74:22:01:81:ee:17:6e:4a:15:1a:
96:ec:e8:8a:3a:06:63:d3:58:26:fd:af:46:47:a7:
0b:dc:c2:52:2b:e6:bc:23:e1:45:5e:76:b8:5a:95:
29:39:c6:3f:99:2f:3b:b4:1d:1e:7a:3f:49:db:41:
7e:87:ef:6a:de:16:97:01:4c:df:38:c0:1a:a0:4d:
88:86:da:5c:64:8d:48:a4:2c:ed:70:55:40:45:dd:
8e:50:b4:f0:70:38:5a:8d:55:9d:e2:bc:60:7b:19:
88:b7:c8:45:2d:5c:46:2a:d9:f6:21:4b:c7:4c:36:
f2:55:8d:b2:45:52:55:88:84:25:97:28:3d:22:51:
53:ff:19:79:56:bd:75:f3:66:1c:2f:c8:15:96:d2:
62:cd:87:79:b4:75:46:91:15:b8:36:bf:8a:7b:03:
70:01:45:40:e3:e3:37:33:d7:ac:79:af:fa:a7:a9:
b4:48:c4:4e:0e:58:f6:b5:8f:00:cb:f4:ab:14:bd:
78:d8:59:9c:f5:9a:21:4c:d1:37:6e:ef:82:4b:97:
e7:ac:56:46:21:6b:3b:09:d6:99:9e:8e:7e:fa:2a:
2a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:26:30:84:E6:4D:24:63:B3:CA:FD:CD:0C:0E:1C:F0:18:2B:73:6F
X509v3 Authority Key Identifier:
keyid:83:51:A0:A8:94:58:A4:74:26:A5:70:A0:29:01:F8:E6:54:2E:82:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:55:70:97:47:60:2d:35:89:d1:f9:c5:a4:7a:2d:38:e7:a7:
5d:b9:37:df:e0:1d:ad:84:0d:18:5c:24:02:15:bb:f8:43:e7:
e3:c4:a0:81:9a:6c:cf:ae:f8:fd:55:fb:36:d1:77:5d:39:88:
95:8c:6e:86:c9:80:ad:29:d7:e9:f8:d8:40:7b:5c:8d:19:12:
f9:09:4b:b6:e7:07:c7:76:0f:7b:3d:33:88:13:5d:3b:2b:38:
03:85:bd:42:19:d3:02:0b:78:77:a5:ec:60:ee:48:13:bd:f8:
00:2b:27:59:1e:ba:d2:c6:bd:f5:fa:70:38:99:29:b1:f5:c9:
2b:d8:47:5b:bf:ca:2d:85:72:82:de:2d:be:98:80:86:a0:cd:
92:44:bd:cc:89:ad:27:7a:c7:04:90:15:b3:ed:4e:f3:18:5d:
be:e9:e1:ed:48:5c:cc:aa:cc:e6:ac:06:be:fb:a8:25:cc:b5:
de:21:d0:e5:f5:34:ea:74:63:22:48:e2:f1:d6:8f:96:12:b2:
d7:9c:2d:90:56:a6:f7:d3:92:aa:4f:97:29:06:ea:0c:26:57:
7d:3a:81:33:09:51:d2:35:aa:99:79:b5:bf:9f:43:fc:29:38:
8c:83:ed:45:3b:bf:6d:f5:f4:6a:e1:77:cc:90:d5:50:d1:60:
f6:a6:97:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:11:43 2026 by rpki-client