
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft
File: gcJvPY9BNuUZDMehfWr3IkIutm8.mft (raw, json)
Hash identifier: ePV069a1vWZJKQOGkDTqA3fgoE82O/cpzN6LhOolPV8=
Subject key identifier: A8:CB:76:90:CD:F8:0E:3F:3F:B5:E0:EA:B3:9E:F1:DA:5A:84:08:59
Authority key identifier: 81:C2:6F:3D:8F:41:36:E5:19:0C:C7:A1:7D:6A:F7:22:42:2E:B6:6F
Certificate issuer: /CN=A91B8E70/serialNumber=81C26F3D8F4136E5190CC7A17D6AF722422EB66F
Certificate serial: 0102
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft
Manifest number: FE
Signing time: Sun 01 Mar 2026 07:16:47 +0000
Manifest this update: Sun 01 Mar 2026 07:16:47 +0000
Manifest next update: Sun 08 Mar 2026 07:16:47 +0000
Files and hashes: 1: gcJvPY9BNuUZDMehfWr3IkIutm8.crl (hash: zzTw0UxTiXputsms8ywFjW96VjGYCXh5elP00YrjJWM=)
2: 20B2721A955B11EFBF0F5669C4F9AE02.roa (hash: b7PxFokUIXPBGz+iss/nauBD0ImGfyI3acw64tuMWC8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.crl
rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:16:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258 (0x102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8E70, serialNumber=81C26F3D8F4136E5190CC7A17D6AF722422EB66F
Validity
Not Before: Mar 1 07:16:47 2026 GMT
Not After : Mar 8 07:16:47 2026 GMT
Subject: CN=69a3e7df-95e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b1:13:d8:4b:71:33:2a:31:1b:82:e7:c7:6a:
d9:f5:c6:e4:e5:30:64:17:bb:8d:09:d0:0e:48:1b:
f4:31:53:8e:fe:92:b6:e7:fa:53:21:d6:10:da:c6:
68:89:5c:e7:90:0f:bd:bc:d5:99:33:2d:37:a1:6b:
ff:68:4b:d7:a8:a7:f5:30:08:60:26:a9:e1:fc:16:
af:22:de:dc:e3:fd:5d:7a:5c:a1:c3:c2:d9:d8:84:
6b:5a:5f:c2:ce:80:43:fe:07:37:d1:bc:14:52:9d:
08:f4:1c:cc:b0:96:6f:c6:d2:d1:f4:86:68:ac:26:
3e:36:8e:68:3c:17:b9:74:bf:48:2c:ab:cd:34:1e:
23:40:3a:2f:e9:4f:8f:00:e1:4c:25:42:54:c1:1a:
53:33:1c:2e:19:4c:8a:71:0f:fd:66:75:46:05:4d:
be:0d:ec:5f:e0:61:e8:c4:52:87:13:3b:56:bf:8d:
e0:ca:ca:4a:84:b2:ae:4a:63:17:e8:24:f3:e1:d4:
56:4d:d9:0d:7c:a3:37:bb:86:6b:fb:3f:34:a1:89:
fa:4e:03:5e:8f:8f:64:09:1b:ee:96:a7:f5:20:8b:
98:b4:73:f8:54:b7:24:24:37:5f:3e:0c:17:31:5f:
a2:c5:53:1c:3e:e0:53:a8:8b:5f:e3:bd:e5:3c:f1:
bd:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:CB:76:90:CD:F8:0E:3F:3F:B5:E0:EA:B3:9E:F1:DA:5A:84:08:59
X509v3 Authority Key Identifier:
keyid:81:C2:6F:3D:8F:41:36:E5:19:0C:C7:A1:7D:6A:F7:22:42:2E:B6:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e4:8a:a9:b0:88:27:d4:a4:f1:dd:91:9c:73:d0:38:d1:69:94:
a6:93:4d:3d:3b:f8:d4:62:32:a3:3c:ee:dd:1b:9c:40:86:de:
e2:17:72:5c:3a:56:8d:bf:e8:d7:e1:c2:98:70:70:ce:07:1a:
0f:ba:5b:0f:a0:ef:43:ba:2c:35:d3:3f:b7:b9:ea:6a:fd:ae:
69:4e:30:12:f8:93:90:9e:3a:b4:d5:d5:61:fe:16:c8:08:6a:
02:22:0a:48:4d:69:5a:07:bb:43:92:fe:aa:d6:6e:f4:49:01:
f0:57:fc:b5:3a:aa:5b:23:43:3c:03:1b:df:38:94:26:d1:07:
a3:6a:51:af:93:08:00:ed:70:10:1f:e3:b8:71:fc:bc:25:9e:
c7:b5:8f:90:fd:c7:09:bd:17:36:96:af:d0:ae:d0:74:5f:92:
8e:73:db:b7:78:eb:2a:ac:88:38:3d:bf:c9:35:d8:db:de:5e:
0f:c4:82:d4:6b:8f:38:5c:f5:42:ea:81:87:d0:43:34:5f:38:
eb:6d:cc:a7:56:76:27:72:76:56:74:ed:0b:67:4d:83:4c:a0:
ba:72:8a:cd:7b:1c:cb:c0:86:1b:66:28:10:79:71:c6:02:8f:
26:df:06:85:1f:cc:27:b7:56:c6:27:a5:08:a9:b7:d8:15:5d:
7d:46:af:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:51:01 2026 by rpki-client