
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.mft
File: gHwED6kB5dhpWmU03mbD1qC_vMU.mft (raw, json)
Hash identifier: SaBmPne/oI+PJdYrO7MQ3BKGYhMIyo4Lh+7xBE4ZKQU=
Subject key identifier: A1:03:F9:DA:7C:F3:01:08:69:F3:D9:D7:8D:36:3B:90:64:9F:A1:F4
Authority key identifier: 80:7C:04:0F:A9:01:E5:D8:69:5A:65:34:DE:66:C3:D6:A0:BF:BC:C5
Certificate issuer: /CN=A91BC3F1/serialNumber=807C040FA901E5D8695A6534DE66C3D6A0BFBCC5
Certificate serial: 015A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gHwED6kB5dhpWmU03mbD1qC_vMU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.mft
Manifest number: 0154
Signing time: Sun 01 Mar 2026 06:05:49 +0000
Manifest this update: Sun 01 Mar 2026 06:05:49 +0000
Manifest next update: Sun 08 Mar 2026 06:05:49 +0000
Files and hashes: 1: gHwED6kB5dhpWmU03mbD1qC_vMU.crl (hash: lAmn3NKfHSy0hjcF2+qgfRaJf8Wl7NGHSAqHxbhWwUA=)
2: 7D9F83FE10FA11EFADBBC431C4F9AE02.roa (hash: kRUKk6YhznpQLf70+sbW+4rHruxwNLVLHD+xyjgrv/8=)
3: A697738410FA11EF9A068536C4F9AE02.roa (hash: GgKSSa0DZkr/DMOZ+SWiE+267xJNKIhRXUimhakcIXw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.crl
rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gHwED6kB5dhpWmU03mbD1qC_vMU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 346 (0x15a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC3F1, serialNumber=807C040FA901E5D8695A6534DE66C3D6A0BFBCC5
Validity
Not Before: Mar 1 06:05:49 2026 GMT
Not After : Mar 8 06:05:49 2026 GMT
Subject: CN=69a3d73d-a4d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:90:99:04:8d:4b:4c:19:16:12:1b:87:bf:53:
03:54:c4:1a:3d:d0:d3:e1:77:a4:64:2c:58:f6:df:
04:6c:18:7c:50:f1:0b:fd:57:81:23:aa:63:5a:47:
4e:62:56:8b:e2:75:81:3f:c4:ca:f7:20:e6:87:9b:
ae:24:f5:80:6e:5e:f5:df:ef:9a:30:cc:e8:38:b1:
19:f8:9f:33:67:ae:53:4a:49:b0:80:fa:3b:ae:6c:
7f:9b:c8:7a:3d:4a:43:f0:84:f9:da:5e:a7:03:a4:
4f:97:ee:c5:e6:1e:82:76:0e:c1:6e:f4:00:e0:27:
f1:f5:2b:81:ce:69:06:54:a8:52:9d:75:1e:d8:4b:
b5:55:dc:87:f3:a1:60:db:90:4e:6a:a6:e9:ed:d9:
75:f2:f4:39:6a:54:95:0d:f0:02:47:d8:3b:f6:5d:
4c:f8:2e:cd:b1:6c:3c:d2:08:65:44:dc:26:ea:f4:
42:47:0c:bd:38:b9:1c:4d:a3:65:26:a1:86:56:31:
dc:e2:62:7c:82:f3:40:63:f6:28:0e:c8:8c:9c:db:
ee:30:0f:98:17:87:e4:7c:2a:e3:93:6c:2a:6f:e8:
31:7a:37:cc:60:2e:ae:bd:f5:d9:5c:cf:b5:6a:57:
d6:41:73:7d:75:39:c0:7c:2a:c0:75:2f:37:fa:be:
58:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:03:F9:DA:7C:F3:01:08:69:F3:D9:D7:8D:36:3B:90:64:9F:A1:F4
X509v3 Authority Key Identifier:
keyid:80:7C:04:0F:A9:01:E5:D8:69:5A:65:34:DE:66:C3:D6:A0:BF:BC:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gHwED6kB5dhpWmU03mbD1qC_vMU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:72:dc:2f:97:89:a7:5b:10:6b:80:28:72:fa:1b:be:69:76:
99:cd:10:92:34:27:7f:4a:7a:bd:d9:14:84:9b:e3:42:24:b6:
b0:a2:f8:c0:ce:76:c0:7f:c2:92:89:21:b9:4e:ac:e9:c6:f6:
b9:47:c3:8c:e0:69:61:29:ae:e4:14:eb:55:93:cd:40:00:70:
1b:fb:d8:75:20:7f:df:f3:03:54:30:89:2c:4b:fc:62:ac:40:
9f:3c:50:f6:2b:02:d1:1f:74:11:b8:42:95:bf:ae:b3:50:e8:
08:6e:b0:01:5e:88:a5:fc:d3:9c:ab:45:45:c4:a9:d6:cd:58:
de:f8:14:b5:7f:c4:64:f3:23:d9:d1:cd:6c:12:fd:55:21:c2:
3d:d6:bb:71:cd:6e:81:f1:2f:aa:36:2f:08:d6:bb:40:77:bb:
32:02:9f:44:d6:0b:b7:c8:6a:4d:a6:f5:c6:9d:9d:2c:e4:81:
7b:95:39:f0:31:13:93:d3:9d:49:3f:9e:94:72:7e:3e:0d:68:
58:a1:6b:8c:3d:52:05:f3:a8:ac:4f:79:a3:d7:1f:9d:80:bb:
e9:d3:8b:4b:c0:f3:88:90:2c:dd:64:d1:59:29:c7:3b:9f:77:
84:be:96:53:d5:05:87:d1:5a:c8:33:66:7c:54:71:3f:56:a1:
26:f5:c1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:56:17 2026 by rpki-client