
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft
File: gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft (raw, json)
Hash identifier: qsYiX4tVQ4Y/zcIiYonMNYmbxoGWVpnQGPgHJj4BU3I=
Subject key identifier: 89:D9:FE:1D:16:A8:EB:B5:A0:A4:7A:1D:E3:6E:A1:8E:BA:3D:3C:83
Authority key identifier: 82:1F:4D:B2:2E:E5:9A:FD:59:3A:7E:68:9E:DA:9F:C9:4B:E5:85:DD
Certificate issuer: /CN=A91C1C49/serialNumber=821F4DB22EE59AFD593A7E689EDA9FC94BE585DD
Certificate serial: 3518
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft
Manifest number: 41B4
Signing time: Sat 28 Feb 2026 15:03:33 +0000
Manifest this update: Sat 28 Feb 2026 15:03:32 +0000
Manifest next update: Sat 07 Mar 2026 15:03:32 +0000
Files and hashes: 1: gh9Nsi7lmv1ZOn5ontqfyUvlhd0.crl (hash: pG9Slx6jZ3/CV4RklXclk4bkA1VHpnYl81ecVsR+wNY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.crl
rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 15:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13592 (0x3518)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1C49, serialNumber=821F4DB22EE59AFD593A7E689EDA9FC94BE585DD
Validity
Not Before: Feb 28 15:03:32 2026 GMT
Not After : Mar 7 15:03:32 2026 GMT
Subject: CN=69a303c5-c8d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2c:b2:29:ae:7c:bd:77:d8:20:3a:1c:a2:22:
b8:01:c5:a4:47:b2:f9:96:53:c5:aa:eb:b1:41:3a:
26:2e:2c:81:03:ae:ec:17:66:84:4a:95:28:45:f4:
27:22:f4:c0:45:e7:83:d1:95:e3:58:67:b8:5f:ea:
88:68:c9:78:06:84:c3:ab:b7:e0:da:77:22:be:33:
32:38:f5:fe:56:cd:15:4d:17:2a:66:fd:83:65:07:
7b:2c:e5:15:dc:b3:1e:62:dc:80:22:ed:7e:ab:65:
d4:5e:5b:f9:0f:17:8f:a7:59:0e:e8:c5:70:fd:28:
22:d5:cc:44:4e:93:d8:50:9e:94:b4:59:6b:02:ee:
15:e8:a8:2b:53:07:73:77:7b:79:32:70:be:8c:c1:
19:65:37:04:20:cf:a8:c6:d5:32:be:92:4b:62:5c:
87:aa:89:7a:da:6b:41:7a:ef:58:14:e1:6d:a9:f8:
d2:f6:be:0a:a5:87:f4:98:79:e8:cf:75:75:f5:22:
28:92:5f:89:18:db:2c:d3:40:8f:05:e8:36:11:5a:
9f:dd:42:bb:45:d5:b1:7b:be:3d:2f:39:b7:96:e6:
cd:a9:47:9b:d3:a1:30:7c:9b:32:ad:51:79:87:fb:
b5:4c:97:a1:33:44:88:a4:73:f1:83:08:b5:b3:77:
b2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D9:FE:1D:16:A8:EB:B5:A0:A4:7A:1D:E3:6E:A1:8E:BA:3D:3C:83
X509v3 Authority Key Identifier:
keyid:82:1F:4D:B2:2E:E5:9A:FD:59:3A:7E:68:9E:DA:9F:C9:4B:E5:85:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:02:72:b7:8c:c3:4b:1d:73:94:f1:22:0e:a8:74:ea:98:45:
f0:fd:ee:f3:63:5e:ce:85:bd:84:8f:2f:72:61:cb:19:ab:25:
7d:63:a4:4e:82:1d:ae:e9:08:b5:45:a8:12:b0:d4:a2:f1:10:
36:17:aa:07:b6:2e:8c:29:9c:c3:a3:e7:54:5a:16:55:37:68:
9e:6f:a1:7b:d9:d3:ff:0b:66:e3:f2:7d:a1:eb:42:6a:d5:98:
29:18:37:fe:2f:65:a3:56:05:b2:ec:52:ca:8d:f8:a4:d8:da:
2a:91:05:8a:e0:a1:ab:5f:b7:bf:91:81:e3:07:24:d5:a3:e4:
66:bf:e5:c2:f4:4a:b5:d5:68:77:7f:4b:8c:bc:ee:ff:06:fc:
40:e3:ae:6b:c5:ad:36:83:2a:f7:92:4b:cf:1c:00:c5:72:aa:
fd:06:c2:93:eb:ae:ea:34:97:46:19:85:88:f7:40:d5:f4:24:
ed:62:51:d5:6d:c5:70:bb:4e:51:80:0e:cf:02:09:ef:f0:4f:
24:6e:f1:9c:54:86:cf:36:9a:fd:b7:ca:51:02:86:bc:dc:9d:
0a:27:ee:73:a0:02:a4:aa:8f:e1:cf:a8:b8:60:d5:88:26:b9:
b5:66:40:73:dd:59:93:3e:f6:69:21:20:cd:e3:3e:ea:b3:b5:
94:c5:e7:16
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNRgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzFDNDkxMTAvBgNVBAUTKDgyMUY0REIyMkVFNTlBRkQ1OTNBN0U2ODlFREE5RkM5
NEJFNTg1REQwHhcNMjYwMjI4MTUwMzMyWhcNMjYwMzA3MTUwMzMyWjAYMRYwFAYD
VQQDDA02OWEzMDNjNS1jOGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsCyyKa58vXfYIDocoiK4AcWkR7L5llPFquuxQTomLiyBA67sF2aESpUoRfQn
IvTAReeD0ZXjWGe4X+qIaMl4BoTDq7fg2ncivjMyOPX+Vs0VTRcqZv2DZQd7LOUV
3LMeYtyAIu1+q2XUXlv5DxePp1kO6MVw/Sgi1cxETpPYUJ6UtFlrAu4V6KgrUwdz
d3t5MnC+jMEZZTcEIM+oxtUyvpJLYlyHqol62mtBeu9YFOFtqfjS9r4KpYf0mHno
z3V19SIokl+JGNss00CPBeg2EVqf3UK7RdWxe749Lzm3lubNqUeb06EwfJsyrVF5
h/u1TJehM0SIpHPxgwi1s3eymwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFInZ/h0W
qOu1oKR6HeNuoY66PTyDMB8GA1UdIwQYMBaAFIIfTbIu5Zr9WTp+aJ7an8lL5YXd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUM0OS9DNDlGNzVGODFE
OUYxMUUyOUVGQkEyOTAwOEIwMkNEMi9naDlOc2k3bG12MVpPbjVvbnRxZnlVdmxo
ZDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2doOU5zaTdsbXYxWk9uNW9udHFmeVV2bGhkMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MUM0OS9DNDlGNzVGODFEOUYxMUUyOUVGQkEyOTAwOEIwMkNEMi9naDlOc2k3bG12
MVpPbjVvbnRxZnlVdmxoZDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaAJyt4zDSx1zlPEiDqh06phF8P3u82NezoW9hI8vcmHLGaslfWOkToIdrukI
tUWoErDUovEQNheqB7YujCmcw6PnVFoWVTdonm+he9nT/wtm4/J9oetCatWYKRg3
/i9lo1YFsuxSyo34pNjaKpEFiuChq1+3v5GB4wck1aPkZr/lwvRKtdVod39LjLzu
/wb8QOOua8WtNoMq95JLzxwAxXKq/QbCk+uu6jSXRhmFiPdA1fQk7WJR1W3FcLtO
UYAOzwIJ7/BPJG7xnFSGzzaa/bfKUQKGvNydCifuc6ACpKqP4c+ouGDViCa5tWZA
c91Zkz72aSEgzeM+6rO1lMXnFg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:16:35 2026 by rpki-client