
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
File: G1Zt71944xm_wNFADedV4mSoK7w.mft (raw, json)
Hash identifier: ZJ5NhWrJKir2/2geBUB3ADTb2MCWoNpe4eyv/p+HbDE=
Subject key identifier: 15:00:5F:00:E7:4B:2F:11:AF:3C:E5:61:26:F5:DD:4E:22:23:3D:F3
Authority key identifier: 1B:56:6D:EF:5F:78:E3:19:BF:C0:D1:40:0D:E7:55:E2:64:A8:2B:BC
Certificate issuer: /CN=A91C20AB/serialNumber=1B566DEF5F78E319BFC0D1400DE755E264A82BBC
Certificate serial: 0998
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
Manifest number: 097D
Signing time: Thu 16 Apr 2026 19:57:46 +0000
Manifest this update: Thu 16 Apr 2026 19:57:46 +0000
Manifest next update: Thu 23 Apr 2026 19:57:46 +0000
Files and hashes: 1: G1Zt71944xm_wNFADedV4mSoK7w.crl (hash: 3mp0rEOyTFkTLSWrnb49ago2cPwHMO1EQbpzPMySTB0=)
2: AB659244056211EBAE3DBC4CC4F9AE02.roa (hash: 6SFxnAYtEmDY0FSpqWSl0msvr8nqW/ZhQvTYvJBPZWo=)
3: 28D36892B09411EAA964465EC4F9AE02.roa (hash: uB90XoJd0h+ZsfjSZb2jo0kKEK2zlo/T12QD2KhR6to=)
4: 2979BC38B09411EAA964465EC4F9AE02.roa (hash: 3TgfJcKtVv25yE8b/IOKhDazNbjHxuANTNvhbFUhyMk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.crl
rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2456 (0x998)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C20AB, serialNumber=1B566DEF5F78E319BFC0D1400DE755E264A82BBC
Validity
Not Before: Apr 16 19:57:46 2026 GMT
Not After : Apr 23 19:57:46 2026 GMT
Subject: CN=69e13f3a-0694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:51:54:cd:9d:ce:26:c6:72:33:79:97:9d:a0:
07:49:df:9c:23:77:9a:27:0e:a2:31:83:08:b5:b0:
66:3a:7b:a1:86:90:88:c3:77:f7:21:e6:6c:1a:f5:
83:75:49:9c:60:e0:89:c4:41:e6:98:8b:bb:9c:04:
41:6f:1d:7d:90:1f:30:cf:e2:81:0a:0c:fe:da:e7:
42:dc:a2:54:f2:f0:bf:52:a1:cb:78:77:e8:f2:32:
7f:a1:25:50:75:19:d5:35:b3:cc:82:de:ff:10:de:
fe:48:d5:74:9e:ea:54:39:a4:a0:9a:58:ee:ad:52:
8f:09:7f:2e:f8:d1:be:5c:9c:e7:1f:16:c1:22:5d:
37:1b:8d:0f:ab:a3:36:02:ab:b1:5e:75:cb:69:e0:
5f:23:4e:c9:75:c9:9a:a3:75:e0:3c:d5:5d:8c:86:
71:5a:5a:98:44:d7:81:28:7d:d0:50:0f:30:87:91:
0a:5c:88:56:86:1c:db:1c:1e:6c:4b:f9:bf:d5:92:
83:99:56:83:0f:89:86:eb:b0:27:fe:e5:2c:ca:3a:
53:24:00:b3:67:54:ed:b6:1a:37:06:86:91:91:47:
56:66:f9:03:86:d9:c9:e2:88:0b:c9:94:90:8d:e6:
da:37:ee:98:c7:f1:ab:6c:93:e9:98:10:73:68:86:
f5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:00:5F:00:E7:4B:2F:11:AF:3C:E5:61:26:F5:DD:4E:22:23:3D:F3
X509v3 Authority Key Identifier:
keyid:1B:56:6D:EF:5F:78:E3:19:BF:C0:D1:40:0D:E7:55:E2:64:A8:2B:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:a9:f7:f8:7f:98:ab:33:ee:d9:39:35:74:77:b2:c8:bc:30:
c1:71:a0:10:4d:e6:6c:6b:a6:d7:cd:81:c5:ab:7e:0b:ca:8a:
f4:76:61:dc:6f:86:18:78:51:00:5c:f5:d3:3f:ed:a0:e6:ec:
6d:7d:78:0a:a2:e0:c8:f9:cb:c9:ec:b0:9f:07:86:1c:57:61:
47:f3:c9:1a:54:7b:a2:61:3c:9c:da:55:4c:25:bf:b4:75:60:
68:6b:88:f7:2b:c7:69:3d:e4:92:5a:ab:94:c1:06:15:e0:b3:
e7:47:a5:aa:42:b4:1e:0e:c2:0f:22:ba:a5:5a:ca:a0:63:5d:
92:c8:49:f2:e9:fa:52:be:a9:d4:1a:cd:3a:cc:a8:56:de:ed:
44:46:20:0d:63:00:33:9d:93:bf:03:0a:d2:0c:e0:17:5f:7f:
23:73:77:f0:26:b0:d8:ec:02:43:81:17:59:eb:e8:e9:a1:95:
b1:ef:42:e7:f8:3b:60:83:40:10:69:f3:54:2e:b5:3a:fd:23:
73:c3:7d:a2:cd:15:65:a8:94:3d:ca:ac:d4:86:4c:18:6a:05:
10:db:ce:70:b2:28:57:0a:6d:3b:dd:04:5b:e7:1d:77:57:cf:
b4:e0:7e:6a:f5:25:43:df:fd:44:ba:af:47:7b:45:35:7b:32:
d4:5d:54:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:39:59 2026 by rpki-client