
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft
File: GpfC9HEfe8gC4misZvEQhivleIg.mft (raw, json)
Hash identifier: oACJ/A7vPdePcxXJgcibneq4AaDG/DHVXpgUTpS9ptU=
Subject key identifier: AD:FB:07:CA:64:09:DA:96:6F:1F:83:56:B1:0D:D7:5F:8A:05:BC:5A
Authority key identifier: 1A:97:C2:F4:71:1F:7B:C8:02:E2:68:AC:66:F1:10:86:2B:E5:78:88
Certificate issuer: /CN=A91C2663/serialNumber=1A97C2F4711F7BC802E268AC66F110862BE57888
Certificate serial: 239C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft
Manifest number: 2340
Signing time: Mon 02 Mar 2026 00:52:21 +0000
Manifest this update: Mon 02 Mar 2026 00:52:20 +0000
Manifest next update: Mon 09 Mar 2026 00:52:20 +0000
Files and hashes: 1: GpfC9HEfe8gC4misZvEQhivleIg.crl (hash: b87oHvbd+L87l2bziwg+MGPrYtWZ9EDnld9Y9LMEaSc=)
2: 05596FAEBA1811F080138957C4F9AE02.roa (hash: tyGMd+HN3XNyreUh3joDHlUhGigz8P1uPZWOL8YggfQ=)
3: ECB36EBCA54211F08D0FD466C4F9AE02.roa (hash: Vp655EUq1bYTO4F2LYz3iZOH92f+YMmdmZb/7bsJcaQ=)
4: 32758AB4A54011F0ADC9D13BC4F9AE02.roa (hash: QjFvESci20D4rlZANt8++cDFTKLxTPMJmHxTZ8tiizg=)
5: 55D95690A13811F0BF53567FC4F9AE02.roa (hash: cP2UtQYt9tf5d70dpMhTcvHuru1oQc7Oe7m5QldjiH4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.crl
rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:52:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9116 (0x239c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2663, serialNumber=1A97C2F4711F7BC802E268AC66F110862BE57888
Validity
Not Before: Mar 2 00:52:20 2026 GMT
Not After : Mar 9 00:52:20 2026 GMT
Subject: CN=69a4df45-f8a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c7:ab:fc:ad:7a:d1:6e:ff:77:dd:93:ad:39:
01:9d:eb:fb:1b:ae:ea:4e:7f:39:1a:b3:03:c9:c8:
6b:f1:92:b3:7c:68:99:39:92:d0:52:75:b9:42:d3:
f0:f9:a4:9a:90:43:a6:9f:c7:c1:b1:7c:fc:92:da:
ef:38:43:cf:c4:4e:ab:4a:4a:75:85:b3:f9:17:5b:
4a:7e:fd:2f:60:94:52:18:78:4a:b6:7e:66:40:e2:
7d:40:4e:73:02:5a:3e:eb:4e:ff:c6:80:1d:a8:c3:
dc:e5:ff:12:df:50:44:37:71:d6:b9:e6:a5:0f:5d:
63:5a:ea:7d:a0:18:fa:56:c0:df:32:1f:e6:fd:6f:
97:86:44:a9:95:65:2c:30:8e:8a:1b:0f:d4:a0:be:
6a:9f:ca:96:d9:7a:f9:32:64:54:40:db:12:68:ad:
2f:3f:5c:91:43:26:b4:fc:a7:97:f5:47:05:c0:25:
59:bf:12:83:d2:dd:6f:98:49:5f:a0:c4:1f:cd:47:
eb:b3:0a:ae:6e:de:ba:01:a4:b8:1e:f3:83:4c:9f:
15:bf:fd:01:27:ef:b9:0f:a6:19:16:ce:21:8d:6d:
5a:ff:e2:ab:79:90:16:35:df:d0:de:91:65:b1:7d:
d9:84:b4:08:9e:b5:5a:df:f6:61:79:4c:1e:38:29:
a9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:FB:07:CA:64:09:DA:96:6F:1F:83:56:B1:0D:D7:5F:8A:05:BC:5A
X509v3 Authority Key Identifier:
keyid:1A:97:C2:F4:71:1F:7B:C8:02:E2:68:AC:66:F1:10:86:2B:E5:78:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:67:cf:14:e1:2b:46:99:ef:cf:9e:22:28:23:98:4d:59:e4:
5f:ea:b6:09:84:88:fe:f7:59:82:c8:36:a7:2a:79:a9:fa:69:
df:08:25:8e:cb:75:53:6f:e9:08:8d:b0:a2:6a:19:6b:70:a0:
f0:48:c7:8f:cb:46:ce:80:5b:86:f6:e1:fe:f8:74:8f:cf:f8:
d2:15:a4:cf:8a:65:65:79:50:75:6b:18:f6:14:78:0c:a9:27:
bf:ca:0e:d0:96:a9:64:f8:83:e9:fc:4e:11:11:60:ef:d7:78:
13:69:b3:ac:f6:87:43:ee:79:27:56:08:06:7a:91:7c:9b:62:
61:05:e2:25:e6:a8:67:b5:70:11:c7:2e:4a:be:53:7b:2c:7d:
94:60:c6:ae:30:6a:16:29:ee:f4:91:9e:37:0c:08:80:52:52:
13:93:6c:32:96:ef:08:d8:95:b5:ec:fb:23:6c:5c:24:0c:96:
09:1f:47:8f:71:62:42:7e:15:aa:e0:ae:c6:d1:63:73:33:d8:
82:79:07:d9:3d:5d:6e:df:73:8f:43:48:f8:ca:d3:df:0e:21:
8c:a6:18:b4:ef:e0:8b:21:e9:6c:40:ff:6c:f1:24:ff:f4:f5:
ab:30:d9:4f:70:ff:06:f3:a2:98:a4:80:99:b5:cc:75:1b:6c:
37:03:22:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:03:14 2026 by rpki-client