
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.mft
File: gtgYhh3Upw93CNIF5LiehRTKH2w.mft (raw, json)
Hash identifier: +DozRqY+0tLOo2VnEJSI0E7S01cP5Rhk3rOL8ls/qc4=
Subject key identifier: 52:F5:6F:EE:8F:4B:53:3D:CE:FE:56:EA:5B:47:D3:C8:ED:B2:F5:CA
Authority key identifier: 82:D8:18:86:1D:D4:A7:0F:77:08:D2:05:E4:B8:9E:85:14:CA:1F:6C
Certificate issuer: /CN=A91C9A8D/serialNumber=82D818861DD4A70F7708D205E4B89E8514CA1F6C
Certificate serial: D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gtgYhh3Upw93CNIF5LiehRTKH2w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.mft
Manifest number: 053B
Signing time: Sun 01 Mar 2026 22:42:28 +0000
Manifest this update: Sun 01 Mar 2026 22:42:27 +0000
Manifest next update: Sun 08 Mar 2026 22:42:27 +0000
Files and hashes: 1: gtgYhh3Upw93CNIF5LiehRTKH2w.crl (hash: fDEuwFGiqDfME/GmnA9B0w/mo+nLyGKzy0UQD4dqyY4=)
2: D2A57AD8DDF111EF969ABC1CC4F9AE02.roa (hash: O1MkwGdKDfVHdsOhHQrlU/aFTqc21EnEwMBW12Asebg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.crl
rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gtgYhh3Upw93CNIF5LiehRTKH2w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:42:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 208 (0xd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9A8D, serialNumber=82D818861DD4A70F7708D205E4B89E8514CA1F6C
Validity
Not Before: Mar 1 22:42:27 2026 GMT
Not After : Mar 8 22:42:27 2026 GMT
Subject: CN=69a4c0d3-ced7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f5:86:1c:49:33:30:45:e5:15:8c:29:1d:c0:
90:a1:bd:b3:6e:11:05:6f:61:3d:bd:2a:68:31:8a:
ee:4e:f3:e1:4e:d7:0f:4b:61:98:57:25:43:88:56:
83:7e:e6:97:6a:9b:d3:78:d3:1d:97:e3:32:47:1a:
8f:d5:3e:87:bd:84:75:df:35:ac:56:49:58:27:4d:
e9:61:ff:25:f5:49:0a:5f:bb:58:db:fb:e2:48:c2:
bf:df:72:57:ab:db:3b:06:a5:46:85:a9:10:e5:24:
32:90:01:4b:4a:eb:d5:b4:93:d1:66:e6:0d:2e:1e:
86:2a:5b:27:00:c4:a8:69:70:0b:b1:b2:f6:57:bc:
40:04:c0:9f:d0:aa:58:f4:c8:6c:27:7d:f3:fd:42:
ba:98:88:ce:ef:27:58:2a:09:4c:b9:0e:cc:6d:72:
f3:4c:d5:64:29:8b:52:87:26:f4:e2:cb:43:f2:88:
f3:3d:1c:fa:7d:1b:10:47:19:85:ec:0f:7f:39:38:
b2:e4:53:18:5a:65:49:fb:5a:af:92:04:5f:e3:dd:
c0:b1:d2:30:d9:db:e6:33:d0:25:02:bc:51:ef:52:
c9:25:ea:38:92:a4:7f:a7:d1:3e:02:45:d7:e4:2e:
5a:10:89:df:22:76:e4:d2:d7:63:9f:6a:aa:c8:a9:
e5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F5:6F:EE:8F:4B:53:3D:CE:FE:56:EA:5B:47:D3:C8:ED:B2:F5:CA
X509v3 Authority Key Identifier:
keyid:82:D8:18:86:1D:D4:A7:0F:77:08:D2:05:E4:B8:9E:85:14:CA:1F:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gtgYhh3Upw93CNIF5LiehRTKH2w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:84:7e:9d:30:07:85:e9:4d:27:af:b6:03:d9:35:02:ac:06:
70:9e:85:cb:22:3d:c2:9b:0d:a8:ea:67:dc:d3:56:17:c6:8b:
88:1d:39:ba:cf:20:3b:1b:dd:fb:eb:0d:7e:02:44:e0:8d:13:
6d:73:50:05:6c:84:ca:89:ca:78:29:a4:14:67:f7:61:cd:73:
bd:a6:5f:45:51:5e:4b:aa:21:8a:1c:4d:a4:f3:79:b6:5f:10:
58:1e:40:d1:9c:76:38:b0:c7:a6:e7:5a:0f:e5:c8:c5:67:cc:
8b:3e:84:fe:53:cf:e8:d2:c6:e0:81:ee:8f:58:b4:57:29:65:
e8:8c:1a:f7:4d:a7:1f:ea:9a:eb:d4:e1:1d:f2:95:fb:d1:e2:
4c:ea:b2:f0:3f:e8:1e:b5:4a:8b:00:66:96:63:af:d1:dd:d9:
70:13:85:a7:bb:f2:5d:65:cb:19:b8:2a:11:54:1e:b9:7f:4b:
9e:49:e6:af:30:41:c5:e1:42:59:21:69:07:81:1e:ac:1c:4a:
dd:a4:00:47:f7:d9:cd:56:78:70:98:82:e4:49:72:37:cf:ed:
7c:09:c5:23:8b:7e:87:53:f9:65:18:22:d1:6f:07:a2:16:33:
c2:c0:4f:30:9b:b5:10:f9:f5:1b:87:e0:81:ea:62:fa:b2:a8:
b5:8b:26:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:50:08 2026 by rpki-client