
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.mft
File: gFLXiRiFOIg0vD1ozrIclvdiXmc.mft (raw, json)
Hash identifier: KLFs6+DLRlyAZuEQE0o79+j1zH7LUKHHH+G6+7qHDdk=
Subject key identifier: 23:8D:9F:E6:7E:56:CC:C2:9F:73:B5:14:7D:84:92:BD:7B:40:85:A2
Authority key identifier: 80:52:D7:89:18:85:38:88:34:BC:3D:68:CE:B2:1C:96:F7:62:5E:67
Certificate issuer: /CN=A91CBE89/serialNumber=8052D7891885388834BC3D68CEB21C96F7625E67
Certificate serial: 1EE8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFLXiRiFOIg0vD1ozrIclvdiXmc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.mft
Manifest number: 1EE7
Signing time: Sat 28 Feb 2026 16:03:49 +0000
Manifest this update: Sat 28 Feb 2026 16:03:49 +0000
Manifest next update: Sat 07 Mar 2026 16:03:49 +0000
Files and hashes: 1: gFLXiRiFOIg0vD1ozrIclvdiXmc.crl (hash: hFdSJ0KiQ1JqgR2IEa/S0ROU3fOhMET+sDzIC7IYSNA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.crl
rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFLXiRiFOIg0vD1ozrIclvdiXmc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 16:03:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7912 (0x1ee8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CBE89, serialNumber=8052D7891885388834BC3D68CEB21C96F7625E67
Validity
Not Before: Feb 28 16:03:49 2026 GMT
Not After : Mar 7 16:03:49 2026 GMT
Subject: CN=69a311e5-46bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a3:72:7d:7b:b9:88:7d:fb:2f:cd:61:fb:bd:
a1:51:a9:db:7e:fa:e5:f8:ba:2d:87:e9:dc:3d:af:
cc:e4:fe:3f:7a:ce:a7:67:74:f3:e0:35:ca:be:9c:
7f:c5:f5:52:a7:7e:ed:fe:ba:f6:e6:d9:34:3c:26:
e1:52:4c:c9:37:76:96:bf:1b:92:ff:23:a9:45:97:
45:65:dd:8c:1e:d3:41:bb:49:a8:ea:1e:d9:52:4d:
a3:55:ca:e0:7a:7a:c3:b0:0e:e1:14:84:23:90:d3:
0b:14:cd:4f:f9:b9:45:94:58:24:ae:0c:93:1b:e8:
8f:1f:ac:21:bf:8f:6d:20:ef:68:82:ec:be:d6:d4:
e5:94:e0:ca:04:2b:6b:f7:d7:9c:38:c5:ee:cb:c9:
f3:b7:c9:73:21:ef:88:da:53:16:ab:09:96:86:4f:
3f:59:cc:82:d8:58:74:bf:e7:13:5b:33:41:b5:a2:
39:6e:26:a0:23:e7:d9:eb:3d:15:6a:81:f5:6e:fa:
8a:85:8e:51:40:69:9e:ce:91:1c:ab:4a:72:4e:29:
5a:55:d3:6c:60:a8:54:bf:57:10:1c:b6:60:f1:02:
a0:6e:d6:8e:e6:0b:35:04:57:04:57:dd:00:12:1b:
90:8f:99:1a:b2:70:5f:02:2d:9d:d5:e4:a2:91:29:
c0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:8D:9F:E6:7E:56:CC:C2:9F:73:B5:14:7D:84:92:BD:7B:40:85:A2
X509v3 Authority Key Identifier:
keyid:80:52:D7:89:18:85:38:88:34:BC:3D:68:CE:B2:1C:96:F7:62:5E:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFLXiRiFOIg0vD1ozrIclvdiXmc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:74:02:51:d1:84:34:db:5e:1e:74:ee:73:3c:c7:45:87:89:
d3:45:dc:3c:30:b3:76:0a:42:b3:1c:9f:b6:d3:8d:cc:c6:7d:
10:6c:14:e8:71:bb:0b:b6:74:ec:69:47:86:8d:b2:85:b0:fe:
bf:80:aa:55:3b:b2:31:e3:06:ea:e2:f7:9a:9c:65:bf:a9:bd:
c7:cf:8b:de:f9:29:87:20:db:da:64:40:30:4b:ca:80:d1:bd:
04:16:38:d9:b9:b4:a8:26:ae:4e:c6:6e:73:4a:91:36:7a:bd:
38:98:71:a7:9f:e3:e5:b5:da:32:43:df:ec:2a:37:50:f5:16:
ea:b6:b2:e5:bd:2f:45:5a:25:f7:a8:05:83:c1:8e:43:43:8a:
5c:e7:03:70:e7:65:b3:a4:40:b9:c7:7f:95:41:05:76:e0:77:
7a:da:6f:8e:8f:bb:4e:0d:e1:c2:dc:40:09:46:21:3d:ef:11:
a5:ef:d3:bf:c9:fb:1e:06:ac:ce:e1:5d:88:05:49:7b:cc:74:
ca:9d:0e:ef:f2:48:39:c8:8d:01:1f:e7:ba:a9:77:67:91:db:
e8:2e:d3:0d:8f:88:f5:fe:17:1d:77:ce:54:35:eb:4e:ba:7a:
b0:8a:4a:35:9b:65:9d:68:12:3c:d9:59:9c:9d:35:3c:fe:ff:
a7:d3:cf:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:28:17 2026 by rpki-client