
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft
File: Gq0AphpkkECrUmoUK1173uWgHL8.mft (raw, json)
Hash identifier: 2RZxHE4uxxxOTzVn/1z2rJrVBue/CkzO3SQ19P0QgBU=
Subject key identifier: F2:E9:68:85:C7:E5:C7:DF:6B:8B:1F:7C:F2:41:FE:F6:31:E6:DF:7F
Authority key identifier: 1A:AD:00:A6:1A:64:90:40:AB:52:6A:14:2B:5D:7B:DE:E5:A0:1C:BF
Certificate issuer: /CN=A91CCE54/serialNumber=1AAD00A61A649040AB526A142B5D7BDEE5A01CBF
Certificate serial: 0631
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft
Manifest number: 0616
Signing time: Sat 28 Feb 2026 23:21:56 +0000
Manifest this update: Sat 28 Feb 2026 23:21:55 +0000
Manifest next update: Sat 07 Mar 2026 23:21:55 +0000
Files and hashes: 1: Gq0AphpkkECrUmoUK1173uWgHL8.crl (hash: lXL8D1b87evtgXsJ2+095HCrZF0JxYVMwi0c4MKCUCo=)
2: 9659D3F6D81111EB8C3ACC5DC4F9AE02.roa (hash: NE5i1McZ5sD2fL9nEgN8GNUMBNGpPRPBv7rzXqPRphw=)
3: B62A6E82D7F511EB82D62F73C4F9AE02.roa (hash: uAy+EH0oOVAkqikgbCloC8mmcK5Ft+q4cyTNy5UrDyI=)
4: B3394AE0D7F511EB82D62F73C4F9AE02.roa (hash: SlHb/v+sm7TxxztSTjArtTh8kIfdevbbO+wHjL8M2no=)
5: 956B1C7AD81111EB8C3ACC5DC4F9AE02.roa (hash: X0T8ND86WJAL5iAS0HvTaodSJ+abJbUeYiv8L6Sgq7A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.crl
rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 23:21:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1585 (0x631)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCE54, serialNumber=1AAD00A61A649040AB526A142B5D7BDEE5A01CBF
Validity
Not Before: Feb 28 23:21:55 2026 GMT
Not After : Mar 7 23:21:55 2026 GMT
Subject: CN=69a37894-e15e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ce:27:2f:aa:8d:a4:45:75:09:fd:52:2c:9d:
8d:fe:b5:1b:62:d0:ca:d9:d1:01:27:fd:f7:39:8f:
f2:fb:81:f8:ba:17:a5:53:f9:9f:d3:21:69:f8:c0:
27:91:b8:f7:c4:f2:e3:46:77:d2:fd:d0:75:45:8c:
14:ee:14:c9:3e:22:a7:b0:a7:33:fa:ea:23:80:68:
d7:bf:72:0c:f6:85:7f:e4:14:37:ed:b0:6d:ad:56:
0a:c7:92:0c:82:57:48:f0:f0:8e:d7:88:ee:78:ab:
62:e7:18:f1:a9:7c:eb:40:51:b9:d3:f8:1e:c5:64:
6c:2f:2e:c8:73:b7:47:47:3e:e7:27:5d:36:ea:dd:
a2:8b:28:02:03:e6:25:c8:c5:77:e1:23:b9:c5:b9:
b0:fc:40:8a:f6:ac:98:e1:20:1f:78:29:39:ba:87:
e4:9b:f2:a5:36:50:5e:9f:e6:c6:cc:4d:44:ff:8c:
68:39:48:9b:ab:e5:ec:68:ea:49:e5:c9:92:3b:20:
5e:e6:77:85:11:b4:c9:ce:e6:14:9a:15:43:6a:f9:
2b:73:f0:ff:83:98:52:61:8d:ff:65:c1:2e:cf:39:
8e:ec:56:57:6a:10:48:0b:0f:3c:42:c7:3c:98:03:
b9:e0:5b:be:b8:c3:1b:f0:ce:b7:59:9a:6e:c9:9b:
2c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E9:68:85:C7:E5:C7:DF:6B:8B:1F:7C:F2:41:FE:F6:31:E6:DF:7F
X509v3 Authority Key Identifier:
keyid:1A:AD:00:A6:1A:64:90:40:AB:52:6A:14:2B:5D:7B:DE:E5:A0:1C:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:21:2c:91:00:8d:bf:76:3f:24:d0:32:13:c6:8b:73:11:4f:
a5:a0:4a:87:e8:68:0c:7e:a5:f3:a0:ba:35:9e:eb:0d:1e:c5:
19:38:5b:03:5c:2d:91:8b:84:72:01:0f:14:a7:33:fc:aa:9c:
de:6e:ae:3f:e9:d4:38:87:33:cb:0d:6c:50:32:ad:5c:f8:93:
e2:1d:90:69:2d:c1:30:23:da:44:29:6c:cd:ab:7d:e5:81:56:
a1:99:1a:e4:5c:47:5f:8f:4e:73:a3:5c:ab:28:39:cf:47:e8:
2d:ff:52:c8:40:0c:a9:5d:36:d7:e1:b1:82:78:aa:fe:85:9d:
f5:cd:4e:a9:5a:d2:cd:f9:56:45:b4:5b:49:9f:f7:29:db:9a:
43:14:94:4f:da:5b:a2:ba:72:e2:fb:8f:e2:de:66:44:d4:8f:
fc:7a:88:5b:7c:58:45:4a:bf:ba:28:15:85:86:73:42:fd:7c:
25:f2:ae:c2:bc:1b:42:35:4d:08:98:4a:44:6d:2f:a6:0f:8b:
2f:28:bb:90:75:40:72:96:98:69:e6:c3:3d:7b:ed:93:78:7c:
38:6c:3a:e1:24:99:e5:7f:db:a3:f2:33:2c:3d:58:ae:fe:12:
36:c2:31:0d:06:1e:de:6f:62:f6:6c:24:ec:96:01:34:1d:1f:
8b:bf:28:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:22:04 2026 by rpki-client