
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft
File: _GiPuVzFIF4D5wpgXJlMXUlaszI.mft (raw, json)
Hash identifier: Of5WbSluE7HxEkMaHIy06DlvNvemQh+cFMopQfoMDZ4=
Subject key identifier: DD:3B:2C:45:96:90:3A:85:99:48:C4:28:33:14:92:7A:3B:72:CF:FB
Authority key identifier: FC:68:8F:B9:5C:C5:20:5E:03:E7:0A:60:5C:99:4C:5D:49:5A:B3:32
Certificate issuer: /CN=A91CFD43/serialNumber=FC688FB95CC5205E03E70A605C994C5D495AB332
Certificate serial: 03A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GiPuVzFIF4D5wpgXJlMXUlaszI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft
Manifest number: 039D
Signing time: Fri 17 Apr 2026 00:39:32 +0000
Manifest this update: Fri 17 Apr 2026 00:39:31 +0000
Manifest next update: Fri 24 Apr 2026 00:39:31 +0000
Files and hashes: 1: _GiPuVzFIF4D5wpgXJlMXUlaszI.crl (hash: SMiD/baWQBGQxHOQHdio4G1AOQC5nRmzzMQLCcOaFfg=)
2: 4E8DA224547711EF9EDD014DC4F9AE02.roa (hash: hEszwjLLlGjAQWr8R8eiMuWITyAjg0iy90PkI3Yb1NY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.crl
rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GiPuVzFIF4D5wpgXJlMXUlaszI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:39:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 931 (0x3a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFD43, serialNumber=FC688FB95CC5205E03E70A605C994C5D495AB332
Validity
Not Before: Apr 17 00:39:31 2026 GMT
Not After : Apr 24 00:39:31 2026 GMT
Subject: CN=69e18144-8d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:90:5b:fc:33:0c:b6:ec:78:20:68:15:63:aa:
ad:6d:f5:bd:a2:21:1c:cc:b9:fa:5c:47:4a:04:0b:
83:d4:b1:5c:71:b4:06:7f:55:2a:7d:50:18:79:32:
36:72:20:1b:80:41:f2:5a:c0:9e:bc:b6:c7:80:e0:
22:8a:c7:f6:dd:6a:48:f2:a2:ef:f1:d0:81:9b:df:
a5:0a:8b:78:51:95:74:01:ee:dd:53:6d:2d:fe:1f:
10:53:f6:bc:28:d5:a1:a8:ee:5c:82:0d:6c:87:86:
ec:cf:ac:62:cf:04:e8:4e:87:5e:97:c4:49:f6:38:
a3:6d:41:66:e8:1d:5e:82:c5:ec:52:02:15:d5:8f:
5f:12:03:d5:38:0c:80:3a:e0:a1:ff:16:1f:23:d2:
98:ed:b6:f9:d3:70:2b:5e:c8:d8:1e:46:67:cc:37:
18:59:b2:ed:54:d8:ec:32:91:d6:60:09:7f:04:c7:
ca:86:2d:77:ad:60:98:2a:7e:a1:fe:c4:34:eb:05:
c3:c7:95:29:35:b1:dc:5a:17:0e:83:2b:3a:61:51:
68:8c:f8:ca:5f:1b:b2:0a:4d:fc:9c:b1:2f:a8:1f:
38:d7:a3:38:f5:24:26:53:7b:63:56:1c:63:fe:90:
2b:fa:6c:60:9b:36:97:cf:fb:19:75:af:f6:54:54:
41:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:3B:2C:45:96:90:3A:85:99:48:C4:28:33:14:92:7A:3B:72:CF:FB
X509v3 Authority Key Identifier:
keyid:FC:68:8F:B9:5C:C5:20:5E:03:E7:0A:60:5C:99:4C:5D:49:5A:B3:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GiPuVzFIF4D5wpgXJlMXUlaszI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:6c:49:da:d2:e7:f6:15:b4:2f:49:71:25:a0:23:46:ee:db:
08:1b:5d:f0:66:8e:f1:33:65:ce:92:63:21:8f:1a:69:b7:a1:
36:07:64:d5:30:be:14:21:be:6f:62:50:75:32:83:a9:7f:47:
01:cb:bf:c0:56:5d:21:af:17:ae:e3:de:0c:d1:fc:91:4f:42:
94:69:53:73:cb:81:eb:d9:45:ae:ef:c2:63:ef:4f:35:8b:f5:
0c:02:2f:90:a4:2e:d8:03:c7:8d:61:ad:9f:b2:43:66:0b:0f:
50:4f:e6:f9:92:6a:34:0f:c7:98:00:48:67:b1:48:95:58:ab:
ae:23:28:09:fc:6a:cd:64:25:ad:ce:22:5f:61:1d:16:e2:bb:
92:99:46:04:93:1a:65:ee:c9:53:64:96:fa:82:5d:ff:66:27:
3a:ac:42:2d:f2:9f:38:70:d1:d6:df:99:e0:88:b2:95:49:10:
7a:89:5d:31:7a:c7:32:b9:96:58:a6:0b:57:a1:1d:77:dd:d7:
6b:7e:7b:47:ba:18:f2:4c:7c:3d:4c:5b:29:a9:03:f4:89:a9:
09:a4:dd:ab:c5:cf:2e:8c:a6:04:a8:c9:61:b8:1d:c6:71:c5:
b0:57:22:81:46:71:49:29:a8:a8:5b:16:db:38:db:26:90:c6:
e4:8c:ae:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:05:37 2026 by rpki-client