
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft
File: GJZ9zbckqEpxcR5niqsdLnIhXWw.mft (raw, json)
Hash identifier: oqTwjvXEADyeC4RBIIjH+9R1X+HsrFSTWGOn/92hRSM=
Subject key identifier: 97:3F:27:3A:B9:3A:6F:68:23:16:69:27:47:17:04:4E:EE:F5:C0:83
Authority key identifier: 18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C
Certificate issuer: /CN=A91D243F/serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C
Certificate serial: C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft
Manifest number: B1
Signing time: Sun 01 Mar 2026 08:32:57 +0000
Manifest this update: Sun 01 Mar 2026 08:32:57 +0000
Manifest next update: Sun 08 Mar 2026 08:32:57 +0000
Files and hashes: 1: GJZ9zbckqEpxcR5niqsdLnIhXWw.crl (hash: T6Klpw9CV/B3c260SKyV4CxMkPRhCLyka8Q2otJaMpw=)
2: 349ACBB2450811F09650FF5FC4F9AE02.roa (hash: yHDrOZAHkb1aNlUdTrbId0x6TGNas51iB5olcDBHB+Q=)
3: 372E72941F7811F0AC4FFF82C4F9AE02.roa (hash: 77gNSThyGJ0AnlBE5SHj9Jhjf0hxCyKERlvCEcqZ/Gg=)
4: 37B448241F7811F0AC4FFF82C4F9AE02.roa (hash: rfQkg7k3FOtxE3QH+1b/dgEb3pjSHYuBHOu/Aw1ktps=)
5: 1879BE8A318411F0BC1DD041C4F9AE02.roa (hash: Z2oCf9VHu+Nlt7KaEbBkyqcl7gO+UQwxVS+M1hIhebk=)
6: 17894A68318411F0BC1DD041C4F9AE02.roa (hash: BtSPkMAc6JmUbVgs04DwYummrrWRw2IMsZrBj4wxrVc=)
7: 1808A790318411F0BC1DD041C4F9AE02.roa (hash: flX3irYKlYgZGHT2kvpQWpKKvTykKg+AN7X91kuuF4c=)
8: 6896A446318411F0BBC4F91DC4F9AE02.roa (hash: Xrg0tE5OWYBtPUZ5NZncP6ifYaxEX/Vp4aRquzOzr2Y=)
9: 3408F1BA450811F09650FF5FC4F9AE02.roa (hash: bCkwnolEga96G4fQjLHTSTCqelRgfcxersU3tEYQQXA=)
10: 5E6EBAF64D0611F09396603CC4F9AE02.roa (hash: T7YSg4O6XdsHdCRu0Ytt2yzH0YgQZroHBRbYY6Lzb10=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl
rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:32:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195 (0xc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D243F, serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C
Validity
Not Before: Mar 1 08:32:57 2026 GMT
Not After : Mar 8 08:32:57 2026 GMT
Subject: CN=69a3f9b9-0a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a5:44:e4:20:6c:03:cd:e4:86:ab:2c:43:d3:
4a:c0:71:26:03:a2:e2:65:98:1d:b5:55:39:b8:82:
5b:f6:7f:d9:fb:86:6e:ef:b3:44:58:08:a5:2c:76:
f8:ff:71:e4:e2:72:61:91:47:52:df:b5:4f:90:24:
b7:90:da:ff:42:b7:77:eb:d4:62:51:18:41:a2:ab:
9c:bb:2c:c5:7e:e5:40:04:fb:39:d6:18:a3:a8:9d:
ae:c6:51:7a:46:73:f3:59:cc:ad:71:54:94:b6:12:
ab:a9:36:ff:30:0b:e4:91:d8:66:83:8f:b6:c4:8f:
75:f7:c1:35:8c:5b:42:f8:b4:35:48:58:ed:e3:9d:
3b:99:f2:9d:1f:20:7d:6a:35:b5:76:b4:cf:a1:cd:
d1:ad:89:a0:b2:55:92:54:28:09:e5:9b:37:00:5a:
b9:94:7e:36:0f:2c:11:08:60:01:ab:f5:71:21:9c:
b0:5a:ad:0e:e7:ee:24:43:b9:3c:74:96:57:8f:33:
8e:65:79:6e:df:33:fd:72:d6:8a:62:7a:dd:f8:d0:
4f:4c:3b:dc:55:fe:31:c4:15:63:e5:c5:58:84:84:
23:46:9a:19:20:ae:ae:11:f6:7a:b6:11:31:9c:c6:
fe:9e:92:a4:72:a8:ee:73:72:ad:ff:22:2b:2e:e2:
95:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:3F:27:3A:B9:3A:6F:68:23:16:69:27:47:17:04:4E:EE:F5:C0:83
X509v3 Authority Key Identifier:
keyid:18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:31:e5:62:80:05:e8:e9:50:39:fb:08:a7:d6:cf:a8:59:91:
1a:c5:67:13:cb:3c:fe:27:b3:d3:18:e8:fe:bc:e1:d2:4d:25:
5f:45:26:e9:68:70:1e:ba:56:9f:90:de:14:7e:c1:00:64:54:
d6:c9:d5:7f:92:6d:e7:0a:c3:19:15:f1:fe:0e:bd:d2:71:e1:
dd:b7:23:3e:44:16:fc:b0:62:e5:8a:eb:8e:9b:d5:ec:4d:c2:
4e:74:0d:3e:0f:a2:25:e7:8b:ce:c2:a4:43:be:41:c4:55:2f:
aa:86:05:d7:c2:e5:9e:76:a0:8d:2d:d1:5f:bc:e5:0e:46:99:
df:8e:7c:1f:fa:85:8f:48:fd:9b:72:3c:33:81:c1:fb:ef:8a:
ec:83:b0:56:8f:4c:c2:7e:44:31:44:0e:fa:c8:c2:fa:47:e4:
6f:f6:b6:f8:ca:d1:d3:08:67:7a:9e:83:9c:27:71:15:09:53:
62:4b:0c:d6:31:32:1c:14:2c:5c:b2:ac:eb:f1:f4:32:fb:2c:
26:c0:0a:98:b8:d0:19:c3:3c:91:46:85:4e:6e:d8:8d:3e:af:
9c:5d:00:4c:d9:bf:14:8a:9b:cc:71:c9:84:46:91:6e:c9:85:
36:dd:37:e3:91:a3:cb:95:25:a7:71:be:c7:34:41:00:ee:e5:
ae:a7:16:4b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDI0M0YxMTAvBgNVBAUTKDE4OTY3RENEQjcyNEE4NEE3MTcxMUU2NzhBQUIxRDJF
NzIyMTVENkMwHhcNMjYwMzAxMDgzMjU3WhcNMjYwMzA4MDgzMjU3WjAYMRYwFAYD
VQQDEw02OWEzZjliOS0wYTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy6VE5CBsA83khqssQ9NKwHEmA6LiZZgdtVU5uIJb9n/Z+4Zu77NEWAilLHb4
/3Hk4nJhkUdS37VPkCS3kNr/Qrd369RiURhBoqucuyzFfuVABPs51hijqJ2uxlF6
RnPzWcytcVSUthKrqTb/MAvkkdhmg4+2xI9198E1jFtC+LQ1SFjt4507mfKdHyB9
ajW1drTPoc3RrYmgslWSVCgJ5Zs3AFq5lH42DywRCGABq/VxIZywWq0O5+4kQ7k8
dJZXjzOOZXlu3zP9ctaKYnrd+NBPTDvcVf4xxBVj5cVYhIQjRpoZIK6uEfZ6thEx
nMb+npKkcqjuc3Kt/yIrLuKVHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJc/Jzq5
Om9oIxZpJ0cXBE7u9cCDMB8GA1UdIwQYMBaAFBiWfc23JKhKcXEeZ4qrHS5yIV1s
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjQzRi9ENjg0RkMyRTFB
OEIxMUYwOUNDMjQ1MzVDNEY5QUUwMi9HSlo5emJja3FFcHhjUjVuaXFzZExuSWhY
V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dKWjl6YmNrcUVweGNSNW5pcXNkTG5JaFhXdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MjQzRi9ENjg0RkMyRTFBOEIxMUYwOUNDMjQ1MzVDNEY5QUUwMi9HSlo5emJja3FF
cHhjUjVuaXFzZExuSWhYV3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmzHlYoAF6OlQOfsIp9bPqFmRGsVnE8s8/iez0xjo/rzh0k0lX0Um6WhwHrpW
n5DeFH7BAGRU1snVf5Jt5wrDGRXx/g690nHh3bcjPkQW/LBi5YrrjpvV7E3CTnQN
Pg+iJeeLzsKkQ75BxFUvqoYF18LlnnagjS3RX7zlDkaZ3458H/qFj0j9m3I8M4HB
+++K7IOwVo9Mwn5EMUQO+sjC+kfkb/a2+MrR0whnep6DnCdxFQlTYksM1jEyHBQs
XLKs6/H0MvssJsAKmLjQGcM8kUaFTm7YjT6vnF0ATNm/FIqbzHHJhEaRbsmFNt03
45Gjy5Ulp3G+xzRBAO7lrqcWSw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:13:09 2026 by rpki-client