
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft
File: GJZ9zbckqEpxcR5niqsdLnIhXWw.mft (raw, json)
Hash identifier: eK41QINX/DNy20+apkmXTbrBGeRM47kwsbGXLC+pFBk=
Subject key identifier: A2:D0:F9:C2:10:F1:AA:79:9B:62:04:97:7C:40:71:65:23:05:3B:F4
Authority key identifier: 18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C
Certificate issuer: /CN=A91D243F/serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C
Certificate serial: F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft
Manifest number: CB
Signing time: Fri 17 Apr 2026 06:41:28 +0000
Manifest this update: Fri 17 Apr 2026 06:41:27 +0000
Manifest next update: Fri 24 Apr 2026 06:41:27 +0000
Files and hashes: 1: GJZ9zbckqEpxcR5niqsdLnIhXWw.crl (hash: vzCjZplO6/HeZaUEjDuJOK7XvFyeuefhKGZftC6WqJs=)
2: 5E6EBAF64D0611F09396603CC4F9AE02.roa (hash: EQ/dGxeAiZ6vHXkroDIcnJlL4m1F5+KIqXhx9EpVY3I=)
3: 349ACBB2450811F09650FF5FC4F9AE02.roa (hash: wVIVQYayEMOatDoFauwoUEJLMsb5B+2FoO+m1LHPbJc=)
4: 1808A790318411F0BC1DD041C4F9AE02.roa (hash: Yprm848X+Zm8Tq1T0Mdhgazd/B8nteAp3m1HTdOALK4=)
5: 17894A68318411F0BC1DD041C4F9AE02.roa (hash: LAExrJE538PRX43tpAGuI2fnl3to7F90HEFOP88VoQE=)
6: 1879BE8A318411F0BC1DD041C4F9AE02.roa (hash: n9iP0WPrNjOJsc8gp31zfQ/gYNuAttaaJx8o5oGeAlU=)
7: 372E72941F7811F0AC4FFF82C4F9AE02.roa (hash: aIPk2IIOdSh9CObI9EP0QJCswO68I2tnkEvU/YLg9Zk=)
8: 6896A446318411F0BBC4F91DC4F9AE02.roa (hash: MfzN1k54/wkCiAendoymZC3ZEWqOCUIUy5Y1tmrtH+A=)
9: 37B448241F7811F0AC4FFF82C4F9AE02.roa (hash: KXmFtf/aIxVULwWU2AV8/gJ5ecdsYrZWDPGXWWMJwLA=)
10: 3408F1BA450811F09650FF5FC4F9AE02.roa (hash: LgIHG0W8PH+BYBIWZChDxWTeWm+mE0UsFagnNkGmodQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl
rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:41:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 248 (0xf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D243F, serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C
Validity
Not Before: Apr 17 06:41:27 2026 GMT
Not After : Apr 24 06:41:27 2026 GMT
Subject: CN=69e1d618-d06f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:67:b0:27:69:37:60:93:3f:54:12:4b:71:ef:
4e:53:13:61:c3:ce:aa:c5:ac:9b:bf:f3:f9:35:56:
e8:16:a2:43:d1:8c:78:b1:6e:80:53:36:36:2b:70:
5a:7a:15:70:17:3b:9e:1f:af:04:36:e9:1f:4d:51:
cc:62:bd:df:ed:b5:86:d5:f8:03:15:bc:c2:d6:d2:
27:f9:96:af:f8:09:68:76:00:30:2a:72:c4:0a:14:
17:e8:09:aa:77:a1:2c:7b:b0:a7:29:90:e0:cf:ac:
29:ad:6d:e5:22:64:09:e2:f5:b0:9e:e7:f2:f1:03:
bd:c4:7b:91:d5:4f:52:1d:67:ec:3c:30:ad:cd:91:
32:dd:c2:9d:ad:a6:bd:0e:81:60:3d:19:2d:9b:1f:
b6:1e:16:2c:ae:12:01:23:76:7c:7b:99:fb:67:38:
7d:7c:88:ed:d4:dd:8c:e6:4d:f4:f1:8a:e0:e3:d3:
f7:db:38:b5:61:df:5c:9e:1e:45:55:1b:0f:f9:f8:
9b:ef:49:fd:e6:c5:b5:76:67:76:03:5b:23:34:86:
d6:6a:65:3e:4c:2c:4c:1a:6a:7a:1d:fe:94:1c:8b:
47:fb:f2:2b:fe:2a:0d:fc:50:da:79:0e:2f:b6:f9:
b6:d9:51:87:e2:ab:7c:25:d3:46:c7:91:90:fa:e2:
0e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D0:F9:C2:10:F1:AA:79:9B:62:04:97:7C:40:71:65:23:05:3B:F4
X509v3 Authority Key Identifier:
keyid:18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:cd:1e:a4:bd:c9:1d:01:a8:2d:51:b2:f6:26:1c:99:0a:16:
c0:a8:c2:c4:f6:95:7b:c8:10:62:f0:b3:04:af:89:3e:f5:60:
17:cd:b9:46:04:b7:96:b8:ab:31:d1:b0:d2:05:59:75:18:fc:
9e:6e:b1:a7:2e:ad:1b:0e:5d:e5:fc:67:2a:ec:8c:ed:96:ed:
be:66:7c:2c:15:c8:1f:84:dd:21:40:ba:f4:b9:35:cd:7f:c8:
18:f4:5e:5e:33:2d:69:75:36:c2:a9:8c:87:41:09:8e:93:a3:
21:13:89:d6:f2:b2:22:ed:f4:ce:99:6d:5e:d4:96:1d:7e:c6:
46:f2:1f:dd:2f:2f:88:6c:32:57:d2:14:4f:d8:37:3a:ea:34:
a3:0f:c3:f2:47:a5:c6:71:89:a1:a6:d3:91:4a:f5:99:26:37:
b2:6e:86:5d:cc:ce:30:03:65:16:fa:bd:cb:a7:49:fc:d0:65:
d2:73:1f:b8:4b:8f:18:2e:c4:33:1a:58:41:80:d0:21:75:0f:
5c:b0:1f:81:a7:81:a6:ae:63:02:3d:ca:7e:29:12:cb:24:e5:
b9:b1:18:08:c4:2e:6b:6c:7a:84:f8:12:dd:d1:a2:6f:e2:a2:
58:95:f4:de:f8:72:94:bf:e3:0c:dd:74:ff:3c:13:9b:32:4f:
58:a0:ba:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:02:22 2026 by rpki-client