
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft
File: gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft (raw, json)
Hash identifier: mNQcPYMt/FI6bN7sOu6km0ay9SOVrGp7uEtec93dVKg=
Subject key identifier: C3:44:FC:1A:F6:A9:5B:13:C7:9D:4D:EC:D2:7A:64:83:99:92:C2:0E
Authority key identifier: 80:84:01:72:3C:2E:41:84:56:AF:9A:0F:B2:5F:8C:32:1C:49:70:CB
Certificate issuer: /CN=A91D959F/serialNumber=808401723C2E418456AF9A0FB25F8C321C4970CB
Certificate serial: 0828
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gIQBcjwuQYRWr5oPsl-MMhxJcMs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft
Manifest number: 0820
Signing time: Thu 16 Apr 2026 20:56:29 +0000
Manifest this update: Thu 16 Apr 2026 20:56:29 +0000
Manifest next update: Thu 23 Apr 2026 20:56:29 +0000
Files and hashes: 1: gIQBcjwuQYRWr5oPsl-MMhxJcMs.crl (hash: NTRPvn6SYYA081ju2EbNFy1cTO8E2WdMoa2c3+IoBXc=)
2: F75AEA8A13F111EB950DBC4EC4F9AE02.roa (hash: jOVkHlbZCBgwXHvRYiey/5/5qsAljK9sG8lXCEjLe4U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.crl
rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gIQBcjwuQYRWr5oPsl-MMhxJcMs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:56:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2088 (0x828)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D959F, serialNumber=808401723C2E418456AF9A0FB25F8C321C4970CB
Validity
Not Before: Apr 16 20:56:29 2026 GMT
Not After : Apr 23 20:56:29 2026 GMT
Subject: CN=69e14cfd-7d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:89:6b:ef:fe:58:43:92:39:d6:1b:e3:64:08:
14:d2:d9:a4:33:e6:b8:d1:1c:8a:a3:33:01:a1:dc:
ec:c1:61:ed:93:e3:9b:0b:0f:38:db:54:a1:d4:b6:
5d:34:f0:27:19:89:0b:2e:4f:7e:35:9e:14:4c:46:
88:a5:a3:f9:11:49:27:7c:29:1c:07:05:1c:e8:26:
9e:41:42:e6:ec:a2:2a:14:8c:26:f1:32:02:4d:9a:
c7:46:aa:db:f6:84:c6:e3:a1:1d:31:4c:05:b7:49:
1b:2a:7f:62:73:42:d7:b4:78:cd:cd:88:5c:89:5d:
55:c8:56:d5:7e:06:88:a2:f5:22:9e:34:3f:5f:35:
a1:53:08:ae:8a:5c:f9:2f:45:77:49:f0:08:31:a9:
13:3b:2a:09:7d:2b:1d:f5:85:b5:08:15:06:31:f8:
a8:c8:ee:c3:3a:5c:72:f0:ee:4b:51:03:76:e7:5f:
5c:5a:a6:15:87:4b:d0:47:b1:10:5c:df:c0:0a:89:
09:e1:86:df:a6:29:95:b5:c8:d5:12:eb:36:96:ad:
b3:6b:c5:b4:e5:9a:35:b7:9f:09:19:53:58:06:1d:
9f:38:b2:6f:06:d6:9b:8f:06:68:d7:ee:86:e4:16:
ca:a8:39:d2:ec:3a:73:d8:31:45:5f:0b:3e:a4:6b:
ab:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:44:FC:1A:F6:A9:5B:13:C7:9D:4D:EC:D2:7A:64:83:99:92:C2:0E
X509v3 Authority Key Identifier:
keyid:80:84:01:72:3C:2E:41:84:56:AF:9A:0F:B2:5F:8C:32:1C:49:70:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gIQBcjwuQYRWr5oPsl-MMhxJcMs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:4c:a5:63:00:5c:7b:c4:2c:a9:8c:aa:5a:25:ce:fd:2f:41:
d3:a4:29:d1:ff:ca:91:27:06:ec:24:f6:a1:e8:27:b9:04:29:
ed:49:89:e0:2c:03:72:7b:46:8c:51:61:09:6e:d5:21:a2:91:
fa:6b:91:93:74:ff:44:ca:2c:dc:2d:ea:fb:7a:86:1a:5a:1e:
62:39:bf:6f:be:94:1f:28:57:e5:c7:b0:ad:9b:5c:7b:f2:bb:
c5:b5:39:4a:d4:8c:87:3d:b9:c8:ba:a9:04:b9:c4:70:2d:fe:
a1:9a:8c:49:75:b0:d8:30:b3:b8:a2:e5:57:73:0b:42:4e:ef:
79:73:1a:f7:dc:bb:ae:aa:27:cf:33:9f:cc:97:2b:80:1c:2e:
93:78:b9:48:da:9e:6f:c5:2e:f7:c6:b3:88:77:1e:38:fa:b4:
d4:46:d5:74:27:3a:ad:33:d4:28:3e:aa:2b:5f:dd:fd:83:0c:
56:3a:33:da:f8:45:00:60:b7:a0:f4:0c:12:1a:b9:f7:14:8a:
93:96:32:92:39:08:71:44:dd:ab:a9:d2:ac:f6:8a:8e:d4:43:
d0:40:6d:6f:af:21:20:71:58:65:15:6d:1a:2c:96:23:4f:d4:
15:52:0b:b0:6c:75:38:df:b1:36:0f:ac:a1:80:51:eb:4e:4c:
44:51:df:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:58:12 2026 by rpki-client