
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft
File: GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft (raw, json)
Hash identifier: uxGNbVIPn9bpGolWQ5UBXuOHX9NMPhrncQDsliKVf/k=
Subject key identifier: 31:7E:40:E5:64:79:7C:DC:94:A7:BD:75:D3:63:3E:AE:5A:8C:FB:1F
Authority key identifier: 18:F9:7D:09:8E:4E:BD:06:10:D5:4F:48:D5:B3:E1:AA:74:3A:20:29
Certificate issuer: /CN=A91DCD09/serialNumber=18F97D098E4EBD0610D54F48D5B3E1AA743A2029
Certificate serial: 1ABD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft
Manifest number: 1A92
Signing time: Mon 02 Mar 2026 16:22:52 +0000
Manifest this update: Mon 02 Mar 2026 16:22:52 +0000
Manifest next update: Mon 09 Mar 2026 16:22:52 +0000
Files and hashes: 1: GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl (hash: S/nC21JCB6QsTw8HoOCCL6b2iTjUpZkqJvl2vG8tU3Q=)
2: 9DF7DA5C557C11E7B34BCE81C4F9AE02.roa (hash: QYJCGTrhNobc9om3BoJ26lPH+BId3l/MUNDCYqKgq0Q=)
3: 234205EA327A11E8A1143B79C4F9AE02.roa (hash: +gU0wUPJzdPGvi0Ro7xFlOsQHmLKis/hh0dBME4aong=)
4: 64A7FFE2F74811E8A07B9609C4F9AE02.roa (hash: M9XcsGu+O0Zk52IzM7Z06ElXp8zYwD2w5zBvqMmkl5E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl
rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:22:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6845 (0x1abd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DCD09, serialNumber=18F97D098E4EBD0610D54F48D5B3E1AA743A2029
Validity
Not Before: Mar 2 16:22:52 2026 GMT
Not After : Mar 9 16:22:52 2026 GMT
Subject: CN=69a5b95c-d024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1c:ea:84:dd:17:52:13:a6:57:bd:4f:72:b1:
8d:cb:8c:8b:55:5d:75:c5:28:6e:8b:83:2f:23:24:
d7:4e:8b:1d:80:8d:8c:06:bd:20:78:99:23:ff:3a:
be:52:7e:1b:8e:d4:11:a0:3d:be:68:ad:d6:d2:01:
79:58:a4:40:90:56:2c:91:66:bd:a5:28:6a:7d:4f:
83:1c:76:51:b4:92:f4:82:bd:12:b0:2c:0f:d1:39:
02:13:0e:ba:ab:d3:d7:bd:f3:de:e9:09:5e:80:75:
d9:3d:3d:a3:86:26:82:1f:17:7c:76:23:5f:54:96:
d1:9a:0a:3a:68:80:8a:5a:52:00:4f:80:36:77:54:
30:55:e6:f6:88:0d:ab:20:71:13:64:33:68:47:d3:
f9:fb:82:8f:3e:e3:3d:1c:50:25:33:54:ac:4f:87:
e2:12:60:0f:67:e0:63:d3:44:69:a2:07:f9:9f:a6:
ef:42:b8:55:e9:24:2c:a6:e6:83:ca:7b:d4:3b:ed:
ca:e7:ba:04:6d:37:0f:f6:09:36:9a:ef:fd:0e:65:
98:d8:08:ab:0b:4a:21:5c:6e:9a:ff:4c:3b:96:c3:
c9:81:a7:18:d5:d1:59:be:31:59:32:24:5d:95:27:
22:26:f0:f6:19:65:71:d4:ce:24:f5:87:04:fe:8a:
09:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:7E:40:E5:64:79:7C:DC:94:A7:BD:75:D3:63:3E:AE:5A:8C:FB:1F
X509v3 Authority Key Identifier:
keyid:18:F9:7D:09:8E:4E:BD:06:10:D5:4F:48:D5:B3:E1:AA:74:3A:20:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:c1:f0:af:ce:4c:fe:48:24:ad:33:77:98:41:02:34:5e:6f:
f6:53:72:02:60:3b:c2:5f:eb:31:86:f3:fb:24:b6:47:ba:5b:
10:44:dc:65:b6:ab:e8:86:d2:8f:db:1a:a4:44:9a:e1:4b:e2:
f1:45:05:7b:02:64:8c:d1:a5:d1:ef:89:dc:a2:7d:85:c0:aa:
9a:fe:8d:f6:c9:6d:16:7b:f1:96:ac:87:d5:d1:db:0b:fa:63:
63:4a:76:86:ed:04:65:66:3d:4f:3d:24:7a:1b:10:ce:9a:e6:
06:68:da:b8:9f:df:98:94:13:26:c8:2b:bf:7f:ba:09:08:24:
68:23:66:08:53:c6:f5:a1:06:ac:bd:a9:b9:76:11:77:38:44:
99:2f:85:e5:9b:4b:d6:b3:02:ef:74:45:ea:cd:93:00:3f:c2:
ae:e7:2e:53:e4:23:38:cb:29:7d:b0:e0:74:4b:89:8e:b1:8e:
45:28:1b:9d:af:60:66:8f:40:3f:98:29:53:12:01:52:85:a1:
02:37:04:63:46:ed:f2:76:c0:81:dc:c2:53:aa:27:75:7c:73:
06:7a:98:d2:8c:ba:09:a0:8a:de:b9:78:92:a7:fe:5d:41:0c:
55:00:90:aa:55:96:4e:75:84:a5:d2:45:28:2e:18:b5:ef:75:
1a:d5:ec:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:26:10 2026 by rpki-client