
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft
File: GAee5DmNZxvWR_yoKieU5QowR70.mft (raw, json)
Hash identifier: W7k/R91H2iEP4n7P2kiLrZxW1bgvkX9BuI+4J02n02g=
Subject key identifier: 84:DF:C4:99:9C:18:8E:77:ED:4B:C3:81:32:D8:3C:87:8C:67:14:F8
Authority key identifier: 18:07:9E:E4:39:8D:67:1B:D6:47:FC:A8:2A:27:94:E5:0A:30:47:BD
Certificate issuer: /CN=A91DFBE1/serialNumber=18079EE4398D671BD647FCA82A2794E50A3047BD
Certificate serial: 0ACC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft
Manifest number: 0AC0
Signing time: Mon 02 Mar 2026 00:33:00 +0000
Manifest this update: Mon 02 Mar 2026 00:32:59 +0000
Manifest next update: Mon 09 Mar 2026 00:32:59 +0000
Files and hashes: 1: GAee5DmNZxvWR_yoKieU5QowR70.crl (hash: X7y2kMgEgxEnku7rEC3X7n25dg7OvS3h1svDMwh+4Jo=)
2: F23D65727CAF11ED87752A6BC4F9AE02.roa (hash: QfaWCwe/qZDBNL7SvK9BdlJZP0tZLuQpHfGjUMElff4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.crl
rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:32:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2764 (0xacc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFBE1, serialNumber=18079EE4398D671BD647FCA82A2794E50A3047BD
Validity
Not Before: Mar 2 00:32:59 2026 GMT
Not After : Mar 9 00:32:59 2026 GMT
Subject: CN=69a4dabc-ab7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:19:79:9d:e9:90:2e:04:1c:f8:2e:d6:81:9d:
aa:dd:5a:b4:e2:6d:f0:58:6d:8a:95:31:5f:68:82:
44:e5:ac:c2:a3:0b:41:2c:d4:f5:e5:23:d4:98:e2:
9d:ba:bd:d5:66:3e:e0:ca:c7:40:e4:53:6a:c7:16:
88:73:2a:0d:ad:7b:42:72:91:62:40:21:46:54:5c:
24:c9:3d:80:e6:d6:dd:2f:3c:c8:d0:f9:0f:8b:de:
28:db:3d:63:e1:10:cb:03:f6:6c:80:b6:7b:b5:f0:
17:fc:7c:06:65:51:8d:6a:45:35:ba:15:af:70:4e:
83:7d:ee:1c:6a:06:b4:16:f1:43:9a:d6:cb:85:69:
98:a8:e7:7c:5c:ac:54:62:77:6d:c3:e0:24:1b:f9:
0d:28:12:e7:b2:5c:5a:50:1d:85:58:ef:ad:a9:6d:
8c:b1:ea:35:dd:3e:6c:6b:78:e9:87:28:d7:3a:20:
b8:35:ab:50:2f:25:8a:ec:ab:1b:b7:f6:4c:db:ba:
64:ed:17:4c:21:97:bf:a4:11:4a:34:cb:e0:e6:89:
f5:c0:7b:7d:b0:74:66:c7:d0:67:e7:f0:70:63:a2:
10:30:1f:03:be:75:36:8d:ac:ce:56:12:9e:53:86:
3f:d9:70:9d:de:ef:8b:f3:2d:0a:99:6c:03:cb:4a:
82:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:DF:C4:99:9C:18:8E:77:ED:4B:C3:81:32:D8:3C:87:8C:67:14:F8
X509v3 Authority Key Identifier:
keyid:18:07:9E:E4:39:8D:67:1B:D6:47:FC:A8:2A:27:94:E5:0A:30:47:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:88:ee:56:92:b5:dd:2f:59:40:59:47:cb:be:17:fe:fc:5b:
49:93:a9:3e:08:38:d5:b7:5f:e8:fa:19:46:33:c8:23:8e:24:
04:e8:52:1b:82:b3:d5:bc:fa:b8:6b:6f:06:4c:3b:89:f8:25:
24:09:22:32:d1:e6:ef:cb:b1:04:ec:d2:7c:71:2a:78:c1:18:
39:ff:27:33:bd:52:e7:23:de:5a:92:c0:90:02:02:52:e9:66:
97:19:e5:05:77:8f:d4:c5:4d:01:5c:06:4c:d1:cb:06:96:99:
e1:52:56:73:17:f5:71:59:3c:9d:e0:70:1d:bd:2c:b4:61:b6:
3a:35:2b:1e:56:3d:98:8f:f4:d9:03:44:bd:bf:10:9a:23:39:
d6:d2:d0:f4:1c:21:f7:7a:19:03:2a:3b:a6:a6:d2:32:6e:4c:
45:cc:73:f0:05:cb:6d:61:d4:9e:11:64:1f:db:be:b7:33:8f:
3d:e4:ce:23:4b:9b:56:56:fa:82:1e:fc:43:dc:38:aa:18:d9:
5b:93:2c:e3:b8:08:a2:94:e6:ab:fc:24:50:0f:cd:d5:95:a1:
a4:4a:7d:39:c0:e0:4e:1e:92:11:ef:27:f1:bb:37:57:d4:13:
c4:c1:cc:8e:28:a2:d3:a7:0d:ce:9b:56:f1:ba:20:22:13:d0:
94:15:24:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:33:52 2026 by rpki-client