
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft
File: GNdIiJK3LFSvZOLdI4thnIm3LWg.mft (raw, json)
Hash identifier: 6Q2PzIo3hoj4BsP6HCZErnudF7+p7KKLZa5rAluvsCU=
Subject key identifier: FD:2C:5B:8B:F8:B8:99:BC:AF:B4:E5:19:4B:5F:5D:DA:B9:2F:00:AF
Authority key identifier: 18:D7:48:88:92:B7:2C:54:AF:64:E2:DD:23:8B:61:9C:89:B7:2D:68
Certificate issuer: /CN=A91E17BF/serialNumber=18D7488892B72C54AF64E2DD238B619C89B72D68
Certificate serial: 0326
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft
Manifest number: 031D
Signing time: Sun 01 Mar 2026 23:40:14 +0000
Manifest this update: Sun 01 Mar 2026 23:40:11 +0000
Manifest next update: Sun 08 Mar 2026 23:40:11 +0000
Files and hashes: 1: GNdIiJK3LFSvZOLdI4thnIm3LWg.crl (hash: NF4aIaBrv5vn8xQUasZZ5x4zRJ+e8s1KDSi6b3w4eOE=)
2: 83D6FAEE077511EDBD013D37C4F9AE02.roa (hash: XduLMfOTlu5b31dWGwP8GqlgYSkiZV7iaoNBfx7mKds=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.crl
rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 806 (0x326)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E17BF, serialNumber=18D7488892B72C54AF64E2DD238B619C89B72D68
Validity
Not Before: Mar 1 23:40:11 2026 GMT
Not After : Mar 8 23:40:11 2026 GMT
Subject: CN=69a4ce5e-b0b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b1:4e:1e:b8:bc:14:78:d6:d7:1f:a9:19:25:
57:73:2c:61:75:5d:71:02:37:9a:63:9a:32:42:1b:
04:27:b1:6c:1c:8b:32:ed:ef:d1:9f:fb:2d:50:95:
45:48:00:41:2f:6b:63:1c:c2:8a:7c:1f:a8:84:1d:
7f:e6:cf:ad:5d:46:f0:ec:41:e1:70:68:28:02:9f:
ba:6a:2c:68:14:93:5b:4e:40:54:54:f6:c0:38:1f:
69:0f:e8:88:71:73:4f:52:86:35:e9:79:f8:cd:a2:
d7:36:f5:49:73:92:97:03:43:2c:af:fa:2a:c3:d3:
ab:9c:a5:61:64:e0:45:0c:f7:7f:cd:0a:4a:97:64:
19:38:35:15:73:83:3b:f9:79:03:94:48:83:4a:92:
61:83:e1:6b:b6:71:e9:11:93:ff:37:95:96:40:61:
29:18:45:3c:91:a8:71:d2:f6:51:8e:76:08:f9:12:
f1:6f:ca:7c:87:59:2c:d9:75:97:71:fd:7a:bf:68:
54:41:47:68:d1:2f:09:5c:cd:51:c8:a3:45:40:c3:
36:80:c8:f4:54:13:6f:74:98:c4:50:ce:6b:e6:ef:
88:60:54:4a:8e:bb:44:34:14:98:57:48:e5:ca:a0:
b4:ce:5a:70:4e:dd:9d:bb:f5:7c:1e:78:01:99:8d:
3f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:2C:5B:8B:F8:B8:99:BC:AF:B4:E5:19:4B:5F:5D:DA:B9:2F:00:AF
X509v3 Authority Key Identifier:
keyid:18:D7:48:88:92:B7:2C:54:AF:64:E2:DD:23:8B:61:9C:89:B7:2D:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
df:73:d7:73:ce:4d:cf:9f:bd:67:93:ba:78:04:53:44:d3:60:
ba:33:fb:ea:6c:aa:c7:f6:4a:4a:89:85:5c:c7:3b:bb:5e:48:
82:f8:5b:96:58:3b:16:5e:ba:cb:8a:29:61:49:c1:5e:c8:e3:
b4:d5:fb:c3:6b:97:59:22:39:02:f3:8e:df:d7:2b:14:8f:42:
d0:d0:df:15:56:7a:7f:b4:e0:9d:15:33:ab:9f:11:3a:e6:18:
fe:16:d3:08:94:ef:5a:c8:88:27:30:b4:9f:e5:dd:d6:2a:51:
6a:0b:17:2a:c0:81:2e:cd:67:47:d3:be:95:1a:7e:30:36:ef:
c7:f6:81:fb:25:25:29:70:08:bc:de:73:12:40:66:2d:f0:17:
02:a7:c6:9d:36:7d:e9:66:8e:39:61:99:1a:92:3c:5e:14:8f:
7e:de:d1:0b:43:f5:35:38:b5:d7:8c:93:b1:b5:66:cb:bf:5f:
23:62:66:bf:36:1f:a9:a9:86:57:48:d3:29:bf:59:32:01:c9:
22:26:85:d9:7b:71:a7:42:f4:5f:c1:11:a1:b1:72:af:b5:ab:
74:4b:60:7d:7c:d8:d5:ea:db:3e:4d:8e:d0:70:78:1b:9b:a9:
22:60:ff:c5:65:03:f6:68:2f:04:5d:d8:ba:f2:c4:a5:56:a5:
33:43:d3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:34:31 2026 by rpki-client