
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft
File: grTScd4hLgYzXAtF5mUXtQi4NRY.mft (raw, json)
Hash identifier: SXHVXjhuMcS19wde6HC2ODNxqOBrd2ASo1dPDpPHkyY=
Subject key identifier: 57:8D:15:EA:8F:90:44:A1:0A:74:06:C1:F3:5E:9C:25:2E:AB:58:AF
Authority key identifier: 82:B4:D2:71:DE:21:2E:06:33:5C:0B:45:E6:65:17:B5:08:B8:35:16
Certificate issuer: /CN=A91E379F/serialNumber=82B4D271DE212E06335C0B45E66517B508B83516
Certificate serial: 013C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft
Manifest number: 0138
Signing time: Sun 01 Mar 2026 06:27:19 +0000
Manifest this update: Sun 01 Mar 2026 06:27:19 +0000
Manifest next update: Sun 08 Mar 2026 06:27:19 +0000
Files and hashes: 1: grTScd4hLgYzXAtF5mUXtQi4NRY.crl (hash: QrUyGd/M9Bywp7UaAE+YKYUls5hsYpcU5vbYmUSgBRY=)
2: 621428CE3CFB11EFB0BF040BC4F9AE02.roa (hash: CcMzmbCEE24xcvNE3zqONcKn9u4xDYDRcCqHcVACgAs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.crl
rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:27:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 316 (0x13c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E379F, serialNumber=82B4D271DE212E06335C0B45E66517B508B83516
Validity
Not Before: Mar 1 06:27:19 2026 GMT
Not After : Mar 8 06:27:19 2026 GMT
Subject: CN=69a3dc47-b1b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a8:51:b8:48:ac:02:5c:7f:d7:30:b4:13:b2:
a3:87:4b:15:1d:61:ca:3e:4b:75:b7:b5:cf:de:0a:
d5:12:44:36:7f:0c:b9:33:3f:0d:98:01:98:c1:f5:
06:2b:a9:6d:7d:bc:7b:91:b6:67:03:e2:70:23:6b:
37:05:8b:70:c4:23:4f:21:41:e8:c9:54:6c:c0:6e:
19:e2:6f:2c:ee:7e:2f:ae:2b:22:22:e6:3d:74:dc:
b3:ed:9d:70:ee:dc:4a:6e:cc:46:c5:42:40:80:12:
93:f4:a4:3a:ca:95:fb:b6:89:92:a9:5a:50:26:5b:
44:83:6b:28:66:f9:57:37:6b:a3:54:18:d1:aa:77:
20:32:5e:04:4f:83:32:06:7e:00:a9:a3:3d:f1:e5:
33:df:20:71:74:b0:2b:4d:a0:32:06:f5:15:36:e4:
9b:3b:06:0b:97:80:fb:6e:5e:f0:2f:2d:24:dd:99:
a5:71:25:db:a1:c4:c8:94:8d:98:84:9b:69:2a:04:
3f:c2:74:16:e7:1a:dd:61:73:08:0c:6d:05:11:64:
d1:b0:79:c0:f4:4b:91:78:b9:45:8d:ec:78:cf:f0:
56:99:8c:5c:11:65:26:70:17:41:d7:bf:7d:27:19:
1e:ff:ee:15:c1:11:3d:43:a1:f8:80:bb:08:5b:6f:
1a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8D:15:EA:8F:90:44:A1:0A:74:06:C1:F3:5E:9C:25:2E:AB:58:AF
X509v3 Authority Key Identifier:
keyid:82:B4:D2:71:DE:21:2E:06:33:5C:0B:45:E6:65:17:B5:08:B8:35:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:34:73:f6:79:eb:9f:d5:73:8c:67:16:9e:65:95:cd:8c:fb:
d4:dd:77:2a:1d:45:58:34:40:5c:c5:6e:8d:14:57:6c:63:69:
cb:23:86:4b:52:83:75:92:6b:c6:7f:82:ed:3f:31:40:34:06:
9a:19:fd:93:17:ef:86:c7:58:c4:1a:72:3f:7d:a4:b7:7b:a9:
8b:cb:b8:93:e8:14:e7:c3:40:74:e8:af:97:94:68:0c:8a:d5:
78:84:b8:a7:5e:67:22:cb:46:81:84:89:21:46:e3:26:56:c3:
33:54:92:a6:a8:ea:53:f7:03:4a:f7:75:6e:33:f8:44:79:fa:
e7:f3:e7:a5:1c:88:27:ff:c0:6a:bb:a6:33:42:ec:9b:95:ab:
84:80:ab:4a:74:2c:b5:f5:c0:c6:43:19:69:de:23:b8:b7:4a:
4f:4f:ae:62:57:ea:65:e0:5d:44:f7:21:87:fc:fa:f5:70:f3:
d8:3f:62:13:2f:97:3f:a0:94:2b:3a:cd:38:9b:fb:83:7d:4b:
2e:a7:79:ca:cc:43:5a:54:6b:2d:19:0f:f0:04:28:ff:59:9d:
fb:ef:81:bb:b7:d1:50:56:cd:49:e0:37:5d:a2:2b:b3:bd:40:
f4:d3:bc:b6:5c:5e:87:53:c7:fd:3b:1d:08:2a:7b:45:e6:a5:
eb:e5:61:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:36:55 2026 by rpki-client