
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.mft
File: _GUnKrz-olrSH5XhQm4gZ5zfyG4.mft (raw, json)
Hash identifier: YdfNxxN5fUy3mdYNtt0HkfbZ/qDeZDRYUdz30uz4MMU=
Subject key identifier: 68:15:7A:EE:82:7B:D2:0C:63:DF:89:A9:8A:EF:8E:51:4C:1A:E8:09
Authority key identifier: FC:65:27:2A:BC:FE:A2:5A:D2:1F:95:E1:42:6E:20:67:9C:DF:C8:6E
Certificate issuer: /CN=A91E5FCD/serialNumber=FC65272ABCFEA25AD21F95E1426E20679CDFC86E
Certificate serial: 19ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GUnKrz-olrSH5XhQm4gZ5zfyG4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.mft
Manifest number: 201D
Signing time: Thu 16 Apr 2026 16:18:43 +0000
Manifest this update: Thu 16 Apr 2026 16:18:43 +0000
Manifest next update: Thu 23 Apr 2026 16:18:43 +0000
Files and hashes: 1: _GUnKrz-olrSH5XhQm4gZ5zfyG4.crl (hash: VR+mVszjruIfWW6sb79CKAI2Cl+SjewA3SsHDlMhcAM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.crl
rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GUnKrz-olrSH5XhQm4gZ5zfyG4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6637 (0x19ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5FCD, serialNumber=FC65272ABCFEA25AD21F95E1426E20679CDFC86E
Validity
Not Before: Apr 16 16:18:43 2026 GMT
Not After : Apr 23 16:18:43 2026 GMT
Subject: CN=69e10be3-c5fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7a:7b:f7:8f:38:ab:02:23:9a:39:10:e8:98:
fb:c3:d5:70:a2:95:ea:c5:1a:18:9e:7a:05:15:43:
ab:a8:67:91:2f:ec:c5:24:54:09:2d:18:db:04:de:
ca:2b:12:04:33:fd:f4:0e:87:cc:8a:d9:c6:92:d8:
b7:b6:40:7e:7d:b3:1c:60:e3:d7:c8:3a:d5:8c:12:
62:f1:47:a8:dd:cd:47:e6:d3:a3:6c:68:15:82:c7:
1d:7e:d1:5d:d2:cb:a4:f1:46:f8:4c:d1:05:bd:2b:
0a:cf:82:fa:bb:f1:7d:8c:cf:2a:70:af:3d:c4:5b:
af:f8:75:87:9a:11:97:8b:15:9e:f6:d1:a0:0b:8c:
cf:fd:d8:09:3e:4b:7c:56:3e:6c:54:8a:b6:b0:e7:
38:b6:58:4e:f1:36:4e:4e:6b:04:38:65:71:7b:a5:
48:42:48:dc:e7:43:39:f8:d6:10:97:24:cb:fc:16:
9e:b9:ed:61:6a:db:fd:1d:1a:48:b0:df:7e:29:5f:
02:e9:d5:7f:99:f0:ed:fa:ea:9b:7a:e2:40:ed:22:
fb:80:02:ab:d0:8b:1a:06:be:fd:b7:cd:36:94:87:
f2:95:00:46:39:fa:d1:92:69:a1:0a:49:9b:79:be:
82:48:6f:d4:aa:04:07:26:3c:b0:14:2f:54:52:61:
9b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:15:7A:EE:82:7B:D2:0C:63:DF:89:A9:8A:EF:8E:51:4C:1A:E8:09
X509v3 Authority Key Identifier:
keyid:FC:65:27:2A:BC:FE:A2:5A:D2:1F:95:E1:42:6E:20:67:9C:DF:C8:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GUnKrz-olrSH5XhQm4gZ5zfyG4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:9d:e5:f3:2c:48:1e:e8:12:dc:ce:d5:89:06:ce:76:bf:3f:
78:23:f7:a3:11:7c:38:34:df:5f:b0:1e:2a:f6:74:ac:76:5a:
a0:b0:e4:61:ec:1d:14:06:37:ea:3a:c3:47:07:c0:b5:4f:9a:
1d:b8:de:82:38:15:b4:7c:d3:af:2a:c0:0b:b4:69:d5:ab:94:
6a:5f:39:e0:51:3d:7c:61:f5:bc:8c:bb:03:ae:4f:07:d2:13:
b3:2c:a4:d8:01:77:d9:e1:85:df:fc:8c:41:99:1b:ae:1d:2e:
9c:bb:3e:9b:f5:9e:f7:d0:e0:7e:f4:32:1e:3b:3b:e7:05:17:
41:97:8b:33:de:1a:eb:30:0e:e9:7b:9b:49:67:72:04:d7:8b:
58:43:a8:a0:d4:98:fe:f3:b4:ee:70:8d:e8:df:d7:13:dd:ba:
c7:e1:6e:bb:8d:05:8a:5f:2f:79:86:b4:01:5a:b5:8a:c7:45:
c0:6e:79:98:b9:c5:3a:f1:1b:a9:0d:1c:52:19:79:40:4d:55:
7a:ef:a9:8e:f9:cb:1a:9f:bd:3b:c9:ff:35:59:81:b8:d4:a5:
29:27:d0:2e:4a:a0:b8:8e:2e:40:c8:f3:7b:82:e1:cc:6b:be:
2b:d2:56:68:3c:c8:62:26:78:c5:80:e4:0e:70:2a:c0:c0:51:
83:0c:9e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:28:30 2026 by rpki-client