
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft
File: gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft (raw, json)
Hash identifier: 2escKfAuUA1IuE2tZspJS9bUGgOGquElgsSsQwIqHFg=
Subject key identifier: C2:01:D5:42:9D:9A:4A:1E:49:E1:37:FA:3D:20:DB:33:06:FC:30:93
Authority key identifier: 81:1D:E1:1E:7E:DC:1C:10:76:05:59:EE:B3:9B:FD:66:D6:9A:EA:46
Certificate issuer: /CN=A91E6BEF/serialNumber=811DE11E7EDC1C10760559EEB39BFD66D69AEA46
Certificate serial: 0E2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gR3hHn7cHBB2BVnus5v9Ztaa6kY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft
Manifest number: 0E1E
Signing time: Mon 02 Mar 2026 02:16:00 +0000
Manifest this update: Mon 02 Mar 2026 02:15:59 +0000
Manifest next update: Mon 09 Mar 2026 02:15:59 +0000
Files and hashes: 1: gR3hHn7cHBB2BVnus5v9Ztaa6kY.crl (hash: QJ8JTeNubu1s5vKgINJgOiRmW2NzrS4/pM4tDWkcRj4=)
2: FEBD6C62C4B511E9B7D53A7FC4F9AE02.roa (hash: DD1ADaREQj4FZ7nnow63JObODw7KCChH9CO7F5RCGA8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.crl
rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gR3hHn7cHBB2BVnus5v9Ztaa6kY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:15:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3626 (0xe2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6BEF, serialNumber=811DE11E7EDC1C10760559EEB39BFD66D69AEA46
Validity
Not Before: Mar 2 02:15:59 2026 GMT
Not After : Mar 9 02:15:59 2026 GMT
Subject: CN=69a4f2e0-788c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cc:5a:4e:ba:2d:81:3a:bb:02:79:a2:e2:41:
6c:8a:c8:c2:30:55:f5:20:93:f4:ed:b6:22:8d:44:
56:e4:a7:ff:ce:61:c9:01:ef:18:bf:ef:62:1a:8a:
08:c6:e6:ce:ce:d9:0f:b0:a2:01:49:87:30:3d:cf:
26:cd:0a:da:02:a3:66:78:0c:84:4e:8a:9a:b8:16:
ca:59:23:6e:e0:dd:03:f7:25:10:d4:88:75:dd:c3:
f3:ab:23:df:21:31:1d:62:d3:b1:7c:e2:71:e5:28:
87:eb:09:1e:9f:74:15:ca:b4:7f:db:3c:fe:a2:0f:
33:74:81:9e:da:52:e6:e2:b8:b1:56:a2:02:a8:0f:
c5:80:06:99:5e:11:12:bb:3c:31:cb:5e:a3:57:6f:
a0:40:2b:e7:7b:44:d6:ca:9f:f3:93:e7:bf:a5:1d:
26:33:00:3e:d4:aa:34:fa:34:b2:dc:ec:c9:68:2b:
ec:a2:57:21:d9:16:3c:1b:f3:e8:50:a1:6b:37:4b:
73:2c:96:ff:8b:e1:f6:82:ea:24:44:21:48:ef:ad:
68:95:26:49:8d:41:c2:e7:d5:68:6a:d4:76:4c:54:
64:40:df:cf:ad:ce:e3:9d:5e:7a:2e:6d:95:f2:65:
33:16:1f:4c:41:73:31:03:ae:cf:d5:7d:6c:8a:07:
aa:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:01:D5:42:9D:9A:4A:1E:49:E1:37:FA:3D:20:DB:33:06:FC:30:93
X509v3 Authority Key Identifier:
keyid:81:1D:E1:1E:7E:DC:1C:10:76:05:59:EE:B3:9B:FD:66:D6:9A:EA:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gR3hHn7cHBB2BVnus5v9Ztaa6kY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:45:a5:5c:cd:72:53:73:24:cf:dd:8b:4a:32:1d:fb:4e:48:
6d:05:63:4c:04:9f:8c:c4:74:3d:b9:35:d3:27:3d:38:42:70:
29:7f:ad:1d:f5:ff:e5:68:56:06:54:9c:81:89:e9:18:c8:49:
42:ee:fc:d3:5d:bf:53:e5:95:f2:c3:26:99:bc:5b:8f:05:61:
57:b3:38:d2:04:68:fb:bd:c9:3b:16:78:62:2a:33:4c:6a:89:
2c:d2:97:8d:db:1f:2f:0b:75:b8:ba:f5:36:73:3e:d1:31:f9:
bd:a5:b2:a5:1e:df:8a:31:5c:2f:f6:36:65:70:07:1b:f7:b7:
16:2b:bc:ac:06:1b:93:5f:99:93:61:99:af:22:56:06:80:7a:
0f:e8:f4:6a:70:bf:ca:a0:61:6e:18:f1:db:5b:1c:bc:79:2e:
ca:5e:b9:0b:c5:13:17:3d:d1:c2:d7:31:32:31:dd:a1:86:8a:
a5:90:b6:c1:8d:1f:3d:a2:b0:a4:83:ca:30:78:9a:80:84:35:
21:7f:8e:03:42:1c:9b:64:16:01:c4:f2:2d:92:c7:ba:c5:3b:
ac:72:23:72:be:86:dc:d2:9c:68:cf:ad:19:d6:6b:e8:bc:a8:
3b:06:a5:71:ea:0c:bb:8c:93:e5:f8:64:8e:0c:5e:5a:de:66:
75:62:ce:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:16:44 2026 by rpki-client