
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.mft
File: gkVvIaH33yOGQR-g7REgZPbrw5o.mft (raw, json)
Hash identifier: QrvFn6uTTF8PvIVbbQnvm3gHWl4BvLQf2Gh+vGpa4Iw=
Subject key identifier: 54:19:5F:46:D0:F5:94:06:19:FF:E8:C8:40:CD:18:F1:E6:68:CB:E8
Authority key identifier: 82:45:6F:21:A1:F7:DF:23:86:41:1F:A0:ED:11:20:64:F6:EB:C3:9A
Certificate issuer: /CN=A91E94F0/serialNumber=82456F21A1F7DF2386411FA0ED112064F6EBC39A
Certificate serial: 0461
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gkVvIaH33yOGQR-g7REgZPbrw5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.mft
Manifest number: 045B
Signing time: Sun 01 Mar 2026 00:55:30 +0000
Manifest this update: Sun 01 Mar 2026 00:55:29 +0000
Manifest next update: Sun 08 Mar 2026 00:55:29 +0000
Files and hashes: 1: gkVvIaH33yOGQR-g7REgZPbrw5o.crl (hash: T41q+AAkVxtmhYRWQZFQxpHFO3plrmWlKV1Aa6O6gyw=)
2: F15E709A880611ECAF18133AC4F9AE02.roa (hash: bpLtQ8qLL6l2ZogXhZIDbdT4T6FC+6P3DrjrNo4piak=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.crl
rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gkVvIaH33yOGQR-g7REgZPbrw5o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 00:55:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1121 (0x461)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E94F0, serialNumber=82456F21A1F7DF2386411FA0ED112064F6EBC39A
Validity
Not Before: Mar 1 00:55:29 2026 GMT
Not After : Mar 8 00:55:29 2026 GMT
Subject: CN=69a38e81-ba69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4d:9c:d1:b7:77:42:31:b4:03:27:3c:37:33:
21:2a:cd:e9:c9:88:77:67:c4:31:ca:52:74:de:66:
3b:ad:a5:34:8d:e9:a8:b7:5a:c4:33:38:12:68:a5:
82:ea:e4:f8:75:0a:e5:9c:53:82:f5:74:56:d2:b2:
0a:c0:98:9f:e8:65:30:e7:1f:94:2c:8c:b4:28:bf:
4d:3d:3a:e8:52:b0:d7:ac:ae:fa:41:67:39:1e:cf:
1b:3d:8c:90:02:da:d8:4d:b2:9b:21:78:1b:69:74:
e2:0a:4b:d9:1a:7e:e3:70:66:4f:28:7f:ec:ec:96:
57:2e:4b:4a:6a:e5:f2:20:dd:96:2f:fb:f4:ff:d8:
43:65:b0:98:03:d0:ef:28:b4:3d:6c:13:29:c2:f2:
26:53:b8:9b:51:d2:d7:d1:a0:0a:55:bf:86:11:22:
4e:bb:d8:67:33:e8:81:93:ac:4a:82:31:a3:54:2f:
c6:d6:0b:2c:85:ad:d0:f2:e4:26:07:2a:b5:30:05:
f3:b8:92:d5:f3:a9:96:9a:2f:74:72:b1:c8:dc:25:
8a:4a:75:35:67:b3:94:f4:74:b2:92:e9:12:84:a3:
50:6a:99:ae:5f:7e:f9:8d:41:39:29:e5:13:65:05:
b9:f1:a2:9e:33:6c:8e:58:9a:22:e3:ea:ee:eb:a9:
26:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:19:5F:46:D0:F5:94:06:19:FF:E8:C8:40:CD:18:F1:E6:68:CB:E8
X509v3 Authority Key Identifier:
keyid:82:45:6F:21:A1:F7:DF:23:86:41:1F:A0:ED:11:20:64:F6:EB:C3:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gkVvIaH33yOGQR-g7REgZPbrw5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:b1:82:32:05:3c:5c:d5:36:e7:07:52:aa:b5:3c:c9:f7:53:
95:bc:e6:62:00:93:08:8a:43:a3:5e:56:eb:e4:c4:3a:de:3d:
52:14:1e:57:b6:82:69:f9:8d:66:1d:bb:6c:8c:df:be:e1:7b:
b3:ac:1b:45:f2:db:80:bc:32:71:99:82:e5:3a:e2:4c:51:1a:
a0:f1:fd:49:78:69:c2:4c:9c:3e:04:76:a1:37:a1:1a:5d:ca:
0f:10:db:51:21:00:ea:ea:42:0d:cc:00:83:e3:9d:ad:0f:5a:
4c:44:fc:90:a7:b7:b5:10:96:ac:23:6e:13:b6:e9:80:64:30:
9c:bf:c8:97:bf:c6:7e:43:dc:d4:9c:be:5f:61:18:0d:60:ad:
29:16:9e:83:24:86:ae:47:ba:6d:9d:cf:82:11:57:b4:51:49:
be:8c:0f:fd:4e:ce:61:79:b7:1b:ed:cf:13:fb:2f:9c:d0:01:
25:26:0e:69:c7:b9:f5:e6:80:84:7a:d7:cb:14:06:b1:dc:46:
49:24:bc:5d:ba:d1:e3:62:5e:9d:3a:84:f3:fb:7a:75:2d:6a:
5d:6b:b5:12:6a:cd:78:71:f6:e4:aa:58:24:cf:d3:20:ee:4b:
1d:ea:52:0d:ec:a5:16:49:d7:ae:f0:0f:0b:b8:76:24:35:82:
f3:c7:14:d5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTk0RjAxMTAvBgNVBAUTKDgyNDU2RjIxQTFGN0RGMjM4NjQxMUZBMEVEMTEyMDY0
RjZFQkMzOUEwHhcNMjYwMzAxMDA1NTI5WhcNMjYwMzA4MDA1NTI5WjAYMRYwFAYD
VQQDDA02OWEzOGU4MS1iYTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwE2c0bd3QjG0Ayc8NzMhKs3pyYh3Z8QxylJ03mY7raU0jemot1rEMzgSaKWC
6uT4dQrlnFOC9XRW0rIKwJif6GUw5x+ULIy0KL9NPTroUrDXrK76QWc5Hs8bPYyQ
AtrYTbKbIXgbaXTiCkvZGn7jcGZPKH/s7JZXLktKauXyIN2WL/v0/9hDZbCYA9Dv
KLQ9bBMpwvImU7ibUdLX0aAKVb+GESJOu9hnM+iBk6xKgjGjVC/G1gssha3Q8uQm
Byq1MAXzuJLV86mWmi90crHI3CWKSnU1Z7OU9HSykukShKNQapmuX375jUE5KeUT
ZQW58aKeM2yOWJoi4+ru66kmfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFQZX0bQ
9ZQGGf/oyEDNGPHmaMvoMB8GA1UdIwQYMBaAFIJFbyGh998jhkEfoO0RIGT268Oa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTRGMC9FNEIxQkQzODg4
MDIxMUVDQkYzQzFEMzJDNEY5QUUwMi9na1Z2SWFIMzN5T0dRUi1nN1JFZ1pQYnJ3
NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2drVnZJYUgzM3lPR1FSLWc3UkVnWlBicnc1by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OTRGMC9FNEIxQkQzODg4MDIxMUVDQkYzQzFEMzJDNEY5QUUwMi9na1Z2SWFIMzN5
T0dRUi1nN1JFZ1pQYnJ3NW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAV7GCMgU8XNU25wdSqrU8yfdTlbzmYgCTCIpDo15W6+TEOt49UhQeV7aCafmN
Zh27bIzfvuF7s6wbRfLbgLwycZmC5TriTFEaoPH9SXhpwkycPgR2oTehGl3KDxDb
USEA6upCDcwAg+OdrQ9aTET8kKe3tRCWrCNuE7bpgGQwnL/Il7/GfkPc1Jy+X2EY
DWCtKRaegySGrke6bZ3PghFXtFFJvowP/U7OYXm3G+3PE/svnNABJSYOace59eaA
hHrXyxQGsdxGSSS8XbrR42JenTqE8/t6dS1qXWu1EmrNeHH25KpYJM/TIO5LHepS
DeylFknXrvAPC7h2JDWC88cU1Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:45:05 2026 by rpki-client