
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.mft
File: 1p-GUNl6UkwplFPMtI13tOZf3yI.mft (raw, json)
Hash identifier: O9zQQFkhgN+H7fJyMOOB2aGodJJoA6p9eplStBGUpZ8=
Subject key identifier: 29:83:8F:08:08:08:3C:E1:40:6B:0F:95:01:71:53:C1:89:BE:83:71
Authority key identifier: D6:9F:86:50:D9:7A:52:4C:29:94:53:CC:B4:8D:77:B4:E6:5F:DF:22
Certificate issuer: /CN=A91F0695/serialNumber=D69F8650D97A524C299453CCB48D77B4E65FDF22
Certificate serial: 01A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1p-GUNl6UkwplFPMtI13tOZf3yI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.mft
Manifest number: 019C
Signing time: Mon 02 Mar 2026 00:57:18 +0000
Manifest this update: Mon 02 Mar 2026 00:57:16 +0000
Manifest next update: Mon 09 Mar 2026 00:57:16 +0000
Files and hashes: 1: 1p-GUNl6UkwplFPMtI13tOZf3yI.crl (hash: GetWgzx1SbYGbSxMv03vLI7TcFr/qCUlWaYRj4bUDrI=)
2: D1054582A0C111EEA54E2F0BC4F9AE02.roa (hash: jklc5FCt+euFYSuGUqrd6cbV/UlBPA4BDg0VukL1DA0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.crl
rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1p-GUNl6UkwplFPMtI13tOZf3yI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:57:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 417 (0x1a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0695, serialNumber=D69F8650D97A524C299453CCB48D77B4E65FDF22
Validity
Not Before: Mar 2 00:57:16 2026 GMT
Not After : Mar 9 00:57:16 2026 GMT
Subject: CN=69a4e06d-b4e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4d:5a:8c:44:de:d1:ab:a9:06:79:d3:6e:81:
97:de:f3:ec:80:14:10:fd:80:3d:ba:62:4d:3e:a1:
5c:87:6a:e1:a7:70:f7:86:42:ea:50:b5:70:1a:0d:
c6:8e:cc:8c:7b:17:e7:25:af:fe:f4:f1:11:de:71:
e5:10:c2:a7:8e:cd:a8:c2:69:e5:7d:fd:1a:e0:c6:
60:f1:af:c1:01:7a:aa:65:74:46:1d:8c:d4:2f:f6:
f1:7f:14:5c:7a:6b:ac:e2:e9:d6:81:46:aa:4a:35:
6c:e1:a4:73:38:c3:2d:bb:99:ca:23:84:78:6f:fc:
a3:c0:ea:87:b7:9e:3e:02:89:4f:b5:74:65:a9:fd:
62:f2:4e:93:18:e7:81:70:48:82:09:77:a6:aa:30:
f9:82:d8:e6:dd:f9:1b:0e:47:16:02:a9:0a:c8:8d:
50:69:27:cb:39:5b:28:6a:b1:99:07:52:b2:76:06:
f6:52:4f:4d:4c:da:6c:76:74:bd:65:b1:76:24:21:
3a:6b:39:99:b0:89:ab:ff:d5:39:2d:88:4b:04:3a:
47:a8:b5:3f:61:66:cd:a3:d1:49:29:ba:1a:a9:f5:
26:63:0e:de:cd:99:11:57:fb:ae:4a:58:6c:89:72:
10:88:91:bd:27:5a:11:18:95:ad:c2:b7:cf:19:31:
91:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:83:8F:08:08:08:3C:E1:40:6B:0F:95:01:71:53:C1:89:BE:83:71
X509v3 Authority Key Identifier:
keyid:D6:9F:86:50:D9:7A:52:4C:29:94:53:CC:B4:8D:77:B4:E6:5F:DF:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1p-GUNl6UkwplFPMtI13tOZf3yI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:73:71:9b:33:16:a4:78:4b:7b:af:12:9b:ab:76:46:14:e1:
d8:c4:42:bb:4a:14:09:98:8f:c4:33:8e:e4:e8:09:cc:76:5d:
7f:3f:3c:e9:9f:46:9f:f3:07:f2:7e:7c:0c:5c:0c:14:58:59:
05:5b:29:f8:36:12:59:29:64:6c:6c:06:a0:e6:f6:90:fe:07:
75:70:83:e6:28:e1:ec:60:43:8e:bc:04:b8:0d:5e:61:94:59:
23:9f:da:9a:da:b2:a8:ba:34:ef:16:4c:61:43:bf:6c:69:1d:
c1:6d:84:f7:d9:3e:62:4b:5d:c9:fa:c4:6b:22:1f:95:33:2d:
18:cd:6e:9c:8e:b2:d5:4f:8c:09:57:cf:de:23:e8:25:a8:9c:
14:cd:9e:5c:65:7f:3f:7a:2b:3a:a1:0f:c0:47:56:3c:0e:12:
0f:b1:29:1b:23:37:fe:26:d4:75:91:22:7b:00:a4:2d:18:14:
ba:69:ec:0b:90:02:97:71:4c:fd:c9:d4:68:67:a1:c8:81:7b:
2d:a2:c7:fa:58:4e:d2:83:84:89:24:54:37:f1:4f:34:45:d3:
bd:9d:b9:f4:25:b0:38:e9:7e:19:27:22:3a:22:68:69:ad:50:
38:0f:c8:61:dd:84:79:25:e1:b6:46:df:47:ed:b1:c6:76:c6:
74:1f:14:d1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjA2OTUxMTAvBgNVBAUTKEQ2OUY4NjUwRDk3QTUyNEMyOTk0NTNDQ0I0OEQ3N0I0
RTY1RkRGMjIwHhcNMjYwMzAyMDA1NzE2WhcNMjYwMzA5MDA1NzE2WjAYMRYwFAYD
VQQDEw02OWE0ZTA2ZC1iNGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsU1ajETe0aupBnnTboGX3vPsgBQQ/YA9umJNPqFch2rhp3D3hkLqULVwGg3G
jsyMexfnJa/+9PER3nHlEMKnjs2owmnlff0a4MZg8a/BAXqqZXRGHYzUL/bxfxRc
emus4unWgUaqSjVs4aRzOMMtu5nKI4R4b/yjwOqHt54+AolPtXRlqf1i8k6TGOeB
cEiCCXemqjD5gtjm3fkbDkcWAqkKyI1QaSfLOVsoarGZB1Kydgb2Uk9NTNpsdnS9
ZbF2JCE6azmZsImr/9U5LYhLBDpHqLU/YWbNo9FJKboaqfUmYw7ezZkRV/uuSlhs
iXIQiJG9J1oRGJWtwrfPGTGRhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCmDjwgI
CDzhQGsPlQFxU8GJvoNxMB8GA1UdIwQYMBaAFNafhlDZelJMKZRTzLSNd7TmX98i
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDY5NS83QzY3ODE0OEEw
QzExMUVFQjIyMzI5NEFDNEY5QUUwMi8xcC1HVU5sNlVrd3BsRlBNdEkxM3RPWmYz
eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFwLUdVTmw2VWt3cGxGUE10STEzdE9aZjN5SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MDY5NS83QzY3ODE0OEEwQzExMUVFQjIyMzI5NEFDNEY5QUUwMi8xcC1HVU5sNlVr
d3BsRlBNdEkxM3RPWmYzeUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkXNxmzMWpHhLe68Sm6t2RhTh2MRCu0oUCZiPxDOO5OgJzHZdfz886Z9Gn/MH
8n58DFwMFFhZBVsp+DYSWSlkbGwGoOb2kP4HdXCD5ijh7GBDjrwEuA1eYZRZI5/a
mtqyqLo07xZMYUO/bGkdwW2E99k+YktdyfrEayIflTMtGM1unI6y1U+MCVfP3iPo
JaicFM2eXGV/P3orOqEPwEdWPA4SD7EpGyM3/ibUdZEiewCkLRgUumnsC5ACl3FM
/cnUaGehyIF7LaLH+lhO0oOEiSRUN/FPNEXTvZ259CWwOOl+GSciOiJoaa1QOA/I
Yd2EeSXhtkbfR+2xxnbGdB8U0Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:36:33 2026 by rpki-client