
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft
File: GSl33aoJW0B37g12I4Rj8bb0Cu4.mft (raw, json)
Hash identifier: 8PDS6hXKMZ9gCQ0s7X02Hj3kSKrPzxOHQbv4Tjy1op8=
Subject key identifier: 81:EC:F2:06:A9:0F:05:E7:E1:F1:17:22:F1:AF:DD:D1:CE:34:EF:7F
Authority key identifier: 19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE
Certificate issuer: /CN=A91F58C9/serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE
Certificate serial: 0452
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft
Manifest number: 0443
Signing time: Sun 01 Mar 2026 01:02:28 +0000
Manifest this update: Sun 01 Mar 2026 01:02:27 +0000
Manifest next update: Sun 08 Mar 2026 01:02:27 +0000
Files and hashes: 1: GSl33aoJW0B37g12I4Rj8bb0Cu4.crl (hash: GwM4ivjIx41h3hKb+1dkYSl9wT1zt7sn5ByyZ/ZTHCU=)
2: 2B46EF64951211F0A6C6AF5AC4F9AE02.roa (hash: YC+Xx7KbVUpjJoSdqrDIz5VLsWIkLluqz4lGXQlus1M=)
3: 9FC8CE38936E11EC92AF8421C4F9AE02.roa (hash: O0CTocw9S+aKMmyVNlp/W2ilJB5h65RMybZN3Xiy9s0=)
4: AEFCCA501F5A11F0BA7E6961C4F9AE02.roa (hash: mIeJgpnrbBqruNdNWn2xOG2sfzzb+tKpriiGmNDG67Y=)
5: AFDE92321F5A11F0BA7E6961C4F9AE02.roa (hash: KgsedG4p1TKagm7CFAiCxXIQwYugyhlaYkwSVR/E4LU=)
6: AF6BB6C21F5A11F0BA7E6961C4F9AE02.roa (hash: lCh4qNG4MxGwgSOCokRlEuxslOzYqyQd9BkSkWApWyM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.crl
rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1106 (0x452)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F58C9, serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE
Validity
Not Before: Mar 1 01:02:27 2026 GMT
Not After : Mar 8 01:02:27 2026 GMT
Subject: CN=69a39024-7992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:db:38:d0:dc:d6:2c:b4:35:f4:68:46:d3:19:
9c:a7:56:0f:19:66:29:ec:56:10:e1:d8:d1:2d:02:
31:b5:2e:2b:ec:ee:31:26:17:7f:0a:34:76:bd:6e:
f9:15:de:3d:7d:dc:1b:95:f1:fa:70:5d:0c:b1:52:
e8:11:71:7a:f4:66:75:6d:62:c7:c9:7f:01:48:05:
a4:14:b1:f1:6b:d0:f2:52:34:94:6a:99:61:2f:78:
89:27:cb:c2:94:a1:27:fb:2e:67:82:ea:96:55:9f:
74:94:18:f8:5e:d0:9f:82:a6:09:fe:e3:ea:b8:b3:
e3:b8:b3:35:6c:47:30:79:5f:c5:46:5f:03:b9:43:
c4:32:0d:2f:94:f0:86:6e:4f:6b:54:e1:70:47:d4:
5f:d2:bd:c3:62:4b:77:fc:38:13:e2:7c:58:b0:e8:
9a:4f:42:f3:5e:bd:e0:22:3b:84:81:44:45:59:b2:
0a:c2:ba:11:5a:21:55:0d:a1:85:8f:97:15:e3:63:
a7:05:a5:b8:1d:2c:31:28:9c:1a:25:75:3a:61:e7:
cb:4a:24:10:84:6b:ff:23:c5:8d:2a:4b:1c:71:e9:
e5:f9:02:21:33:b2:04:f7:da:88:02:a5:d0:7b:13:
c2:22:27:55:46:ae:f3:b3:5f:64:3a:75:16:a9:bf:
a3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:EC:F2:06:A9:0F:05:E7:E1:F1:17:22:F1:AF:DD:D1:CE:34:EF:7F
X509v3 Authority Key Identifier:
keyid:19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:2f:14:1b:08:0a:f4:13:44:cf:23:e5:62:1d:50:6e:88:c3:
4a:b9:df:83:0e:b7:9c:34:70:a3:2a:85:08:ee:de:24:96:7f:
91:db:14:14:a7:23:fe:0f:77:b5:2d:05:35:fd:af:b6:29:e1:
95:15:b0:b2:7e:03:49:1a:96:32:b8:06:c5:d7:d3:53:15:21:
3d:e0:bf:43:36:d7:50:62:cf:38:f5:47:a1:4b:a6:17:8d:00:
7a:6b:d3:12:50:2c:c8:90:0d:ce:ac:5c:c9:e5:06:c0:60:27:
e6:f7:dc:22:9e:b7:79:b8:c1:d3:66:1c:0e:da:e8:91:f8:9c:
2e:14:0b:9b:cc:fe:71:32:24:51:2f:96:27:8f:3e:1a:74:b9:
2f:66:02:e0:af:f3:96:5c:a8:d4:78:2d:af:93:78:cb:d5:2a:
a3:8b:a3:c7:3e:3e:9e:52:f1:a4:71:14:49:28:47:61:97:80:
46:6b:6f:40:98:bf:88:09:52:3d:8e:71:41:54:e7:d1:db:2d:
e5:a2:93:42:69:5b:a5:9e:79:bc:22:2d:c4:da:0c:e6:24:16:
f8:09:85:5b:20:ed:58:19:f3:b6:82:e8:72:48:29:e2:5f:2e:
a7:dd:32:59:8d:e6:9c:39:1e:5f:d5:b8:8f:43:55:2c:73:a2:
ad:42:de:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:26:30 2026 by rpki-client