
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft
File: g3nXR_dKVe3HOg4EIcebXsDk3nY.mft (raw, json)
Hash identifier: ZVBXQ+mHqCJEEHk7mRIsfD0CI6Nsf/q4Bi+0Nh0Opck=
Subject key identifier: 62:F6:35:26:7A:15:AD:8A:63:C5:A2:89:AB:FB:E7:86:8A:9A:FC:6A
Authority key identifier: 83:79:D7:47:F7:4A:55:ED:C7:3A:0E:04:21:C7:9B:5E:C0:E4:DE:76
Certificate issuer: /CN=A91F9C42/serialNumber=8379D747F74A55EDC73A0E0421C79B5EC0E4DE76
Certificate serial: 0200
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft
Manifest number: 01F6
Signing time: Sun 01 Mar 2026 04:02:58 +0000
Manifest this update: Sun 01 Mar 2026 04:02:58 +0000
Manifest next update: Sun 08 Mar 2026 04:02:58 +0000
Files and hashes: 1: g3nXR_dKVe3HOg4EIcebXsDk3nY.crl (hash: YfyquAr/y3CzLSIdgrOpLx022ORAJ4su0NAqK6u+cEs=)
2: 3A7527ECC1F711EF8B510B86C4F9AE02.roa (hash: 7UGzCq6Cb6amiBq87W5KeE/DUZqLNVV6OVzp45wF3WQ=)
3: 79FC546E326611F08478D72AC4F9AE02.roa (hash: ACKLgoePLs3Ke5FTi4aaIlytoIlfeMfpdj0hhLm4rHA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.crl
rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 04:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 512 (0x200)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9C42, serialNumber=8379D747F74A55EDC73A0E0421C79B5EC0E4DE76
Validity
Not Before: Mar 1 04:02:58 2026 GMT
Not After : Mar 8 04:02:58 2026 GMT
Subject: CN=69a3ba72-9b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c8:b5:1c:33:1c:13:08:a1:21:95:7a:03:52:
e1:6d:1e:90:75:87:0e:c9:46:46:90:88:11:22:26:
ad:fe:f0:a1:8e:5f:66:8a:4f:39:07:80:86:43:a8:
25:9c:c6:d5:c6:4f:98:f3:ca:95:8c:0e:27:d2:d9:
5c:0d:f5:59:45:7d:a6:ed:4f:57:ee:5b:55:a6:5d:
9b:48:78:a7:b6:f0:20:b3:ac:2f:38:29:64:af:11:
60:8d:30:77:d5:e6:78:55:3b:03:b8:44:54:74:50:
d2:58:ba:4f:b9:ba:16:4e:cf:66:87:ee:bf:aa:a2:
a2:a3:d3:18:0d:00:a6:c7:72:8a:e6:65:0f:08:51:
89:34:3a:61:7a:73:04:c9:c4:e6:3b:79:a5:ff:b2:
9d:36:02:a3:03:ea:cb:4e:c1:43:70:be:08:76:f5:
ac:41:7b:9a:fe:e5:14:1d:46:c2:ad:cf:c6:8c:3c:
91:99:65:72:5c:0d:a7:ed:f8:3d:98:9a:fb:5c:1e:
89:ee:a3:4e:cd:7b:4a:7b:60:3f:cc:d5:cd:31:3a:
7e:5b:55:85:02:76:0b:28:2b:5d:c2:46:51:80:d8:
6b:ba:45:83:7a:c9:a4:41:ce:09:ee:39:6a:f8:cf:
0d:92:27:e9:d2:81:71:94:44:ab:86:42:c7:20:4f:
83:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F6:35:26:7A:15:AD:8A:63:C5:A2:89:AB:FB:E7:86:8A:9A:FC:6A
X509v3 Authority Key Identifier:
keyid:83:79:D7:47:F7:4A:55:ED:C7:3A:0E:04:21:C7:9B:5E:C0:E4:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:04:df:08:b1:14:21:e6:8c:a8:01:73:99:38:0f:17:04:d6:
b4:b8:75:b1:d8:64:7b:f7:0d:51:a6:dd:0e:7a:92:ee:a3:85:
d8:c3:9a:c9:5a:1d:3c:99:83:88:fe:da:15:1c:32:29:8c:5f:
5b:26:38:1a:31:36:d2:9e:be:fe:8f:8b:52:11:ff:c6:af:7e:
e9:35:97:15:bd:1f:2d:78:41:bb:9f:6f:66:44:36:9b:a8:a1:
0d:8a:ae:1f:aa:ea:90:f6:96:36:94:1e:37:43:b1:27:3b:da:
e6:a5:75:de:90:4d:53:a2:0d:29:25:6a:3a:32:d2:34:e7:5b:
f0:6b:37:00:64:f4:16:59:39:b1:f8:08:9b:23:1e:86:e7:c2:
78:d7:29:4f:0f:6f:a6:c3:2d:1d:0a:cf:40:8a:55:9f:81:a5:
96:c3:0b:2f:da:7d:3d:47:cc:b8:fc:d0:4c:d0:0d:41:0b:45:
0c:b6:da:47:3e:fb:e9:da:d6:5b:c6:2f:7a:c8:c8:3e:71:c0:
cb:ae:f1:96:92:99:36:ea:69:9d:7f:54:94:11:be:80:88:fc:
3d:6d:97:cd:81:20:54:2b:71:74:0f:50:d3:44:65:7b:72:a9:
e7:47:01:77:7a:e3:30:3c:73:e6:af:46:96:28:6a:a1:61:a2:
37:92:18:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:13:50 2026 by rpki-client