
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.mft
File: GHotNbr5BXwPC40mLS5dYiajI4I.mft (raw, json)
Hash identifier: UDJQUBP0wmiq4mi12A21fZ7wu4hIMMQoG/4FXi/kx9M=
Subject key identifier: 0A:CF:45:A3:5A:B7:25:31:0E:60:A7:66:E7:88:CE:46:BB:39:FB:24
Authority key identifier: 18:7A:2D:35:BA:F9:05:7C:0F:0B:8D:26:2D:2E:5D:62:26:A3:23:82
Certificate issuer: /CN=A91FD1C3/serialNumber=187A2D35BAF9057C0F0B8D262D2E5D6226A32382
Certificate serial: 01F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHotNbr5BXwPC40mLS5dYiajI4I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.mft
Manifest number: 01ED
Signing time: Fri 17 Apr 2026 03:08:01 +0000
Manifest this update: Fri 17 Apr 2026 03:08:00 +0000
Manifest next update: Fri 24 Apr 2026 03:08:00 +0000
Files and hashes: 1: GHotNbr5BXwPC40mLS5dYiajI4I.crl (hash: RZZbJjc754dS0YNd4nUS71VyofUSZRdzWikfWa+1h4o=)
2: 5773966456D011EE9C8F8C56C4F9AE02.roa (hash: V94XCH+V6AH+/jsR1uuPC4R2sBLnX4SmOxfv0adXwxs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.crl
rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHotNbr5BXwPC40mLS5dYiajI4I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:08:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 501 (0x1f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD1C3, serialNumber=187A2D35BAF9057C0F0B8D262D2E5D6226A32382
Validity
Not Before: Apr 17 03:08:00 2026 GMT
Not After : Apr 24 03:08:00 2026 GMT
Subject: CN=69e1a411-32fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b8:3e:66:72:24:56:cf:0d:de:b6:08:0e:0b:
1f:4c:71:90:a5:93:31:4f:e5:b5:6b:3b:8d:87:39:
fe:1c:3e:eb:c2:7d:5c:a1:7c:de:0c:2f:ca:75:e8:
87:41:0c:ef:57:fb:21:09:f5:71:7b:20:9f:61:67:
de:d2:b3:39:08:6c:7b:0e:01:01:11:94:c4:09:88:
41:0d:8f:01:79:f5:9b:66:36:a1:67:52:27:8a:bc:
ca:16:09:6d:58:9a:b4:a1:36:e8:c3:61:f3:5d:23:
51:16:06:65:87:ac:fe:49:c8:b0:79:ad:3a:8a:5f:
10:91:b4:cd:1b:b4:f8:af:e1:2b:ce:20:54:1b:e7:
d2:76:33:d2:47:d1:72:3e:a9:31:d0:b0:c8:b5:7b:
16:f4:3f:00:9a:ad:29:bd:70:4e:04:f3:e2:20:18:
c7:62:5c:81:c9:45:86:7e:43:49:6c:bb:a8:4e:22:
ce:d5:8d:f5:69:51:dc:7e:30:2d:55:2e:fd:97:05:
df:c0:12:b0:75:ac:d9:37:ee:76:74:d4:9c:d2:3c:
12:f0:c1:f4:90:68:1c:a8:97:b5:fc:2a:99:45:43:
a0:5a:54:22:43:54:a3:7c:75:cb:53:47:13:5b:6a:
99:d5:9b:81:cb:f1:26:55:09:1f:6b:e9:0e:a7:0d:
e1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:CF:45:A3:5A:B7:25:31:0E:60:A7:66:E7:88:CE:46:BB:39:FB:24
X509v3 Authority Key Identifier:
keyid:18:7A:2D:35:BA:F9:05:7C:0F:0B:8D:26:2D:2E:5D:62:26:A3:23:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHotNbr5BXwPC40mLS5dYiajI4I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ca:67:be:6a:a7:cb:45:41:ec:f8:f3:eb:14:db:c5:d7:79:
71:01:40:de:12:18:05:63:6f:ab:26:a3:b6:c1:e6:d5:61:37:
0e:a8:fb:12:47:fd:68:5f:41:f4:61:f6:ca:22:2b:99:d7:e6:
b9:31:44:b6:b2:55:71:65:a9:ad:02:77:2e:ed:a8:5b:ef:10:
e9:4f:db:d4:e7:c7:37:d2:9f:c8:35:97:db:f8:87:76:f1:78:
d8:e0:4a:27:6c:ff:94:69:bd:16:0d:49:1e:59:4f:53:0a:84:
67:d5:e6:82:ce:20:35:7b:10:1b:0a:a9:5c:43:46:24:44:3e:
2c:62:63:8b:76:36:81:96:34:87:5d:0f:14:23:f2:42:a7:39:
38:51:fc:02:ee:cd:e7:94:0f:d3:22:a3:20:a4:72:64:44:36:
ed:b7:24:93:1e:95:66:b2:6c:89:58:01:94:dd:01:83:b9:9a:
df:85:d5:d5:97:94:6f:18:cd:fc:a0:0f:db:92:fd:15:9b:ab:
05:c6:10:ba:be:aa:53:28:21:33:ce:3f:cd:91:1f:51:4c:8f:
8e:5b:d8:d5:d3:af:23:44:49:03:45:51:66:4d:04:1b:a3:e3:
73:97:5c:fa:b2:0f:43:98:c6:2c:5c:e9:32:ae:30:f9:f7:b4:
7c:14:ed:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:35:25 2026 by rpki-client