
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.mft
File: GI72_1fx9ftPqwqu2qktYE8nVTA.mft (raw, json)
Hash identifier: V2tfoIhzXjuksG4A/dBknqZt+x+yETJJP6Y4aya3S4I=
Subject key identifier: 2D:12:31:FD:C2:D4:CD:28:EF:56:D3:91:6B:61:38:73:58:AD:E3:C0
Authority key identifier: 18:8E:F6:FF:57:F1:F5:FB:4F:AB:0A:AE:DA:A9:2D:60:4F:27:55:30
Certificate issuer: /CN=A91FEC1E/serialNumber=188EF6FF57F1F5FB4FAB0AAEDAA92D604F275530
Certificate serial: 93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GI72_1fx9ftPqwqu2qktYE8nVTA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.mft
Manifest number: 93
Signing time: Sun 01 Mar 2026 08:44:31 +0000
Manifest this update: Sun 01 Mar 2026 08:44:30 +0000
Manifest next update: Sun 08 Mar 2026 08:44:30 +0000
Files and hashes: 1: GI72_1fx9ftPqwqu2qktYE8nVTA.crl (hash: AkULaPn0mc7R/iSgPhoUXUqDybGyGbl6FS6/R+puFpc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.crl
rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GI72_1fx9ftPqwqu2qktYE8nVTA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:44:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147 (0x93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FEC1E, serialNumber=188EF6FF57F1F5FB4FAB0AAEDAA92D604F275530
Validity
Not Before: Mar 1 08:44:30 2026 GMT
Not After : Mar 8 08:44:30 2026 GMT
Subject: CN=69a3fc6f-476d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:48:1e:31:c4:04:12:6f:ea:63:ba:82:66:78:
3f:b6:65:75:25:87:fb:c1:d2:c3:5c:c3:1a:d0:f9:
c0:4f:1f:70:96:5a:52:7d:5b:c4:62:50:5d:3c:3b:
75:5f:0d:1f:fe:e2:c0:82:79:b3:76:d1:bb:32:d6:
13:20:9f:2e:1b:d5:5e:10:9b:07:2c:31:ad:c0:48:
eb:83:a7:43:93:60:1c:74:0a:0d:77:d8:fa:66:ba:
bb:1e:ad:9c:4a:f4:93:7e:37:cb:a3:7b:b0:e5:9d:
9b:51:5d:10:e4:06:5a:bb:6e:3c:71:02:65:97:0e:
db:b3:1d:bc:6a:a5:54:36:5e:45:b5:29:f9:42:8a:
ed:c2:05:fb:47:c8:93:b9:d9:4c:26:43:4e:35:08:
1c:a5:38:73:ce:ef:35:ee:02:15:47:4f:be:93:18:
b9:c8:d4:c8:29:9f:24:9b:98:69:34:28:ab:54:2c:
56:b8:4c:64:b4:34:1f:ed:f6:56:cd:af:db:50:4f:
84:1a:cf:a1:53:1c:8a:8d:61:78:99:89:02:be:69:
b3:e3:ec:5f:de:52:05:3e:41:d0:17:9d:fd:aa:ed:
58:f1:8e:c9:b7:00:b1:f0:a8:1b:ef:9c:39:1b:6b:
1b:2c:85:28:31:b4:4d:38:62:62:da:ac:a4:83:2c:
99:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:12:31:FD:C2:D4:CD:28:EF:56:D3:91:6B:61:38:73:58:AD:E3:C0
X509v3 Authority Key Identifier:
keyid:18:8E:F6:FF:57:F1:F5:FB:4F:AB:0A:AE:DA:A9:2D:60:4F:27:55:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GI72_1fx9ftPqwqu2qktYE8nVTA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:1f:6b:0e:3f:57:67:23:c1:98:4a:2a:5b:ed:d0:46:6d:3e:
0d:c3:94:c5:08:ba:f3:ce:57:fd:76:4b:bd:43:4d:30:98:90:
f9:9f:a0:a1:aa:db:c1:6e:ef:dd:9f:da:13:af:5e:6e:bc:0f:
07:c5:79:a1:32:40:78:33:e8:40:4c:6c:66:87:0d:8e:f0:52:
85:e2:2a:cd:72:c6:23:1d:d5:0c:ca:7d:3f:69:12:f1:b0:6e:
36:73:48:5d:73:3e:6b:a3:f2:3a:7d:1a:f0:d8:5b:b6:b8:7a:
0b:db:2a:9a:e8:a0:82:8a:57:03:b9:bf:ee:65:22:0a:b4:9a:
56:cb:bc:58:46:b6:90:a2:ca:e3:33:0d:cf:01:68:e9:14:20:
67:2a:2a:c7:2e:28:70:27:dd:4f:36:ce:28:1d:0e:52:d3:77:
ad:58:60:99:38:6f:b3:65:9f:5b:bd:51:6b:d7:a3:ee:b0:a0:
6d:4f:42:85:b8:78:59:03:32:2c:68:24:47:cb:60:fc:01:e5:
89:69:d7:88:80:4a:ba:05:81:f2:07:2f:a0:79:78:da:69:0a:
35:07:1c:a2:a8:2e:f9:59:8d:48:62:7e:48:96:ee:01:0c:d1:
d1:89:3c:21:01:e4:84:6a:1d:9d:c4:f7:8b:5c:74:bf:e4:eb:
78:2c:c3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:01:16 2026 by rpki-client