
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8357/1DA5CC56DF8A11EF87472B74C4F9AE02/GAo1IuIFDF8eCHNTmxLW0jEqIBo.mft
File: GAo1IuIFDF8eCHNTmxLW0jEqIBo.mft (raw, json)
Hash identifier: bIq8Mg0h9PymuquOyrrrr/GCPjGpNspNr0YdfmT659Q=
Subject key identifier: AE:BD:5A:2D:AE:61:04:A3:CE:E1:EC:06:5F:50:E3:A5:DB:72:26:4D
Authority key identifier: 18:0A:35:22:E2:05:0C:5F:1E:08:73:53:9B:12:D6:D2:31:2A:20:1A
Certificate issuer: /CN=A91F8357/serialNumber=180A3522E2050C5F1E0873539B12D6D2312A201A
Certificate serial: DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAo1IuIFDF8eCHNTmxLW0jEqIBo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8357/1DA5CC56DF8A11EF87472B74C4F9AE02/GAo1IuIFDF8eCHNTmxLW0jEqIBo.mft
Manifest number: DE
Signing time: Sun 05 Apr 2026 05:57:48 +0000
Manifest this update: Sun 05 Apr 2026 05:57:48 +0000
Manifest next update: Sun 12 Apr 2026 05:57:48 +0000
Files and hashes: 1: GAo1IuIFDF8eCHNTmxLW0jEqIBo.crl (hash: if5m5sfXl0m/GxtCaKar7SqsEiuW1U2sWe5nPvBCFoU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8357/1DA5CC56DF8A11EF87472B74C4F9AE02/GAo1IuIFDF8eCHNTmxLW0jEqIBo.crl
rsync://rpki.apnic.net/member_repository/A91F8357/1DA5CC56DF8A11EF87472B74C4F9AE02/GAo1IuIFDF8eCHNTmxLW0jEqIBo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAo1IuIFDF8eCHNTmxLW0jEqIBo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 05:57:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222 (0xde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8357, serialNumber=180A3522E2050C5F1E0873539B12D6D2312A201A
Validity
Not Before: Apr 5 05:57:48 2026 GMT
Not After : Apr 12 05:57:48 2026 GMT
Subject: CN=69d1f9dc-350a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:86:5b:b7:bb:27:bf:12:88:3d:77:95:84:73:
0e:c1:f4:1a:af:32:d0:2e:74:4f:7d:6b:f8:44:03:
fb:15:08:63:f3:12:a5:e6:8f:65:9e:08:8a:c2:5c:
6c:fa:b8:05:ce:1d:50:3e:62:f0:71:4d:3d:5c:38:
f9:17:0b:65:cb:dd:20:09:3c:1c:ba:5e:e6:ea:56:
72:27:12:bc:46:c9:93:5b:20:73:85:87:90:d6:01:
dc:33:83:7e:0d:c7:dd:02:82:e7:d8:37:78:43:ff:
76:c5:a2:4b:c6:19:a3:0b:5f:95:ce:de:e0:eb:39:
db:ea:b2:ea:01:95:71:56:0a:7b:74:2c:12:05:72:
48:d9:85:22:83:ed:ec:1c:10:e0:69:b3:88:a6:8b:
31:c3:33:87:04:f9:d9:d2:9c:e8:da:e5:51:21:0b:
aa:f5:3b:47:e6:26:13:0b:0a:60:f5:74:6b:9a:da:
29:d5:64:9d:19:f0:04:a7:0f:99:be:c5:a1:95:66:
4b:be:06:1e:55:c4:62:c3:91:54:0e:bb:58:51:5e:
7e:df:37:b4:8d:3e:6a:28:c8:21:07:76:68:3f:2b:
af:1d:51:18:e6:95:64:ae:ea:ba:3e:07:43:e2:3c:
b5:cc:f2:42:01:f6:22:22:7b:29:17:f2:d1:e2:c3:
2f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:BD:5A:2D:AE:61:04:A3:CE:E1:EC:06:5F:50:E3:A5:DB:72:26:4D
X509v3 Authority Key Identifier:
keyid:18:0A:35:22:E2:05:0C:5F:1E:08:73:53:9B:12:D6:D2:31:2A:20:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8357/1DA5CC56DF8A11EF87472B74C4F9AE02/GAo1IuIFDF8eCHNTmxLW0jEqIBo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAo1IuIFDF8eCHNTmxLW0jEqIBo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8357/1DA5CC56DF8A11EF87472B74C4F9AE02/GAo1IuIFDF8eCHNTmxLW0jEqIBo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:28:05:17:e6:73:e8:cd:10:2a:52:81:b2:56:56:b5:bf:e5:
49:18:65:35:06:41:65:d0:73:98:e8:f6:35:bd:45:db:3c:2f:
b6:62:16:c4:50:54:96:99:93:da:b6:01:d8:59:c2:b2:c0:31:
ed:8d:3a:17:26:5c:af:1a:f0:9d:27:6f:40:46:a5:ca:2a:c8:
72:c9:97:fb:bb:1e:8c:bc:aa:bf:78:e5:02:ac:f8:ec:9d:6d:
43:42:fd:b9:95:e3:e3:22:4e:67:50:c8:8c:8c:a6:4d:65:7f:
56:7a:ea:49:f4:e5:f1:67:0e:3d:f7:42:0b:7c:e0:88:87:93:
4c:2d:5f:a0:2e:e3:b5:d6:9e:4d:2a:51:a9:1b:b5:55:b4:88:
0f:bb:1c:92:46:18:51:13:ae:f4:a9:0a:6e:7e:7c:2a:e8:9a:
91:fb:c1:61:4f:50:4f:6e:ee:5e:c2:a0:30:e2:db:3a:84:26:
31:91:31:b2:00:a1:15:8b:77:96:f6:cd:69:75:07:65:b7:5f:
c6:50:22:e2:e1:84:ee:50:2b:6f:43:b0:9a:0a:d2:09:3e:d2:
aa:d7:e8:33:4a:8d:f0:8a:97:a0:eb:39:8c:19:a7:70:d8:f9:
ad:64:b3:af:13:fe:7a:84:9a:04:09:21:a8:59:ae:f1:c9:5a:
b3:12:9c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 23:50:10 2026 by rpki-client