
$ rpki-client -vvf rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.mft
File: gVvw7iCl3LowV8PTW1jsFHcuj-8.mft (raw, json)
Hash identifier: k5wuPz2uIoIkyErWlcEUKulsHuyugkEm4oQxT8VnT4k=
Subject key identifier: C3:DC:19:38:96:D2:A7:8F:65:8A:BE:10:EC:C4:DE:6E:D6:D8:85:B2
Authority key identifier: 81:5B:F0:EE:20:A5:DC:BA:30:57:C3:D3:5B:58:EC:14:77:2E:8F:EF
Certificate issuer: /CN=A91149E6/serialNumber=815BF0EE20A5DCBA3057C3D35B58EC14772E8FEF
Certificate serial: 0370
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gVvw7iCl3LowV8PTW1jsFHcuj-8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.mft
Manifest number: 036A
Signing time: Sun 05 Apr 2026 00:38:07 +0000
Manifest this update: Sun 05 Apr 2026 00:38:06 +0000
Manifest next update: Sun 12 Apr 2026 00:38:06 +0000
Files and hashes: 1: gVvw7iCl3LowV8PTW1jsFHcuj-8.crl (hash: 58SXG+vngBZTuYnr1OvzoTeVIYlabZLq8gAJaJ0lKL0=)
2: 54FEFAA2ED4C11EC821F3D84C4F9AE02.roa (hash: 7fUCyyZYoAQZX6oLKSwqjZm0tD9DSJyL9N4WSJjNtpo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.crl
rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gVvw7iCl3LowV8PTW1jsFHcuj-8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 00:38:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 880 (0x370)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91149E6, serialNumber=815BF0EE20A5DCBA3057C3D35B58EC14772E8FEF
Validity
Not Before: Apr 5 00:38:06 2026 GMT
Not After : Apr 12 00:38:06 2026 GMT
Subject: CN=69d1aeef-2630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1e:f5:ef:8c:78:8c:ad:a2:47:da:dc:96:f0:
71:3d:20:e3:09:00:10:a5:41:7a:60:7b:af:ba:2a:
3b:62:52:6f:00:1b:c3:f6:5b:5b:33:11:0f:75:25:
ec:1b:04:77:a2:f7:58:ec:61:29:80:05:a7:95:7e:
7d:f4:55:db:e7:62:a9:3a:d2:bb:4e:b7:4f:7d:13:
46:09:b5:37:67:84:d0:f6:9b:0e:88:b0:1a:28:42:
32:44:20:cb:32:64:4d:0f:19:a5:10:f2:c7:8b:76:
07:f5:53:3d:b9:a6:97:a1:b9:dc:cd:a3:b8:6a:81:
7e:1e:23:0d:69:0c:dd:a3:7d:6f:45:42:39:ca:fc:
28:34:2a:5e:a8:0a:fa:c9:86:59:40:8e:10:f3:0a:
eb:85:db:a3:18:e3:86:87:cb:60:75:a8:7e:57:3a:
b6:99:da:b8:cf:90:fb:33:8d:2b:99:1f:ea:79:25:
0c:aa:99:58:34:55:37:79:c6:05:94:c7:bf:57:72:
73:91:93:2d:98:c9:1a:4c:99:e7:22:ea:0c:8d:13:
c9:bf:13:5f:f8:ca:cc:df:28:db:94:f6:68:c2:64:
9b:ac:cb:08:5c:07:80:04:28:bc:a6:67:09:9a:cc:
2c:1e:7c:23:13:72:7c:a9:0e:d0:7c:20:85:a4:0a:
e5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:DC:19:38:96:D2:A7:8F:65:8A:BE:10:EC:C4:DE:6E:D6:D8:85:B2
X509v3 Authority Key Identifier:
keyid:81:5B:F0:EE:20:A5:DC:BA:30:57:C3:D3:5B:58:EC:14:77:2E:8F:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gVvw7iCl3LowV8PTW1jsFHcuj-8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:08:0b:6c:c9:b9:b9:c8:ce:d4:e0:fa:e5:02:eb:87:32:95:
d5:7b:71:fe:3a:8d:ca:a6:0c:68:62:0c:98:d9:c3:62:79:f1:
d2:9f:c4:90:bd:01:03:03:0e:f7:6b:38:40:17:91:ce:44:5d:
34:da:03:7b:83:d4:18:fc:af:7f:be:1a:c8:03:5e:c8:51:32:
5a:9c:80:2f:88:ed:df:90:7e:cd:3e:89:d4:cb:75:d6:27:e3:
b4:4f:9d:44:f0:31:bb:8a:36:49:d3:8a:a9:b8:74:29:ee:9e:
44:39:97:b7:b6:d9:47:6d:1f:82:11:c7:f0:32:f8:12:94:60:
10:44:b9:ad:f2:67:6b:10:55:10:b8:2a:9f:50:11:eb:63:9c:
97:42:c0:fd:06:50:68:a3:b1:46:5d:4e:1c:e6:75:a0:ee:05:
e9:d5:27:d9:37:16:3e:7d:52:c9:78:a5:e5:07:ef:31:3f:f5:
c4:be:28:ed:99:e5:fc:b3:bb:b8:d4:97:be:d0:14:86:71:9c:
98:43:ef:d3:77:4e:3d:1e:59:6c:e0:fe:e3:2f:74:eb:3a:67:
8c:55:dc:52:11:34:6a:0d:50:11:a5:cd:55:25:4a:8c:32:4c:
79:b2:75:05:b7:d0:a5:60:c1:ce:1a:09:2f:d9:a3:47:7f:f1:
15:a0:19:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:49 2026 by rpki-client