
$ rpki-client -vvf rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft
File: kGjeIDMsvR2zmyN0NbF03nCZTwM.mft (raw, json)
Hash identifier: vVCQ/gTvwV2ptENiQRLGmqTu7R1G+ComG6Ahio0Akzo=
Subject key identifier: 03:AC:F0:F5:06:3E:02:BD:15:94:EB:B5:B6:33:45:62:AB:D4:CF:22
Authority key identifier: 90:68:DE:20:33:2C:BD:1D:B3:9B:23:74:35:B1:74:DE:70:99:4F:03
Certificate issuer: /CN=A91813E4/serialNumber=9068DE20332CBD1DB39B237435B174DE70994F03
Certificate serial: 068B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft
Manifest number: 067F
Signing time: Sat 04 Apr 2026 22:19:27 +0000
Manifest this update: Sat 04 Apr 2026 22:19:26 +0000
Manifest next update: Sat 11 Apr 2026 22:19:26 +0000
Files and hashes: 1: kGjeIDMsvR2zmyN0NbF03nCZTwM.crl (hash: 8Uo0RVux9OvBl+Qsi9fvPX2zA6kz5Wjmc6WxSkiOT2k=)
2: 4DF7BBE0B9A411EB8621D13CC4F9AE02.roa (hash: rUB8K/gQFaS9QOQ5n+o0moQe0g7Bdol9yJ5xYGhKZ7A=)
3: 9609416A33D611EFB34E2C40C4F9AE02.roa (hash: VEOYpLopU2c9FdbzxqgEzKYlCo37XOpklpOWcyDo3bI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.crl
rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 22:19:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1675 (0x68b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91813E4, serialNumber=9068DE20332CBD1DB39B237435B174DE70994F03
Validity
Not Before: Apr 4 22:19:26 2026 GMT
Not After : Apr 11 22:19:26 2026 GMT
Subject: CN=69d18e6f-c36a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:28:3b:1e:3d:17:97:2d:e6:c0:7e:c8:8a:7f:
ed:48:7a:e7:86:e3:e4:3b:fd:c9:a3:90:af:f0:eb:
b5:37:56:f7:fd:de:e6:d9:7d:f4:c0:5a:fe:0b:79:
89:13:22:ff:aa:ca:b4:65:81:d6:9c:c0:da:6c:9a:
87:fc:02:d8:ab:c0:63:f5:55:28:7d:62:e7:48:7d:
59:d7:c0:09:63:b6:80:10:d8:ac:43:99:80:20:19:
46:73:ee:37:3e:b9:a7:ae:ca:77:67:9b:10:5f:66:
da:22:2a:18:ce:90:45:8b:e0:83:5b:9f:0a:0b:4f:
14:50:96:f7:c0:2c:28:06:f9:f5:d1:e2:de:f6:cb:
62:a2:3f:57:22:47:85:7f:f0:30:ba:8d:91:39:5b:
df:b5:e0:9c:2f:2a:07:13:fd:66:6d:fe:a6:08:08:
48:aa:e1:b1:2d:48:c9:e3:ef:66:2e:b2:17:86:06:
94:13:b1:69:ad:87:4a:94:a3:94:aa:5d:34:58:3e:
4d:7c:d2:c1:7a:fb:35:cf:d3:be:d0:11:20:65:25:
71:6d:c9:fa:8b:58:ca:d1:0c:d6:14:35:4e:6f:ae:
14:e9:46:42:31:5a:df:ca:25:8a:9f:f5:58:c9:53:
b3:e8:b9:60:3c:c1:81:06:c6:05:0d:b9:4f:ff:6f:
3c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:AC:F0:F5:06:3E:02:BD:15:94:EB:B5:B6:33:45:62:AB:D4:CF:22
X509v3 Authority Key Identifier:
keyid:90:68:DE:20:33:2C:BD:1D:B3:9B:23:74:35:B1:74:DE:70:99:4F:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:e5:16:60:f6:99:30:1f:41:9e:50:fa:be:ef:29:f7:a5:7e:
9d:99:c9:a6:56:89:b7:59:1f:88:2b:13:22:18:08:d3:69:29:
d3:fe:3f:f2:e4:bd:71:0a:23:c0:0d:4a:b3:9a:fa:8b:73:49:
2c:08:d0:f0:32:20:19:a5:5a:d4:12:77:16:cf:e5:ef:45:94:
a3:bb:5d:0d:3b:ef:a8:45:a1:a1:59:74:23:70:fd:9e:94:f0:
2e:bc:f3:3f:39:84:60:ff:f8:17:08:b7:c4:03:e9:83:17:a0:
53:66:3a:da:90:21:86:34:2a:3f:cb:93:45:7c:bc:53:80:d0:
0f:d6:4e:71:0b:32:f2:a6:26:3d:3d:3b:e3:5b:86:0e:8b:db:
77:fb:ab:56:ad:d4:54:b8:c2:78:c1:e9:39:d0:f3:04:8c:19:
ed:d3:5e:d8:37:69:a1:9f:b9:90:5b:38:8d:b4:00:16:6e:a1:
e0:0a:e6:5f:b5:58:fa:bc:89:a0:75:c8:8f:23:90:2f:0c:c8:
d4:a6:47:5c:3a:42:04:60:4f:09:52:55:8b:bb:e5:54:e7:44:
a3:fa:42:08:e6:8b:91:2d:dc:dd:5c:65:79:04:40:ea:7c:5e:
43:bb:0b:07:46:79:6f:cb:0a:43:75:55:b7:92:e6:5c:f5:3a:
34:94:01:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:57:00 2026 by rpki-client