
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft
File: GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft (raw, json)
Hash identifier: Wq31qKqYakOjEoSr89rZokI1Il4TpOnLHkcGyhdzrHw=
Subject key identifier: E9:40:F1:58:58:FA:92:6D:C0:CB:C1:25:E0:6D:7D:E9:0C:38:A8:59
Authority key identifier: 1B:03:6B:FF:87:80:7C:BF:C6:E9:12:36:CB:08:6D:4F:E2:B0:99:3D
Certificate issuer: /CN=A91B0720/serialNumber=1B036BFF87807CBFC6E91236CB086D4FE2B0993D
Certificate serial: 04A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwNr_4eAfL_G6RI2ywhtT-KwmT0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft
Manifest number: 0474
Signing time: Tue 23 Jun 2026 00:19:41 +0000
Manifest this update: Tue 23 Jun 2026 00:19:40 +0000
Manifest next update: Tue 30 Jun 2026 00:19:40 +0000
Files and hashes: 1: GwNr_4eAfL_G6RI2ywhtT-KwmT0.crl (hash: Lq2lSyygOZsDsX5vMefQNXZB5X25lKhCAq8BJuUw/Co=)
2: F0223A56C8F711EFB2542D5FC4F9AE02.roa (hash: x729WOa3T8qxHTeXY3IB1oaDUAtd3GUuYxUEzKIlZlE=)
3: 3D3FCB5EC8F911EFA0603266C4F9AE02.roa (hash: LdZPN5g7VKOUsoMqUh+SkM+nJiYnZ4SZeWeIWiWxUuQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.crl
rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwNr_4eAfL_G6RI2ywhtT-KwmT0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 00:19:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1189 (0x4a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0720, serialNumber=1B036BFF87807CBFC6E91236CB086D4FE2B0993D
Validity
Not Before: Jun 23 00:19:40 2026 GMT
Not After : Jun 30 00:19:40 2026 GMT
Subject: CN=6a39d11d-7f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:1d:80:65:6e:13:af:bd:45:13:be:4d:bb:f0:
6a:54:f5:76:9b:f9:a8:ad:87:b8:8a:15:da:2e:0d:
63:91:d6:cd:1a:07:db:38:f7:96:73:cb:c0:6a:4d:
34:77:cc:43:a7:e0:d6:90:f7:57:1d:f9:8b:fa:7e:
7f:a7:59:09:10:1b:0b:35:54:f5:d5:e8:44:4d:09:
3a:44:07:ef:fd:ed:6d:4a:2f:93:93:06:b4:54:c0:
78:cd:54:43:36:cc:a2:55:a1:15:a2:64:42:95:d3:
48:2a:20:46:32:d4:98:af:c4:c1:5d:4a:cf:ba:ac:
4d:7c:54:ef:70:39:23:85:9b:2d:b1:e3:4a:a2:0d:
08:45:2e:0a:03:8c:b9:c1:c4:a7:ee:de:69:37:21:
07:7b:a9:2b:8a:f5:44:ae:bd:d8:4a:b5:0b:fd:47:
16:a7:59:5c:6f:2f:10:a8:e0:fd:a9:b9:f8:91:36:
c2:c1:81:24:f6:d2:19:d3:39:9a:e4:59:6f:92:3a:
5a:26:8c:11:44:1f:25:d1:18:89:fb:50:ab:74:01:
7e:5a:22:b8:6f:6d:fe:30:96:9f:3f:1f:18:6b:a2:
67:c0:e7:a5:3d:35:b4:c6:4e:57:ee:a6:62:be:33:
d7:b6:99:1c:70:d7:77:5e:63:8f:b5:aa:5e:3d:97:
40:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:40:F1:58:58:FA:92:6D:C0:CB:C1:25:E0:6D:7D:E9:0C:38:A8:59
X509v3 Authority Key Identifier:
keyid:1B:03:6B:FF:87:80:7C:BF:C6:E9:12:36:CB:08:6D:4F:E2:B0:99:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwNr_4eAfL_G6RI2ywhtT-KwmT0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:37:49:fb:a2:c3:eb:c0:f7:5c:30:37:60:8f:9c:02:db:26:
42:38:56:ea:b6:34:73:d5:f8:b7:a6:7a:b0:cf:f8:e2:36:51:
00:ba:97:cc:57:9e:ab:55:cc:c6:fd:0b:7d:5d:fd:15:b6:df:
7e:44:b4:4a:a5:1a:73:88:9e:25:60:dd:69:59:32:4f:89:45:
15:3d:f2:a5:68:73:ba:94:b2:8e:4d:44:0c:e5:0c:42:00:42:
7b:92:3d:bc:fd:a6:a4:c1:6a:f7:f7:83:4f:85:b2:fa:8e:5f:
24:f0:dd:a1:56:35:3c:d1:a4:a4:b7:4f:2a:ed:3b:6e:a4:b6:
c1:c3:61:c9:1d:32:09:0a:26:da:e1:3f:da:3e:78:f4:37:ff:
e3:fa:70:10:17:eb:55:18:45:b3:13:e5:05:9e:80:47:d5:33:
01:e1:ba:8a:2f:75:0d:97:24:e6:ce:76:4c:cb:a4:4f:c4:79:
03:73:33:ab:58:e3:97:96:a9:fe:3f:ab:1e:27:b8:a7:e2:34:
d9:a5:d6:e3:b0:e7:c8:47:47:0d:b0:19:8e:1c:5b:06:59:f8:
ee:e6:05:33:38:53:d0:78:8c:ab:86:fd:66:2f:01:83:e5:08:
06:55:4d:b2:ad:09:65:70:c2:31:0e:79:d5:02:11:ff:39:0a:
d0:12:d8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:27:08 2026 by rpki-client