
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3316/2068C062F2C411F08B84E445396F56BC/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.mft
File: gMq7xd4_e5Mn6sTbqNk2U6EiIQA.mft (raw, json)
Hash identifier: 5PFItsRl2utdyAP20xMKb2XCfeNHJODGLlrFVbrzMt0=
Subject key identifier: B9:FA:AA:C6:D1:76:39:64:7C:A2:D8:C6:67:31:DE:1B:18:B3:F0:F4
Authority key identifier: 80:CA:BB:C5:DE:3F:7B:93:27:EA:C4:DB:A8:D9:36:53:A1:22:21:00
Certificate issuer: /CN=A91B3316/serialNumber=80CABBC5DE3F7B9327EAC4DBA8D93653A1222100
Certificate serial: 4C
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3316/2068C062F2C411F08B84E445396F56BC/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.mft
Manifest number: 43
Signing time: Tue 21 Apr 2026 08:24:12 +0000
Manifest this update: Tue 21 Apr 2026 08:24:12 +0000
Manifest next update: Tue 28 Apr 2026 08:24:12 +0000
Files and hashes: 1: gMq7xd4_e5Mn6sTbqNk2U6EiIQA.crl (hash: AyfP9d6v67FdEfn3HjqvFfII0z8yt1NIiQRo5yRmNJk=)
2: 10B9878C243D11F1979A5CDAB9833773.roa (hash: zVqpLd7j0J+K3oi88p50tmt71zBHPtzbECf2RGbri0o=)
3: C96483E226B111F1829C23D9C3833773.roa (hash: xDH8tBv3qmVSVr8LAJxQ8B2DT/UTFhcoFnYkcj6WUeU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B3316/2068C062F2C411F08B84E445396F56BC/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.crl
rsync://rpki.apnic.net/member_repository/A91B3316/2068C062F2C411F08B84E445396F56BC/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 08:24:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76 (0x4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3316, serialNumber=80CABBC5DE3F7B9327EAC4DBA8D93653A1222100
Validity
Not Before: Apr 21 08:24:12 2026 GMT
Not After : Apr 28 08:24:12 2026 GMT
Subject: CN=69e7342c-9709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d1:16:e7:82:8f:26:87:5c:1e:97:b8:88:e6:
d2:39:65:e5:e8:b5:42:94:16:13:19:a8:83:19:21:
fa:78:d6:7e:20:a9:af:f6:bf:43:e2:e5:c9:3b:4c:
4e:25:7c:d5:14:b6:73:c4:9b:1b:94:15:af:41:2c:
07:3f:36:14:f0:22:5d:c2:e1:55:42:65:82:7d:2c:
85:2e:77:98:a4:ab:aa:41:f0:64:63:b4:17:e8:cb:
c1:d4:2c:96:94:e0:8f:5f:61:6c:ea:56:f3:08:d5:
22:8c:5c:6b:c3:ab:21:08:23:47:0e:07:5f:55:6f:
5a:6c:d9:6f:c9:94:83:5f:02:76:2a:de:cc:99:09:
6b:c5:32:09:1c:fe:75:2d:ef:3c:21:04:f1:e2:34:
5b:e9:5b:50:6a:23:3d:ba:70:2d:68:74:1a:81:83:
cb:fa:cf:07:45:09:b5:91:b7:39:3d:f9:91:99:7a:
62:6a:fb:09:95:a7:61:03:49:16:e7:cc:28:7b:75:
f0:e9:33:2a:01:d8:d9:d8:d2:23:37:82:fb:42:81:
4f:4d:4d:e5:d4:c3:6e:04:d7:3d:fc:c2:46:96:cc:
73:0b:10:de:88:48:d9:84:61:55:35:b5:49:bb:51:
ce:1b:ea:b3:eb:77:a6:fe:27:e9:d0:b5:3e:a6:5b:
65:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:FA:AA:C6:D1:76:39:64:7C:A2:D8:C6:67:31:DE:1B:18:B3:F0:F4
X509v3 Authority Key Identifier:
keyid:80:CA:BB:C5:DE:3F:7B:93:27:EA:C4:DB:A8:D9:36:53:A1:22:21:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3316/2068C062F2C411F08B84E445396F56BC/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3316/2068C062F2C411F08B84E445396F56BC/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:37:f6:f8:45:b2:7d:72:73:99:65:c3:ef:f4:fa:08:ff:16:
73:e1:85:6f:90:77:1a:af:6c:f6:47:53:45:83:7e:86:5d:49:
5d:f6:e6:db:98:1d:c1:dc:60:dc:70:3b:c5:86:75:81:a2:ff:
4f:83:0a:cd:dc:39:30:ec:8f:59:f2:44:2d:c6:b4:09:08:b1:
58:e6:8d:12:1b:40:20:f7:67:df:bf:8c:ee:f5:90:1f:c6:49:
1c:63:e9:a2:1a:3b:04:43:be:5e:c8:da:69:b7:d5:f6:b8:e3:
51:97:78:fb:d6:a4:8e:2d:a0:21:5f:d6:4e:a6:84:19:2b:27:
ab:48:be:73:5c:e9:2d:47:03:7b:ee:ff:41:8b:2b:69:ed:c2:
90:8c:2b:96:9a:f8:ab:13:5b:c6:5d:ab:28:f8:25:27:5e:0d:
b4:84:1e:44:ee:aa:ac:8a:df:d4:58:2a:70:5f:41:1e:ef:a7:
b1:e2:83:c0:15:66:32:22:53:42:ff:2e:d0:3b:9d:5b:91:e8:
f5:50:39:4e:55:d8:21:2c:b6:f2:2f:1e:60:43:62:2e:06:f1:
69:33:26:89:9f:75:d7:1d:72:8a:60:c4:c7:1a:a3:91:6d:41:
4e:c6:e1:b2:f1:28:29:af:3f:0d:9a:21:c3:fe:5b:c4:7c:9c:
62:21:ad:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 01:43:38 2026 by rpki-client