
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3316/2068C062F2C411F08B84E445396F56BC/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.mft
File: gMq7xd4_e5Mn6sTbqNk2U6EiIQA.mft (raw, json)
Hash identifier: v/2RaZOZbpiXB8cEfLd5X2IcXrcWS19KIwkg31qMH8M=
Subject key identifier: 59:45:F7:A8:DE:E0:F2:84:01:4F:2A:96:B7:03:8F:DD:CE:07:89:79
Authority key identifier: 80:CA:BB:C5:DE:3F:7B:93:27:EA:C4:DB:A8:D9:36:53:A1:22:21:00
Certificate issuer: /CN=A91B3316/serialNumber=80CABBC5DE3F7B9327EAC4DBA8D93653A1222100
Certificate serial: 31
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3316/2068C062F2C411F08B84E445396F56BC/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.mft
Manifest number: 2A
Signing time: Sat 07 Mar 2026 08:07:57 +0000
Manifest this update: Sat 07 Mar 2026 08:07:57 +0000
Manifest next update: Sat 14 Mar 2026 08:07:57 +0000
Files and hashes: 1: gMq7xd4_e5Mn6sTbqNk2U6EiIQA.crl (hash: 7HUtbf5gJCB2di7qSGW4bwm/d48NUp9zof2hc9kmgo0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B3316/2068C062F2C411F08B84E445396F56BC/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.crl
rsync://rpki.apnic.net/member_repository/A91B3316/2068C062F2C411F08B84E445396F56BC/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 02:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49 (0x31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3316, serialNumber=80CABBC5DE3F7B9327EAC4DBA8D93653A1222100
Validity
Not Before: Mar 7 08:07:57 2026 GMT
Not After : Mar 14 08:07:57 2026 GMT
Subject: CN=69abdcdd-6c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:72:e5:3c:51:09:86:ec:e8:c1:ce:89:21:c0:
8f:09:6a:43:5e:e4:e0:7f:e7:46:5d:7c:5d:92:db:
fb:64:95:5e:f2:b6:26:78:7c:ba:ec:4b:c0:d7:eb:
66:9c:85:4d:5f:6a:2c:f3:34:b6:0e:a9:fc:ff:4a:
12:4d:03:24:f7:89:a2:b7:d8:c0:a7:bb:5c:de:59:
d6:3c:49:38:3b:21:d8:b5:bb:a9:56:66:fb:2e:ce:
ab:4e:e9:7b:27:6b:7d:0d:75:2d:e2:e7:20:64:0d:
5c:4f:5d:2a:a1:8e:6d:f7:81:50:36:97:47:ef:48:
f8:cf:0c:70:57:52:22:52:7a:e2:43:7f:b4:7f:38:
05:15:a5:40:5c:77:e3:5e:11:b7:ca:82:4a:e1:4e:
db:88:f9:35:9a:b8:2e:95:a7:a0:d0:c7:a3:2d:01:
2c:13:98:f4:0a:98:d5:59:bc:2d:00:4b:7f:23:0f:
f4:da:35:1d:99:72:09:83:f3:fb:2a:6e:8a:48:2f:
e5:da:2a:37:3f:bf:cc:65:55:ef:98:64:a3:f8:53:
a8:0e:7f:a7:39:e5:65:0d:49:f3:c5:3a:67:55:8a:
04:63:93:0d:a2:75:6d:f1:eb:38:39:e0:99:ef:eb:
72:b5:ca:69:a8:2f:bd:f8:ab:ad:a3:54:2d:b8:b9:
a1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:45:F7:A8:DE:E0:F2:84:01:4F:2A:96:B7:03:8F:DD:CE:07:89:79
X509v3 Authority Key Identifier:
keyid:80:CA:BB:C5:DE:3F:7B:93:27:EA:C4:DB:A8:D9:36:53:A1:22:21:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3316/2068C062F2C411F08B84E445396F56BC/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3316/2068C062F2C411F08B84E445396F56BC/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:39:5b:67:05:d3:cc:38:29:7d:74:9b:2d:4b:b4:2d:86:31:
3d:2c:d9:7b:69:f3:d3:0f:54:23:bb:b2:9d:d1:80:af:a5:d9:
3d:fc:e8:9c:c5:2d:9f:94:c9:ac:b7:d8:c8:bc:75:49:11:15:
79:66:ea:67:a4:88:67:6f:c8:ca:10:82:d1:56:53:99:57:f0:
cb:1e:3d:17:62:40:84:65:22:2f:8f:8b:d2:98:fb:c0:d5:42:
e4:0d:69:f6:b0:db:c6:06:fc:e9:fa:59:5c:c3:b5:c3:2b:4f:
a6:95:ab:48:85:ac:81:41:42:79:81:a1:d5:88:5d:d7:46:53:
69:cd:bd:b0:00:2e:be:7b:79:53:37:cb:14:ee:89:68:f8:75:
f5:7a:31:8a:d4:bb:16:cb:d8:80:b9:cf:1f:76:a3:8f:68:9d:
cd:22:9e:08:e3:47:1b:5f:ad:e9:61:ee:da:58:e5:ca:66:a1:
29:d2:16:64:e2:a6:c3:18:14:8d:10:14:f8:19:f3:26:e0:d7:
38:be:97:08:94:41:b0:c7:12:cc:1f:76:e2:12:8c:d9:d8:1b:
de:b8:9d:0d:82:6a:15:b2:30:25:10:7e:46:55:70:7f:43:a5:
07:aa:1f:a6:03:7d:32:26:b7:78:7a:c8:85:72:3f:b8:9b:cf:
a3:ca:47:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 14:36:12 2026 by rpki-client