
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
File: G1Zt71944xm_wNFADedV4mSoK7w.mft (raw, json)
Hash identifier: JxEeKUNUgi2rYxmT+BZNRg6bKF+jT/rFrhx+ZdNJfAU=
Subject key identifier: 51:09:D4:0F:97:52:4A:46:89:6A:9C:53:21:A3:1B:12:F2:E6:6E:0C
Authority key identifier: 1B:56:6D:EF:5F:78:E3:19:BF:C0:D1:40:0D:E7:55:E2:64:A8:2B:BC
Certificate issuer: /CN=A91C20AB/serialNumber=1B566DEF5F78E319BFC0D1400DE755E264A82BBC
Certificate serial: 0992
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
Manifest number: 0977
Signing time: Sat 04 Apr 2026 19:51:53 +0000
Manifest this update: Sat 04 Apr 2026 19:51:52 +0000
Manifest next update: Sat 11 Apr 2026 19:51:52 +0000
Files and hashes: 1: G1Zt71944xm_wNFADedV4mSoK7w.crl (hash: UOW7HUJUyUu3g/rgk2P1yFEpucGHHvdiKjhx7FnpNTw=)
2: 2979BC38B09411EAA964465EC4F9AE02.roa (hash: 3TgfJcKtVv25yE8b/IOKhDazNbjHxuANTNvhbFUhyMk=)
3: 28D36892B09411EAA964465EC4F9AE02.roa (hash: uB90XoJd0h+ZsfjSZb2jo0kKEK2zlo/T12QD2KhR6to=)
4: AB659244056211EBAE3DBC4CC4F9AE02.roa (hash: 6SFxnAYtEmDY0FSpqWSl0msvr8nqW/ZhQvTYvJBPZWo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.crl
rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 19:51:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2450 (0x992)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C20AB, serialNumber=1B566DEF5F78E319BFC0D1400DE755E264A82BBC
Validity
Not Before: Apr 4 19:51:52 2026 GMT
Not After : Apr 11 19:51:52 2026 GMT
Subject: CN=69d16bd8-8a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:55:a6:11:f0:12:7c:ff:9b:82:40:24:66:d8:
d1:a4:f4:82:96:4c:a5:57:ba:3f:36:0f:c6:82:cf:
00:ed:02:a7:73:d0:54:13:0c:c7:68:87:16:be:57:
0e:c3:3e:ce:a8:5e:aa:54:5d:bb:1b:a1:17:5a:6e:
2a:42:04:d1:a7:d4:23:cc:2b:13:ca:98:6e:73:fb:
c5:ee:51:98:6a:7c:74:f8:17:7f:b7:87:45:e6:70:
b7:9b:a8:ee:fd:18:25:6a:df:a2:f2:83:80:0e:c3:
b4:db:a2:9c:1b:12:3f:cd:d6:eb:8c:67:42:f5:65:
15:2e:89:d2:f4:4e:b5:d4:ba:c2:01:7b:74:73:ad:
ca:46:cb:15:0d:7e:da:57:0f:05:c4:e8:f4:e7:1b:
4e:a9:30:09:b5:f8:eb:8e:a0:56:99:d7:a6:8e:b0:
84:01:8b:e0:64:b4:b4:f9:59:44:19:da:1f:0d:5b:
10:9a:c9:e4:6b:12:28:22:c1:2c:16:70:2a:65:3a:
2a:96:fa:76:b6:18:27:9b:5a:4d:a3:e3:18:bc:6d:
c3:93:c8:a0:5e:39:bc:1f:d6:37:67:96:42:1d:db:
38:cf:e5:bb:db:fa:e3:18:48:23:65:13:c7:63:8b:
97:32:1f:28:17:2a:f6:3d:1a:bc:01:65:43:fc:3e:
13:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:09:D4:0F:97:52:4A:46:89:6A:9C:53:21:A3:1B:12:F2:E6:6E:0C
X509v3 Authority Key Identifier:
keyid:1B:56:6D:EF:5F:78:E3:19:BF:C0:D1:40:0D:E7:55:E2:64:A8:2B:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:0b:28:b2:c9:46:ef:88:af:63:f5:cc:cb:d2:2a:a7:59:f4:
e5:30:05:e9:9d:94:c2:1c:8d:d1:89:95:a4:20:b9:b4:97:79:
7f:ee:ce:d0:fd:ba:35:5c:3c:77:25:86:3d:36:7e:cf:08:38:
6b:59:35:57:e1:37:41:ec:f2:bf:b6:df:cd:1b:99:9a:74:5a:
3b:40:91:81:fc:96:a6:67:78:d1:af:0d:92:23:1b:25:6c:c5:
e0:7e:fe:e3:84:e3:b1:e1:37:9d:5c:52:00:d5:4e:c9:0c:d2:
eb:ce:43:f1:c3:eb:7b:d8:f1:e0:7b:95:9f:32:b4:a0:89:a8:
71:40:18:4c:5f:76:87:e9:e3:f0:59:28:6d:4b:5b:58:5a:70:
03:08:90:b4:09:3c:01:21:95:96:f0:5a:a3:70:88:75:3a:19:
e5:56:d2:5c:03:91:40:9a:ca:b6:20:df:e1:f1:84:df:bb:98:
74:d0:c9:e1:e0:79:7d:3b:1d:51:f8:b9:2e:48:bf:b4:bc:6e:
00:1b:5d:dd:95:d3:53:08:86:30:e8:f0:3a:39:28:25:a0:44:
dc:d3:04:9f:85:a7:ec:61:4b:09:c6:33:c2:e3:5e:50:31:15:
d5:d6:c6:f6:ae:57:a8:2b:3b:88:37:fe:ee:80:94:fb:53:db:
ce:2e:5a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:34 2026 by rpki-client