
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft
File: g4L2GIxKbdZpVNVxij2cz5uL-JU.mft (raw, json)
Hash identifier: cfUslvQGxUxX3C/LQHEcvxO6/QoGhE1+wlYRrFIf1TQ=
Subject key identifier: 22:D5:AF:CC:04:0D:10:01:4E:75:20:39:C0:0D:55:16:E4:AB:F7:1B
Authority key identifier: 83:82:F6:18:8C:4A:6D:D6:69:54:D5:71:8A:3D:9C:CF:9B:8B:F8:95
Certificate issuer: /CN=A91CB8BA/serialNumber=8382F6188C4A6DD66954D5718A3D9CCF9B8BF895
Certificate serial: 087F
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/g4L2GIxKbdZpVNVxij2cz5uL-JU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft
Manifest number: 0872
Signing time: Fri 06 Mar 2026 19:54:49 +0000
Manifest this update: Fri 06 Mar 2026 19:54:49 +0000
Manifest next update: Fri 13 Mar 2026 19:54:49 +0000
Files and hashes: 1: g4L2GIxKbdZpVNVxij2cz5uL-JU.crl (hash: 6/prjjFKdDJFbSQNt+m2cqJN3ocGGQxl9Mw5IuqSuf8=)
2: 21B96F2E7BC911EBABCF472DC4F9AE02.roa (hash: i37T+miB19JllsQUkIFRFN9qItWKSwoaTSynWV3QKsI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.crl
rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/g4L2GIxKbdZpVNVxij2cz5uL-JU.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 19:54:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2175 (0x87f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB8BA, serialNumber=8382F6188C4A6DD66954D5718A3D9CCF9B8BF895
Validity
Not Before: Mar 6 19:54:49 2026 GMT
Not After : Mar 13 19:54:49 2026 GMT
Subject: CN=69ab3109-6602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:82:1e:2e:5b:cf:0c:16:44:98:e3:3e:63:e0:
93:bd:81:84:eb:89:24:18:ce:e0:d8:c1:15:e6:b1:
1c:a5:d6:f8:08:3c:e3:15:95:21:fa:52:df:34:8c:
40:51:ed:c0:58:b7:be:cc:a8:5f:d3:da:55:8f:de:
0f:dc:88:2e:bb:21:e4:51:bc:c5:5a:8c:65:dd:21:
08:94:ae:a6:b1:d8:90:f6:ff:70:8c:3d:48:32:e6:
26:f9:c2:d9:93:f8:61:37:c7:16:29:42:81:52:ec:
41:98:61:65:c0:cc:60:fb:44:65:78:db:01:2c:18:
75:62:11:d4:cd:ca:7b:58:94:9c:db:7f:af:1f:67:
1f:c6:71:7a:1e:4a:94:e0:55:c4:60:db:49:6d:a0:
01:38:60:21:08:b8:86:c5:26:39:2f:71:e3:58:cc:
fd:d7:b8:fe:93:98:dc:8f:72:69:89:c7:2d:a3:7a:
b3:9d:37:6e:c8:38:76:05:f6:da:f8:97:60:fe:2a:
fb:53:54:34:8d:2e:c9:be:4e:74:ae:67:9d:b5:00:
40:9e:e8:1b:59:7a:11:63:46:c2:00:09:1f:ff:1a:
53:6a:df:37:7d:31:bb:7e:06:f9:7d:ff:49:ae:6a:
60:da:c8:80:1e:95:12:32:ab:de:cd:d9:f7:17:ca:
81:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D5:AF:CC:04:0D:10:01:4E:75:20:39:C0:0D:55:16:E4:AB:F7:1B
X509v3 Authority Key Identifier:
keyid:83:82:F6:18:8C:4A:6D:D6:69:54:D5:71:8A:3D:9C:CF:9B:8B:F8:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/g4L2GIxKbdZpVNVxij2cz5uL-JU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:cf:80:a1:58:bc:db:3a:7d:91:aa:e5:78:48:65:e9:b9:09:
6b:a9:9e:9d:ee:3b:e1:ce:c8:9b:1f:0d:e3:65:d3:f7:0e:f8:
a9:3b:74:94:98:42:b8:97:be:79:81:85:42:97:3d:58:38:d8:
81:63:d2:1c:48:45:a7:c2:39:18:82:d4:cb:f5:c3:f6:2d:eb:
84:51:f7:30:88:01:0f:ef:5d:9b:a8:da:9e:f1:d8:c1:6a:1a:
66:eb:4b:b8:b2:9c:2d:3d:aa:f0:fc:63:57:13:fb:fe:f3:f2:
ec:d3:e7:e0:84:94:26:bb:b8:15:e1:ef:57:ac:18:20:87:b3:
c6:e4:9e:69:3c:ef:9d:85:a8:72:5e:0e:ca:cb:d3:da:9f:34:
c7:98:5e:04:1c:df:4d:63:09:d3:1a:2a:1a:79:f6:76:f7:7f:
0b:33:7b:27:5f:3f:7c:92:98:71:a6:48:dc:03:69:90:91:4f:
f9:d2:f4:a2:09:17:51:b5:39:26:83:fa:66:d7:0e:d1:c8:4f:
40:a7:a6:49:a5:a8:fb:9b:03:1d:7f:c2:14:9c:97:21:a9:2b:
9e:2a:51:62:5a:5e:8f:9f:71:14:d6:ac:b6:8e:4f:a7:b0:85:
93:aa:ef:e9:2e:b3:70:02:52:c3:40:ec:2e:93:cd:c4:a8:09:
6a:12:d5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 14:37:15 2026 by rpki-client