
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.mft
File: Gg0L-hkZEfhVtbq9-gO5wH_dIoI.mft (raw, json)
Hash identifier: weblQU6717zIsEOiizW0qO2R0JY0ove0b7XtxSklov4=
Subject key identifier: E4:DE:9B:EC:6E:D5:AD:77:23:10:51:FA:B5:EB:60:0D:5B:89:7D:04
Authority key identifier: 1A:0D:0B:FA:19:19:11:F8:55:B5:BA:BD:FA:03:B9:C0:7F:DD:22:82
Certificate issuer: /CN=A91D3834/serialNumber=1A0D0BFA191911F855B5BABDFA03B9C07FDD2282
Certificate serial: 07DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.mft
Manifest number: 07C9
Signing time: Sat 04 Apr 2026 21:13:11 +0000
Manifest this update: Sat 04 Apr 2026 21:13:11 +0000
Manifest next update: Sat 11 Apr 2026 21:13:11 +0000
Files and hashes: 1: Gg0L-hkZEfhVtbq9-gO5wH_dIoI.crl (hash: Y2T9NA3eWO0lLW3aT7iO5RMPjmSV1j4IDWldbfn32BI=)
2: F26505A6A7EA11EF8CBCCF2CC4F9AE02.roa (hash: gFpOQJ7daM5uiSgk6tlT5tpNz4O4jsVXIh/45TS6lk4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.crl
rsync://rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 21:13:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2015 (0x7df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3834, serialNumber=1A0D0BFA191911F855B5BABDFA03B9C07FDD2282
Validity
Not Before: Apr 4 21:13:11 2026 GMT
Not After : Apr 11 21:13:11 2026 GMT
Subject: CN=69d17ee7-db99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5d:93:c3:e8:f8:64:77:a8:cc:ad:4c:a6:75:
45:93:49:3b:fe:77:8a:aa:de:95:79:4f:28:04:f7:
ed:18:2a:4d:46:80:36:97:10:dc:cc:7f:63:3a:c9:
36:21:17:8d:ab:ee:92:76:33:dc:64:34:c2:89:2e:
71:3b:99:c6:66:32:ad:6c:23:fe:d3:ab:41:dd:69:
5f:25:57:cb:98:22:a8:dc:9a:30:ab:e3:c0:f3:70:
2f:d4:c5:e8:ef:0e:48:39:49:db:ea:b1:20:51:2f:
1b:81:ce:c8:fe:f1:9c:f0:23:8f:50:c0:ac:4a:75:
d3:0b:59:bd:26:8a:b2:03:c0:a1:a3:c9:fa:37:2b:
58:3b:b7:cc:67:bb:43:36:bd:1c:ba:82:09:0e:13:
fe:8f:ca:05:ba:d1:9b:28:aa:b6:dc:ef:35:44:f8:
61:97:d4:ad:69:10:bf:eb:6d:6e:ba:ff:b3:1a:21:
94:6e:dc:55:06:d2:3e:20:2d:a9:c2:a4:f7:87:da:
a1:25:35:8d:9b:cb:6c:b0:73:39:31:43:a0:83:3e:
15:8f:1c:90:6b:4b:84:99:c9:4a:6d:81:f1:6c:97:
9b:08:8f:17:30:c2:79:6e:ae:0a:9a:6d:5f:58:f3:
a7:8a:59:ed:f6:cf:46:ee:cc:b2:88:a2:a7:ff:8d:
71:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:DE:9B:EC:6E:D5:AD:77:23:10:51:FA:B5:EB:60:0D:5B:89:7D:04
X509v3 Authority Key Identifier:
keyid:1A:0D:0B:FA:19:19:11:F8:55:B5:BA:BD:FA:03:B9:C0:7F:DD:22:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:c3:5e:a5:d6:91:2b:ae:34:dd:59:f1:e1:02:1c:4a:00:49:
fc:c3:db:28:5f:6e:22:f1:a8:7e:3c:98:f7:01:c0:ba:28:60:
6b:8b:e1:1c:1c:60:98:4f:3f:38:aa:49:f5:de:38:bd:ba:33:
47:d6:41:98:0b:5d:0b:c2:c1:00:81:7c:d5:2d:88:91:75:76:
76:4b:b6:74:f1:e2:1e:8d:8c:bd:57:32:29:bf:23:00:80:f6:
2f:8d:6c:9e:5b:3f:dc:3b:07:5b:65:5a:e4:0d:d3:32:5c:d4:
cb:e5:b7:ea:23:83:1d:f0:3a:db:62:1e:48:fb:90:ac:46:41:
43:b0:16:a4:17:72:d5:41:38:52:16:b4:c1:58:75:c0:cb:17:
3d:9d:60:9b:38:54:90:dd:f4:77:3a:ba:37:82:07:05:ac:13:
44:29:ee:0c:63:38:a3:16:35:47:f6:a8:6c:47:18:cb:cc:54:
11:24:c8:73:27:5c:ee:1e:42:88:6d:3d:43:8a:27:76:27:39:
05:a0:b7:9a:c0:cf:9e:62:ac:d8:13:05:cb:f5:a0:dd:e3:1f:
e8:ba:7f:98:68:ce:86:68:17:e8:b9:2b:ff:9e:e4:b3:e1:85:
70:60:88:ce:5d:c1:66:30:27:9a:eb:0a:72:84:77:e2:d7:b7:
8d:ca:a0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:38:10 2026 by rpki-client