
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft
File: GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft (raw, json)
Hash identifier: jRyuCPmI4POqxco3FEpcbIfujZMp8+jB3HGt7mFxaC4=
Subject key identifier: 39:35:D6:F8:EF:02:AA:3E:F7:78:40:1C:4E:E3:D1:40:DC:89:98:CE
Authority key identifier: 18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B
Certificate issuer: /CN=A91DDCB6/serialNumber=18DC531D44F05962E97F23845736141D3E02681B
Certificate serial: 0742
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft
Manifest number: 0730
Signing time: Fri 06 Mar 2026 20:07:16 +0000
Manifest this update: Fri 06 Mar 2026 20:07:16 +0000
Manifest next update: Fri 13 Mar 2026 20:07:16 +0000
Files and hashes: 1: GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl (hash: BPxCcMcaELns6PaKYSUHVJ0P0NuUJuGVWQk4WlrQe74=)
2: 00756F7E63F011EC987F5B19C4F9AE02.roa (hash: NJ2yttVg/1tKklwG0b4mf3B8YWLlDm4GZ+hgK2zNvsU=)
3: 48D65BC2D28F11EB9F83683DC4F9AE02.roa (hash: PKuAHlg7IDQmqtBcmxC313Us4ZuOMAlQSrtZq4f+5Bg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl
rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 20:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1858 (0x742)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DDCB6, serialNumber=18DC531D44F05962E97F23845736141D3E02681B
Validity
Not Before: Mar 6 20:07:16 2026 GMT
Not After : Mar 13 20:07:16 2026 GMT
Subject: CN=69ab33f4-f269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b7:a5:8d:fe:c0:62:30:0c:ef:83:e6:13:0b:
8a:f6:9a:6f:dd:d4:9b:ca:ec:59:8f:a9:f5:4e:06:
08:2e:88:26:f1:8a:e7:bc:63:47:87:9a:93:eb:9e:
31:c8:63:15:59:6c:31:48:d7:7c:05:4b:98:15:d9:
d9:f1:7c:63:02:46:20:00:f4:43:13:17:01:02:e5:
92:5c:93:b8:11:34:9b:6d:36:b4:06:58:24:92:70:
2a:44:41:4d:95:9b:e0:79:57:c9:87:7b:b7:44:0f:
fa:b1:87:54:4a:e8:6e:f6:c4:8c:68:20:3f:d3:f5:
61:50:9b:88:38:c5:11:f4:51:3e:12:b8:12:55:78:
b2:31:f8:41:d0:23:67:9c:fd:cf:93:c2:85:b9:a2:
35:11:7d:3a:22:fe:36:9f:b4:dd:a5:f9:61:50:77:
bf:a0:a5:82:52:b9:cb:16:f2:d2:e1:54:9e:9b:ff:
c3:cf:73:e3:4a:64:73:e7:c3:ed:40:e9:58:cb:08:
30:ab:2f:e0:5f:b4:97:38:c8:86:9b:19:9e:cc:1c:
46:42:f8:39:5f:fe:fa:29:32:ba:b8:4a:3c:f2:76:
d6:c1:2d:be:ad:0a:b2:9c:02:a4:4d:d7:d6:06:ca:
0e:cf:fa:2a:4e:67:de:4b:29:53:1f:8a:ff:1f:f2:
fe:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:35:D6:F8:EF:02:AA:3E:F7:78:40:1C:4E:E3:D1:40:DC:89:98:CE
X509v3 Authority Key Identifier:
keyid:18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:45:b7:d1:ca:47:0a:92:69:a2:19:69:52:5e:8b:bc:d2:99:
89:a9:53:72:50:17:d1:30:43:50:19:51:10:16:01:9a:f3:c6:
be:bc:f4:68:e9:01:05:f1:ce:b8:01:b9:2b:e5:d1:c9:1e:d9:
f7:23:3a:87:ff:32:db:7d:8e:78:d3:6e:43:34:bf:1f:1a:7f:
64:be:a2:0b:be:fc:cc:03:5d:56:b6:f8:2d:ed:3b:3e:c4:72:
7f:bc:b5:de:ac:c4:fa:10:54:42:42:a3:12:71:42:d2:10:a2:
13:b0:44:43:7d:c9:e3:ae:e7:08:81:a9:95:aa:cc:e8:b5:4b:
44:4d:8e:2d:68:1c:81:6b:58:8e:a5:f7:44:a4:05:b4:eb:74:
56:5d:df:61:3a:b0:42:18:80:08:33:72:98:d2:3c:b0:0a:35:
3d:cd:59:ca:3b:d6:68:95:71:8e:e0:39:80:79:76:4a:00:26:
3c:76:d7:40:29:16:2b:34:88:17:59:50:56:93:5a:44:41:17:
e5:a9:5f:45:c4:16:5f:b3:53:4c:a9:24:f2:04:08:f9:ff:89:
8d:03:85:27:d2:8d:57:53:51:13:06:5d:9e:89:31:70:82:79:
31:da:89:23:61:67:a5:83:2c:6f:58:20:1c:28:28:ee:f3:c7:
23:9b:9f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 14:35:36 2026 by rpki-client