
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.mft
File: G4nCebixZmmNK-SGc-zMKwgTPjk.mft (raw, json)
Hash identifier: mB1csRnUhk4a+VGCNyFxdL6KiLjczXKsxn4f9/zngOc=
Subject key identifier: 25:C3:AC:DA:A1:28:87:9A:B1:1F:B2:44:4E:E2:6A:52:A6:41:5F:F1
Authority key identifier: 1B:89:C2:79:B8:B1:66:69:8D:2B:E4:86:73:EC:CC:2B:08:13:3E:39
Certificate issuer: /CN=A91FCEB1/serialNumber=1B89C279B8B166698D2BE48673ECCC2B08133E39
Certificate serial: 07A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4nCebixZmmNK-SGc-zMKwgTPjk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.mft
Manifest number: 28D2
Signing time: Sat 04 Apr 2026 15:51:49 +0000
Manifest this update: Sat 04 Apr 2026 15:51:49 +0000
Manifest next update: Sat 11 Apr 2026 15:51:49 +0000
Files and hashes: 1: G4nCebixZmmNK-SGc-zMKwgTPjk.crl (hash: a6jR4folrxY3Z+P7w6v0ZeNol59EGsK6/eXVnQCqpXw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.crl
rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4nCebixZmmNK-SGc-zMKwgTPjk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 15:51:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1958 (0x7a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FCEB1, serialNumber=1B89C279B8B166698D2BE48673ECCC2B08133E39
Validity
Not Before: Apr 4 15:51:49 2026 GMT
Not After : Apr 11 15:51:49 2026 GMT
Subject: CN=69d13395-d825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fa:37:e6:d8:34:50:18:e4:90:6b:d9:d7:d0:
05:8b:2c:f1:a5:6f:51:ae:ef:6d:92:8f:b6:14:1a:
65:a3:5b:72:28:4a:38:0b:7f:85:3b:df:4b:f0:a5:
97:26:9f:8e:0f:61:2a:2a:dd:5d:ba:06:1f:6d:d1:
4c:6d:18:af:08:0e:86:5b:e7:2d:9b:60:cc:a0:34:
2d:20:de:17:fe:ea:43:c4:8a:db:2b:4e:77:c3:69:
17:a8:85:77:dd:2a:79:4e:d6:9d:9e:98:73:e3:29:
23:02:61:00:48:0d:9a:4f:24:6f:35:ce:da:34:45:
67:0d:62:bf:ca:7e:24:15:d8:2c:43:cf:a2:77:bd:
96:c9:cd:40:1b:a5:d2:cf:c0:35:23:ef:f4:96:7b:
22:ff:b9:22:6b:7a:a2:eb:3f:a6:72:96:9e:61:b1:
5f:62:a2:47:64:72:2c:b8:95:0f:11:34:3b:ff:34:
8d:05:ec:97:94:3a:f0:67:8f:78:b7:c4:81:01:c2:
79:30:1b:37:e7:2b:72:ed:d2:87:0f:47:bd:28:cf:
43:8c:4a:c8:18:8b:82:80:aa:2a:75:30:9e:fd:3f:
00:25:73:b3:7d:57:d4:85:f7:4a:c7:3c:b2:00:c3:
f1:a2:9b:a5:69:21:47:20:9f:c6:f9:cf:ef:03:d3:
7d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C3:AC:DA:A1:28:87:9A:B1:1F:B2:44:4E:E2:6A:52:A6:41:5F:F1
X509v3 Authority Key Identifier:
keyid:1B:89:C2:79:B8:B1:66:69:8D:2B:E4:86:73:EC:CC:2B:08:13:3E:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4nCebixZmmNK-SGc-zMKwgTPjk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:7e:a2:36:c2:c4:48:16:df:d9:e5:49:99:39:0b:28:1f:23:
c1:13:5a:b8:84:af:32:02:13:fa:c2:37:2a:bb:db:cf:44:d2:
2e:14:d8:b9:83:49:68:16:1e:8f:eb:cb:93:7e:cb:ab:fc:23:
ab:86:57:58:b0:e6:2d:d7:0a:03:50:69:ca:63:a5:ea:e2:85:
25:f7:7d:d4:1e:41:9b:e2:5e:ed:48:92:a1:45:37:21:7d:a2:
ea:42:9c:a8:e1:45:50:fa:be:ba:f8:df:1c:d3:e3:32:4c:ad:
27:c4:eb:54:bf:1e:e0:ec:c4:36:3a:33:22:2f:e4:58:4d:86:
11:a2:18:dd:f6:8c:63:61:31:43:20:e0:ff:ff:c5:a8:8b:63:
3b:ff:f9:29:9b:16:0e:9a:f8:fe:de:75:bc:f6:60:71:e9:cb:
a6:30:6a:c3:c2:e9:2c:f9:9e:8d:a7:f9:86:14:15:d4:28:a8:
a2:92:b9:42:e6:46:c8:24:50:5c:9e:46:08:43:d0:8e:e7:3f:
a5:7b:12:06:a5:aa:d0:17:14:b9:f3:40:ec:54:33:86:e1:6f:
1b:7e:4b:34:8f:f2:bd:17:38:96:b5:89:b3:a7:9a:c8:c1:a5:
68:8d:37:f2:bb:74:87:da:1b:46:b2:27:c1:eb:ad:55:d7:7f:
05:56:3e:da
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB6YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkNFQjExMTAvBgNVBAUTKDFCODlDMjc5QjhCMTY2Njk4RDJCRTQ4NjczRUNDQzJC
MDgxMzNFMzkwHhcNMjYwNDA0MTU1MTQ5WhcNMjYwNDExMTU1MTQ5WjAYMRYwFAYD
VQQDEw02OWQxMzM5NS1kODI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlvo35tg0UBjkkGvZ19AFiyzxpW9Rru9tko+2FBplo1tyKEo4C3+FO99L8KWX
Jp+OD2EqKt1dugYfbdFMbRivCA6GW+ctm2DMoDQtIN4X/upDxIrbK053w2kXqIV3
3Sp5Ttadnphz4ykjAmEASA2aTyRvNc7aNEVnDWK/yn4kFdgsQ8+id72Wyc1AG6XS
z8A1I+/0lnsi/7kia3qi6z+mcpaeYbFfYqJHZHIsuJUPETQ7/zSNBeyXlDrwZ494
t8SBAcJ5MBs35yty7dKHD0e9KM9DjErIGIuCgKoqdTCe/T8AJXOzfVfUhfdKxzyy
AMPxopulaSFHIJ/G+c/vA9N92wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCXDrNqh
KIeasR+yRE7ialKmQV/xMB8GA1UdIwQYMBaAFBuJwnm4sWZpjSvkhnPszCsIEz45
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0VCMS9FRkI4NzVDODA4
QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9HNG5DZWJpeFptbU5LLVNHYy16TUt3Z1RQ
amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0c0bkNlYml4Wm1tTkstU0djLXpNS3dnVFBqay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
Q0VCMS9FRkI4NzVDODA4QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9HNG5DZWJpeFpt
bU5LLVNHYy16TUt3Z1RQamsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjn6iNsLESBbf2eVJmTkLKB8jwRNauISvMgIT+sI3Krvbz0TSLhTYuYNJaBYe
j+vLk37Lq/wjq4ZXWLDmLdcKA1BpymOl6uKFJfd91B5Bm+Je7UiSoUU3IX2i6kKc
qOFFUPq+uvjfHNPjMkytJ8TrVL8e4OzENjozIi/kWE2GEaIY3faMY2ExQyDg///F
qItjO//5KZsWDpr4/t51vPZgcenLpjBqw8LpLPmejaf5hhQV1CioopK5QuZGyCRQ
XJ5GCEPQjuc/pXsSBqWq0BcUufNA7FQzhuFvG35LNI/yvRc4lrWJs6eayMGlaI03
8rt0h9obRrInweutVdd/BVY+2g==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:32:02 2026 by rpki-client