
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91393AF/3CBD07F8995B11F1BE0CE0905811F970/gadKy_Wfp1IOzmzFxDYnqb2qcq0.mft
File: gadKy_Wfp1IOzmzFxDYnqb2qcq0.mft (raw, json)
Hash identifier: 3DO4f0kO9mRhN1HfPjp6/gTNwqm1BUStoAqnhcTsV1E=
Subject key identifier: 1E:69:89:D7:73:27:A5:F6:87:27:8D:93:94:F6:0E:E3:34:49:5B:8D
Authority key identifier: 81:A7:4A:CB:F5:9F:A7:52:0E:CE:6C:C5:C4:36:27:A9:BD:AA:72:AD
Certificate issuer: /CN=A91393AF/serialNumber=81A74ACBF59FA7520ECE6CC5C43627A9BDAA72AD
Certificate serial: 17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gadKy_Wfp1IOzmzFxDYnqb2qcq0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91393AF/3CBD07F8995B11F1BE0CE0905811F970/gadKy_Wfp1IOzmzFxDYnqb2qcq0.mft
Manifest number: 17
Signing time: Fri 25 Sep 2026 09:10:43 +0000
Manifest this update: Fri 25 Sep 2026 09:10:42 +0000
Manifest next update: Fri 02 Oct 2026 09:10:42 +0000
Files and hashes: 1: gadKy_Wfp1IOzmzFxDYnqb2qcq0.crl (hash: d+2VNTgkUhErW9K5mcoJv2OUQ1OzzPb+xHhcesSninU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91393AF/3CBD07F8995B11F1BE0CE0905811F970/gadKy_Wfp1IOzmzFxDYnqb2qcq0.crl
rsync://rpki.apnic.net/member_repository/A91393AF/3CBD07F8995B11F1BE0CE0905811F970/gadKy_Wfp1IOzmzFxDYnqb2qcq0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gadKy_Wfp1IOzmzFxDYnqb2qcq0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 09:10:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23 (0x17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91393AF, serialNumber=81A74ACBF59FA7520ECE6CC5C43627A9BDAA72AD
Validity
Not Before: Sep 25 09:10:42 2026 GMT
Not After : Oct 2 09:10:42 2026 GMT
Subject: CN=6ab63a92-7da6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:17:1d:98:2e:d5:7e:37:95:32:a7:90:2e:ac:
36:20:c1:e6:93:6a:aa:3d:01:e7:4b:8d:1a:53:a6:
0f:ed:90:d1:cc:c0:fd:52:2e:44:4a:20:95:5f:a6:
8a:f0:9d:3d:78:15:22:2e:20:d7:2d:d0:2c:e7:bd:
33:bf:63:61:d0:0f:50:17:3f:e8:ac:bc:31:9f:78:
48:ac:b8:1d:73:0c:bc:f5:25:b1:d7:69:2a:ea:55:
2c:60:a4:fb:b7:e4:84:4e:94:78:11:5a:b0:c7:2d:
c7:72:e0:93:48:e4:e5:13:f2:59:1d:2d:43:31:90:
59:ae:db:c4:05:33:24:b0:8a:11:9a:22:43:4a:63:
63:26:dd:0e:e3:0b:83:e2:53:1f:fd:d7:67:4f:33:
7f:3b:b6:b9:96:24:af:8d:cb:c6:6f:12:0d:9f:76:
74:07:85:00:0a:c5:7d:20:53:de:fe:69:03:b7:2f:
11:11:3a:03:11:a2:c2:e5:22:72:bb:a7:1c:20:ab:
84:70:6b:e7:d3:a2:a7:91:1e:80:dd:62:33:76:05:
f5:a9:21:2f:59:f2:bb:7a:9d:cd:65:46:a8:9c:f7:
e1:0b:ad:9b:82:46:69:5b:1c:28:7d:b8:e7:59:9a:
55:9d:99:1c:e4:54:0e:0f:39:30:10:a0:d1:2b:54:
88:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:69:89:D7:73:27:A5:F6:87:27:8D:93:94:F6:0E:E3:34:49:5B:8D
X509v3 Authority Key Identifier:
keyid:81:A7:4A:CB:F5:9F:A7:52:0E:CE:6C:C5:C4:36:27:A9:BD:AA:72:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91393AF/3CBD07F8995B11F1BE0CE0905811F970/gadKy_Wfp1IOzmzFxDYnqb2qcq0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gadKy_Wfp1IOzmzFxDYnqb2qcq0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91393AF/3CBD07F8995B11F1BE0CE0905811F970/gadKy_Wfp1IOzmzFxDYnqb2qcq0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:8c:18:d7:7f:e8:7a:1d:98:4a:53:03:34:cb:ff:90:b0:ce:
60:9a:57:03:8b:cd:c0:85:2c:a5:68:3c:db:5e:00:28:03:37:
bf:e7:6f:14:19:2b:4b:17:a8:11:ed:2d:f8:6a:5a:52:2f:fb:
3e:02:1e:2c:34:de:bc:98:58:3b:30:91:51:19:c3:e8:30:89:
d9:85:08:21:65:0c:d2:25:ba:fa:fd:aa:58:98:ae:6f:ac:b0:
ce:b1:42:5b:8e:97:ee:43:ee:d2:2f:69:7d:04:b7:82:62:d6:
aa:dd:0d:ef:23:44:38:c7:46:29:44:d6:79:5d:20:10:2b:7c:
82:d8:85:1e:00:b7:b1:10:3c:92:e2:e2:de:81:75:23:6d:97:
23:77:72:94:e4:a2:8a:70:70:ee:98:09:a9:ad:56:a6:e1:f8:
d3:38:3e:6c:62:36:e3:33:c3:4a:da:03:9c:24:44:8f:98:26:
78:92:8f:2e:7c:ae:e0:30:86:ad:23:4f:78:68:64:05:e4:e6:
7d:cf:c2:fa:fe:6e:cc:2c:3e:c1:1f:c9:c6:90:95:c7:56:eb:
dd:55:ab:c8:f0:41:91:87:da:75:69:5a:ab:59:ec:6c:6d:52:
75:4a:01:53:f8:5b:29:41:78:fe:fa:71:0e:49:6e:7b:a5:d1:
c5:2f:17:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:40:08 2026 by rpki-client