
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft
File: GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft (raw, json)
Hash identifier: cA/3HjMKAabDR9sjOoPDc5IbtZxNAR7+YvmULyHRC70=
Subject key identifier: 21:1C:C5:78:B6:0B:41:23:1A:F2:39:82:9F:62:2B:7B:9F:97:63:E8
Authority key identifier: 19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17
Certificate issuer: /CN=A91991D3/serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17
Certificate serial: 02B4
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft
Manifest number: 027F
Signing time: Fri 09 Oct 2026 01:45:22 +0000
Manifest this update: Fri 09 Oct 2026 01:45:21 +0000
Manifest next update: Fri 16 Oct 2026 01:45:21 +0000
Files and hashes: 1: GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl (hash: 0PBv5QJOyfCK95KWybvXZa8vhvIN4fz1CBpCNxMz5yU=)
2: 12D4E3D41AA411F0A196BA66C4F9AE02.roa (hash: Wb9fqxh/2GhJbzzPZAroheRX0Q4IRD6pGw48st/qKjM=)
3: 1F388278205F11F0A895DE1EC4F9AE02.roa (hash: 3fG2xSQYFFInAFhuIsOyJ8jvQ4PTgeRTg6IF8vTLUVw=)
4: F250438EF44011F0A1A516A45F6F56BC.roa (hash: 39UXrQgnsrOoQwxWVU9MQlKYuieI5NM5dujARlQugR8=)
5: 96FAA6BA2DBF11F1A3BE1D0DAB833773.roa (hash: e8yxWxSmmRPk+ltdy8gP6pzlZlCCw4QZs3be9NGpjEQ=)
6: 926A40AC205E11F0A7552513C4F9AE02.roa (hash: YKiXx5HCj2zwN3jfK9q5GakLYQcoFw4kl98GWbjUs9o=)
7: 6E1C49FA031811F1BA97C916183D8C67.roa (hash: Ih1eHSX5Tc/5vdlyW9LDswTRplGY8S174GyJpWgveNI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl
rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 01:45:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 692 (0x2b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91991D3, serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17
Validity
Not Before: Oct 9 01:45:21 2026 GMT
Not After : Oct 16 01:45:21 2026 GMT
Subject: CN=6ac84732-19f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:38:10:f0:f9:e5:ab:a6:b1:b4:29:0f:b6:4b:
ca:79:61:1c:5b:42:20:3d:35:f4:01:81:a0:1b:57:
86:0e:bb:08:10:fb:d0:5e:02:95:c8:fa:49:f4:3f:
02:88:c6:8d:29:c0:1c:18:42:6e:c2:55:9c:c2:e0:
d1:7c:68:bc:03:da:27:e2:ab:e4:9c:cf:af:01:cf:
12:36:64:07:ed:15:9c:b3:23:14:0a:cb:84:d5:38:
f0:d5:88:4f:1b:e4:81:04:5a:a7:89:4a:0f:d4:e9:
34:38:f0:cb:41:69:70:22:ba:e4:df:35:1a:0d:56:
97:61:bf:f4:51:be:46:f6:09:8f:ba:12:c4:99:80:
5a:a5:79:51:f7:4e:72:6a:4c:a2:1b:ed:6e:3e:ba:
75:4c:5c:fe:ad:9f:0b:2e:81:41:47:53:3e:d2:5d:
93:1a:f4:e3:a6:24:b5:5a:9d:b8:1c:98:fe:b1:df:
1c:53:f5:81:86:79:8a:1d:bc:03:11:fb:d5:7a:c2:
06:a7:69:91:9a:f5:99:6f:31:56:56:b7:95:a3:e2:
5d:40:75:c2:e5:3e:69:80:5f:0e:58:30:d8:87:f4:
a7:8b:b8:37:e9:fe:a0:f0:7e:1b:86:e9:81:f5:4b:
eb:b1:c6:98:9b:b6:ea:28:17:b5:6a:0b:e8:53:dd:
d0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:1C:C5:78:B6:0B:41:23:1A:F2:39:82:9F:62:2B:7B:9F:97:63:E8
X509v3 Authority Key Identifier:
keyid:19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:83:25:f7:e8:6b:18:0d:1f:91:7a:bf:98:9d:36:e8:05:a5:
c8:ce:84:f4:6b:da:68:c5:cc:0e:44:b1:3a:f8:30:8d:78:25:
d3:c2:07:0f:ce:e2:a2:ae:d9:ed:40:7a:8b:bf:f2:a3:26:e9:
59:80:26:9c:b4:7b:0c:38:41:30:fa:63:35:ef:8b:64:97:a7:
aa:77:32:24:0b:99:6c:43:d9:02:4a:f1:0c:06:56:d8:87:37:
36:34:9d:a7:31:cd:35:fd:5c:09:17:59:a0:45:e6:03:3d:19:
3a:8b:32:2c:f4:34:45:8e:d0:8f:a7:98:96:13:25:fd:eb:36:
a3:10:f5:d9:79:29:d1:5e:c4:14:5a:c2:4a:23:55:6b:55:9d:
4b:0a:f6:fd:55:eb:8d:72:f8:ac:c3:24:67:f8:c6:1d:2e:eb:
a8:90:00:f8:5b:74:1a:7c:35:76:23:b7:ad:d6:1f:50:21:e4:
90:05:8e:2d:f7:03:89:ef:6e:08:f9:ec:92:f5:9b:ab:11:c8:
a4:c2:a0:2e:75:85:56:96:1a:26:49:71:d1:40:f9:87:19:28:
04:b1:68:59:c2:5d:9f:0b:9c:97:3f:d8:b0:2e:9c:02:24:d4:
d3:3f:51:a3:7f:a5:0a:1e:59:0d:e3:cb:9e:49:28:d1:04:7a:
6c:2b:05:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 23:05:50 2026 by rpki-client