
$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft
File: GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft (raw, json)
Hash identifier: dwf6pxtUt3u9to6kQtNg7DgcWBJp6cHdBCQKRLlx25k=
Subject key identifier: B9:59:54:27:B3:CA:31:70:22:F4:CE:42:0B:28:07:48:90:1F:7B:74
Authority key identifier: 19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17
Certificate issuer: /CN=A91991D3/serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17
Certificate serial: 0255
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft
Manifest number: 0223
Signing time: Fri 17 Apr 2026 01:50:59 +0000
Manifest this update: Fri 17 Apr 2026 01:50:59 +0000
Manifest next update: Fri 24 Apr 2026 01:50:59 +0000
Files and hashes: 1: GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl (hash: jcWaE6dCo3ZN7eFyeVgykSyGZVygxwnICyEBDnxDLzQ=)
2: 926A40AC205E11F0A7552513C4F9AE02.roa (hash: YKiXx5HCj2zwN3jfK9q5GakLYQcoFw4kl98GWbjUs9o=)
3: 12D4E3D41AA411F0A196BA66C4F9AE02.roa (hash: Wb9fqxh/2GhJbzzPZAroheRX0Q4IRD6pGw48st/qKjM=)
4: 96FAA6BA2DBF11F1A3BE1D0DAB833773.roa (hash: e8yxWxSmmRPk+ltdy8gP6pzlZlCCw4QZs3be9NGpjEQ=)
5: F250438EF44011F0A1A516A45F6F56BC.roa (hash: 39UXrQgnsrOoQwxWVU9MQlKYuieI5NM5dujARlQugR8=)
6: 6E1C49FA031811F1BA97C916183D8C67.roa (hash: lJOk2wev4MkzbOS+niqS+uVfAej8rZrkP6By/CI08sY=)
7: 1F388278205F11F0A895DE1EC4F9AE02.roa (hash: SPaCgDejvUx7FptJCD5UIANcqzATtL9+9X2RUGgGItI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl
rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:50:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 597 (0x255)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91991D3, serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17
Validity
Not Before: Apr 17 01:50:59 2026 GMT
Not After : Apr 24 01:50:59 2026 GMT
Subject: CN=69e19203-a762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f8:b4:db:f2:fa:fb:95:07:98:40:9e:8b:28:
4f:d1:b5:0a:d2:bf:7c:0c:73:89:9b:5e:a0:1c:23:
b1:6b:52:60:f4:11:b7:65:a9:58:1d:d6:95:07:9c:
df:c9:4e:0e:1d:5a:35:6c:13:26:06:95:dc:c3:10:
bb:45:c7:a7:0b:93:a5:c6:40:e8:a7:2e:a9:8e:d7:
8f:49:6c:87:cb:98:28:4a:c3:ab:38:69:f7:b5:6b:
bf:5b:7e:ee:15:f0:f0:c2:0a:65:3d:ff:ff:95:93:
ce:44:d7:f6:5b:dc:bf:eb:b2:3b:db:07:4c:73:f1:
8e:3e:70:0d:f0:0a:97:f8:5e:c2:6b:8c:eb:4a:27:
22:aa:35:92:4d:26:f0:aa:29:9e:3d:c8:2b:30:19:
00:1e:5a:d1:fa:e7:ca:1d:cb:e0:f1:59:e8:8c:f7:
ae:5d:cc:bb:bc:ca:63:6b:dc:48:24:e6:1d:b9:38:
f6:79:84:31:dd:9b:54:84:0b:f6:de:ad:25:90:9e:
2e:c1:46:bf:4f:96:b7:b6:79:61:36:4b:d5:ff:9d:
5b:05:d3:c7:e3:2a:c3:52:7c:33:34:10:32:06:cd:
3e:46:05:23:22:bd:a8:c2:b4:63:41:95:5b:a0:a9:
63:46:72:10:04:93:94:00:64:de:48:d5:5b:76:88:
01:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:59:54:27:B3:CA:31:70:22:F4:CE:42:0B:28:07:48:90:1F:7B:74
X509v3 Authority Key Identifier:
keyid:19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:07:5e:7e:e7:08:ee:eb:1b:ab:6f:3a:e3:c8:da:30:99:15:
aa:82:c6:6b:c2:ec:2f:b1:ec:1c:bc:07:4b:17:0b:a9:9b:07:
ac:e6:33:97:a6:7e:a0:d3:86:f7:3c:55:6c:1f:a9:2d:f4:42:
15:b1:03:2e:a4:46:07:52:86:7a:d3:c1:db:5d:64:92:24:c0:
63:42:1f:c1:64:e4:88:95:83:06:23:b4:3f:cb:26:b1:a3:a1:
29:d7:fe:84:0f:1e:75:da:a0:ab:0c:1c:b9:da:e0:55:d4:6f:
0b:e2:a8:6e:f5:b0:54:14:f8:98:c7:07:c0:d3:f8:ef:63:d2:
bd:2f:be:a8:81:60:6e:d8:5c:65:c1:79:8d:23:f0:af:8b:56:
9f:9e:65:f6:1e:ab:24:ca:ef:e9:25:ff:2a:12:f7:40:05:67:
51:06:a8:f2:9c:df:ad:fe:1f:88:04:40:d9:0b:cc:8f:e1:1e:
dc:73:09:a0:1f:e0:fe:61:e9:67:4e:c7:d4:ef:0b:3f:4e:09:
68:17:42:99:5c:e6:bb:ab:dd:bf:35:ff:71:07:67:e0:87:cf:
17:97:d9:ac:a9:c3:2b:52:de:5a:52:2c:8a:a9:c8:aa:f1:4a:
de:e2:17:ba:8c:2c:ca:30:cd:0e:76:b2:e6:6b:27:76:54:66:
ca:f3:86:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:44:52 2026 by rpki-client