
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft
File: GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft (raw, json)
Hash identifier: TSdpTXMV44VJP/inplH3CxYIVoz0ytKdmXhdQhA3nQU=
Subject key identifier: 98:52:88:4F:97:48:8F:BC:C3:C0:BB:1B:E4:0A:22:FA:79:88:37:8E
Authority key identifier: 19:9D:4B:E0:60:8A:56:F5:04:80:C0:AD:26:45:DA:D7:B6:90:02:59
Certificate issuer: /CN=A91A470C/serialNumber=199D4BE0608A56F50480C0AD2645DAD7B6900259
Certificate serial: B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GZ1L4GCKVvUEgMCtJkXa17aQAlk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft
Manifest number: AF
Signing time: Mon 21 Sep 2026 07:19:03 +0000
Manifest this update: Mon 21 Sep 2026 07:19:02 +0000
Manifest next update: Mon 28 Sep 2026 07:19:02 +0000
Files and hashes: 1: GZ1L4GCKVvUEgMCtJkXa17aQAlk.crl (hash: X0OqwGJ1cVG6As3Ufi1AA2o5i1HtIqhGiVrAk4HQJaI=)
2: B53453C2961211F1A0325584A1EE528E.roa (hash: xJqVTb/PoXlS9Nw4K65VtvKl9hX152JntnAXbbPw/xs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.crl
rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GZ1L4GCKVvUEgMCtJkXa17aQAlk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:19:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181 (0xb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A470C, serialNumber=199D4BE0608A56F50480C0AD2645DAD7B6900259
Validity
Not Before: Sep 21 07:19:02 2026 GMT
Not After : Sep 28 07:19:02 2026 GMT
Subject: CN=6ab0da67-6389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:13:0a:37:88:76:63:33:0a:95:df:e4:6c:30:
01:22:0b:48:97:b7:36:02:b5:9c:b2:5a:5a:a2:7b:
c2:09:27:fd:a9:5f:d7:21:18:c6:fb:2b:5b:8d:64:
57:97:36:c0:00:e9:60:11:a3:cf:5c:d9:c4:08:fa:
9f:3d:af:99:cf:50:70:33:b5:ee:2e:c1:8f:e2:f7:
f6:a7:ac:b9:ac:fb:5a:1f:c8:5d:c0:6d:8a:05:b5:
a9:a0:d0:0a:f3:d3:33:c4:b8:b0:6b:eb:c7:dd:65:
e4:67:f6:3c:69:f6:d2:77:9a:d4:88:9a:c5:65:4e:
28:f1:0f:e2:06:f9:ff:74:2d:04:81:c9:d5:de:8d:
79:da:9f:fa:d1:2a:dd:d2:e7:87:62:dc:b8:8b:f4:
2f:8c:5a:8f:69:12:56:f6:4d:e8:7d:21:a4:e1:10:
dc:1d:10:48:47:e2:e2:45:88:16:28:5a:f6:1a:b8:
14:04:1a:43:6a:3a:67:23:78:78:25:9e:73:75:18:
8f:a3:cc:2b:1d:ba:eb:b7:fe:e8:12:60:62:0b:ff:
a8:08:73:d3:86:cc:bb:51:ef:a6:7c:f6:eb:9b:c6:
24:82:b4:4c:15:50:11:aa:23:36:d4:48:ee:1f:2f:
0f:8a:b7:ba:06:a6:76:eb:29:dc:32:77:29:e4:02:
64:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:52:88:4F:97:48:8F:BC:C3:C0:BB:1B:E4:0A:22:FA:79:88:37:8E
X509v3 Authority Key Identifier:
keyid:19:9D:4B:E0:60:8A:56:F5:04:80:C0:AD:26:45:DA:D7:B6:90:02:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GZ1L4GCKVvUEgMCtJkXa17aQAlk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:bd:b8:1b:63:0f:bb:b0:b8:0d:fd:76:16:97:e6:2e:15:fb:
a9:ea:c1:50:02:f9:7f:a3:ba:63:03:af:3b:5f:74:14:e0:bd:
8d:69:0e:36:ce:5c:bc:69:1b:41:94:76:d7:47:84:3d:b2:f8:
b7:6b:43:07:f4:e4:47:97:b6:d3:59:47:df:5b:af:d7:99:de:
73:c9:c5:e4:41:3b:8a:06:c4:7a:b9:26:10:7c:45:88:90:71:
40:3a:a1:f3:41:99:62:03:95:97:e1:f5:d4:e8:7a:a3:84:1e:
2f:19:40:28:7d:2c:fa:93:b1:76:7f:b1:44:55:a2:c9:51:87:
c2:e5:43:5a:a2:92:8b:f1:51:78:94:cb:fc:02:6a:b5:63:66:
4a:cf:7a:e6:d6:84:db:c2:cf:fe:4a:31:a3:96:fa:fc:3f:ba:
6d:70:e9:60:5e:95:a0:46:51:5e:db:86:64:c2:3b:11:e2:61:
7b:be:a4:be:cc:4d:4f:1c:11:52:fd:36:6f:ef:36:67:85:91:
a6:68:4e:1b:40:ef:74:61:f7:e9:21:ec:86:15:76:52:0a:7d:
11:c6:55:0a:3b:9a:05:7c:a4:25:d5:02:90:cf:a1:b9:a7:19:
c6:3a:e6:6a:d0:82:10:5b:ca:e2:5c:ba:51:5f:47:79:4b:91:
06:fc:13:ff
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTQ3MEMxMTAvBgNVBAUTKDE5OUQ0QkUwNjA4QTU2RjUwNDgwQzBBRDI2NDVEQUQ3
QjY5MDAyNTkwHhcNMjYwOTIxMDcxOTAyWhcNMjYwOTI4MDcxOTAyWjAYMRYwFAYD
VQQDEw02YWIwZGE2Ny02Mzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1BMKN4h2YzMKld/kbDABIgtIl7c2ArWcslpaonvCCSf9qV/XIRjG+ytbjWRX
lzbAAOlgEaPPXNnECPqfPa+Zz1BwM7XuLsGP4vf2p6y5rPtaH8hdwG2KBbWpoNAK
89MzxLiwa+vH3WXkZ/Y8afbSd5rUiJrFZU4o8Q/iBvn/dC0EgcnV3o152p/60Srd
0ueHYty4i/QvjFqPaRJW9k3ofSGk4RDcHRBIR+LiRYgWKFr2GrgUBBpDajpnI3h4
JZ5zdRiPo8wrHbrrt/7oEmBiC/+oCHPThsy7Ue+mfPbrm8YkgrRMFVARqiM21Eju
Hy8Pire6BqZ26yncMncp5AJkCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJhSiE+X
SI+8w8C7G+QKIvp5iDeOMB8GA1UdIwQYMBaAFBmdS+Bgilb1BIDArSZF2te2kAJZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDcwQy9BQzREMEFCNEM2
ODkxMUYwOEQyQkZFMEFDNEY5QUUwMi9HWjFMNEdDS1Z2VUVnTUN0SmtYYTE3YVFB
bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0daMUw0R0NLVnZVRWdNQ3RKa1hhMTdhUUFsay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NDcwQy9BQzREMEFCNEM2ODkxMUYwOEQyQkZFMEFDNEY5QUUwMi9HWjFMNEdDS1Z2
VUVnTUN0SmtYYTE3YVFBbGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApL24G2MPu7C4Df12FpfmLhX7qerBUAL5f6O6YwOvO190FOC9jWkONs5cvGkb
QZR210eEPbL4t2tDB/TkR5e201lH31uv15nec8nF5EE7igbEerkmEHxFiJBxQDqh
80GZYgOVl+H11Oh6o4QeLxlAKH0s+pOxdn+xRFWiyVGHwuVDWqKSi/FReJTL/AJq
tWNmSs965taE28LP/koxo5b6/D+6bXDpYF6VoEZRXtuGZMI7EeJhe76kvsxNTxwR
Uv02b+82Z4WRpmhOG0DvdGH36SHshhV2Ugp9EcZVCjuaBXykJdUCkM+huacZxjrm
atCCEFvK4ly6UV9HeUuRBvwT/w==
-----END CERTIFICATE-----
Generated at Mon Sep 21 23:43:49 2026 by rpki-client