
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.mft
File: gtgYhh3Upw93CNIF5LiehRTKH2w.mft (raw, json)
Hash identifier: MlxFarJjbHW2NjooBqpeltqzSGmdTpf+bzW1tlrnuzQ=
Subject key identifier: 65:98:D2:4E:DD:04:AA:B4:3C:9E:A7:4F:BA:79:DC:FE:0A:7F:53:23
Authority key identifier: 82:D8:18:86:1D:D4:A7:0F:77:08:D2:05:E4:B8:9E:85:14:CA:1F:6C
Certificate issuer: /CN=A91C9A8D/serialNumber=82D818861DD4A70F7708D205E4B89E8514CA1F6C
Certificate serial: 0121
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gtgYhh3Upw93CNIF5LiehRTKH2w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.mft
Manifest number: 05D5
Signing time: Mon 27 Jul 2026 00:54:07 +0000
Manifest this update: Mon 27 Jul 2026 00:54:06 +0000
Manifest next update: Mon 03 Aug 2026 00:54:06 +0000
Files and hashes: 1: gtgYhh3Upw93CNIF5LiehRTKH2w.crl (hash: 9YIYY947NRxlZY7Qmnh+9ieTw1pgMgBKAUtRs2pGhs4=)
2: D2A57AD8DDF111EF969ABC1CC4F9AE02.roa (hash: fJFChavtp+M5gKpihiY2Jyh8A23NLd8nbeygtooFBy4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.crl
rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gtgYhh3Upw93CNIF5LiehRTKH2w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 00:54:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 289 (0x121)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9A8D, serialNumber=82D818861DD4A70F7708D205E4B89E8514CA1F6C
Validity
Not Before: Jul 27 00:54:06 2026 GMT
Not After : Aug 3 00:54:06 2026 GMT
Subject: CN=6a66ac2f-253d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6c:91:36:96:1b:ef:77:78:39:3a:4b:98:7a:
a2:2f:e3:a7:73:8d:b2:8e:27:09:2e:e6:9f:a9:66:
85:67:6a:83:64:fe:2b:fc:ab:2d:83:b4:69:0e:40:
c1:aa:7f:71:bd:43:1b:0f:22:65:7b:bc:b2:87:4e:
29:1c:38:6f:ec:80:be:0b:cb:5b:7b:41:38:c1:9e:
45:4f:87:14:4c:dc:83:d0:fa:84:6a:ad:e1:c6:69:
18:e7:8a:27:ef:5b:32:a9:35:ec:bb:33:a4:66:43:
6d:cc:84:31:1a:56:9c:fc:7a:0b:12:bf:fe:80:9d:
5d:5c:03:11:c5:dc:26:cf:06:24:2c:3f:e4:e2:5f:
d0:46:da:ac:26:a1:8e:69:a5:10:12:61:1b:e6:f5:
43:ad:cb:e7:7d:1b:50:8c:81:0f:b1:52:77:9a:e4:
7e:20:41:f2:e9:e6:98:51:ca:87:f7:36:e0:09:89:
5d:b0:48:7a:77:76:88:e9:ac:2b:94:68:7e:c4:35:
8f:c2:64:83:0f:5c:81:b7:32:34:9b:60:90:41:7e:
f5:b8:77:f1:e3:43:6c:08:de:d2:fc:9a:5c:d9:b7:
c0:d8:7c:e3:38:ce:8e:78:df:4b:12:4c:84:60:23:
9b:bd:f0:b4:f8:fb:fc:21:9e:9e:99:a2:b9:bc:0f:
34:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:98:D2:4E:DD:04:AA:B4:3C:9E:A7:4F:BA:79:DC:FE:0A:7F:53:23
X509v3 Authority Key Identifier:
keyid:82:D8:18:86:1D:D4:A7:0F:77:08:D2:05:E4:B8:9E:85:14:CA:1F:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gtgYhh3Upw93CNIF5LiehRTKH2w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:0b:18:cd:c2:a9:2f:78:e2:10:ba:2d:b7:0f:96:0e:f2:d1:
43:79:16:ca:05:80:ef:cb:89:2e:43:08:a0:82:8e:a9:67:bf:
8b:bd:0e:87:b5:58:d3:08:5a:09:29:82:8a:2a:e7:c1:5f:a3:
16:25:5b:4a:da:52:77:db:93:a3:be:d2:75:b0:d5:bc:90:a5:
46:46:45:dc:04:6c:c4:52:46:71:7b:59:96:39:29:5d:5b:0e:
99:8e:e8:56:36:4b:f0:04:3b:cf:c0:35:c9:50:81:16:52:8e:
2c:ec:53:52:ca:78:da:e9:9b:9b:f1:11:32:93:bd:cc:31:a1:
49:dd:72:29:19:bc:ef:01:cf:84:00:cf:5d:d3:52:c0:0c:72:
e8:50:d3:9f:c9:38:17:e6:04:9d:ac:f3:6a:d3:25:f2:3d:f9:
e4:0d:b9:cd:80:2a:9f:32:49:1d:e1:9a:24:52:72:8a:b0:3d:
bf:e2:33:f2:f3:36:08:32:fe:18:1b:a8:76:54:d3:23:d7:21:
23:b7:94:f2:16:6a:aa:ab:97:49:ce:fb:91:e6:e9:7a:8c:da:
10:93:24:79:78:a0:76:f5:ea:c3:a7:01:bf:bb:79:b6:e4:f4:
43:4b:8d:99:cf:7c:b6:dc:97:97:08:a7:8f:91:9c:f8:42:b2:
a3:40:de:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:01:36 2026 by rpki-client