
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.mft
File: gtgYhh3Upw93CNIF5LiehRTKH2w.mft (raw, json)
Hash identifier: khPomoxxT+NUhLWxL4YkQcW4GvjY+m1yZ7+Jbl5Xpp0=
Subject key identifier: 80:31:C8:3B:3B:8A:A8:26:F1:13:A6:E0:15:DE:1E:7E:64:22:D2:B3
Authority key identifier: 82:D8:18:86:1D:D4:A7:0F:77:08:D2:05:E4:B8:9E:85:14:CA:1F:6C
Certificate issuer: /CN=A91C9A8D/serialNumber=82D818861DD4A70F7708D205E4B89E8514CA1F6C
Certificate serial: EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gtgYhh3Upw93CNIF5LiehRTKH2w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.mft
Manifest number: 056C
Signing time: Thu 16 Apr 2026 23:57:44 +0000
Manifest this update: Thu 16 Apr 2026 23:57:44 +0000
Manifest next update: Thu 23 Apr 2026 23:57:44 +0000
Files and hashes: 1: gtgYhh3Upw93CNIF5LiehRTKH2w.crl (hash: JYp8/KETQ9vJdy/TvLBKd45S1YNlfwVpLyqh0XTUth0=)
2: D2A57AD8DDF111EF969ABC1CC4F9AE02.roa (hash: eoTb51P+t/j4kZh52b3zmJyrvFvaeaq6DjMaAos1Ol0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.crl
rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gtgYhh3Upw93CNIF5LiehRTKH2w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:57:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 235 (0xeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9A8D, serialNumber=82D818861DD4A70F7708D205E4B89E8514CA1F6C
Validity
Not Before: Apr 16 23:57:44 2026 GMT
Not After : Apr 23 23:57:44 2026 GMT
Subject: CN=69e17778-76d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0f:1e:47:79:6d:0a:25:66:16:4b:18:8d:c2:
d5:0c:86:ba:a1:6d:56:11:28:de:f1:e9:ab:aa:28:
d7:41:e9:00:5c:4b:f3:26:30:2b:58:c1:a7:99:be:
7e:90:0e:bd:eb:b2:7d:fd:a1:fe:ff:ec:9d:4e:d6:
76:2c:09:2c:d4:26:a4:5c:14:1d:27:b3:40:ef:c0:
f2:28:49:12:c8:1a:1f:9a:96:9d:f9:01:f9:7a:0f:
04:2b:89:68:f7:c5:03:be:3a:fe:c5:63:9b:3c:e5:
91:ea:39:cc:0b:ed:df:b5:f9:07:04:aa:5e:58:ca:
6f:9c:70:d6:b3:44:63:93:b0:bf:b6:80:4b:6a:6b:
bd:3d:a4:64:ac:4f:6a:6b:64:d7:64:fd:50:a1:27:
b1:d1:9b:2c:f6:e1:f7:05:18:6f:63:fa:54:88:75:
99:43:6e:df:d1:4e:6e:ab:eb:c2:fe:c8:ec:d3:81:
ce:8d:aa:d3:bf:f7:c1:d1:77:f2:ca:4d:b1:e1:68:
7e:c0:3a:c1:1c:60:e3:4a:09:d1:7f:fc:53:0a:3d:
91:51:f9:b6:b0:b2:17:c4:56:18:2a:77:64:86:fe:
28:c8:e1:be:3d:8f:21:e2:1f:ee:28:d8:03:e2:f9:
a7:e9:09:10:83:45:98:ef:13:a3:d8:31:32:18:6a:
88:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:31:C8:3B:3B:8A:A8:26:F1:13:A6:E0:15:DE:1E:7E:64:22:D2:B3
X509v3 Authority Key Identifier:
keyid:82:D8:18:86:1D:D4:A7:0F:77:08:D2:05:E4:B8:9E:85:14:CA:1F:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gtgYhh3Upw93CNIF5LiehRTKH2w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:ba:4c:7e:e9:3f:dd:55:8e:7f:ef:c1:5e:54:39:12:b4:aa:
79:1c:59:3c:7f:a0:4b:14:23:b0:44:27:85:9e:6d:a4:f9:20:
10:28:0d:c6:92:00:d8:a2:d5:a6:52:90:68:e5:bd:f3:6e:68:
81:d2:29:63:32:77:ef:99:a2:f1:4e:be:e9:97:22:00:8e:8a:
a9:5c:8d:48:de:00:b4:0c:4c:c8:61:b6:25:aa:c4:b5:d4:f2:
3e:d7:5a:ec:94:1c:84:6d:c3:b9:06:6e:f3:e6:4e:b1:42:45:
5b:60:79:76:65:ea:1b:fe:a5:ee:b4:75:cb:0b:84:52:4c:f4:
2b:a8:6d:b9:c5:8a:a8:e6:9b:55:bf:93:45:8f:03:4a:ef:ff:
a3:de:4d:54:55:b3:21:41:ec:a4:6d:d6:be:1d:d3:7d:22:78:
9b:12:7f:15:1a:3d:19:9c:68:53:e1:86:70:92:92:e3:1b:56:
a9:c5:8f:64:38:6e:b9:4c:0d:82:12:70:b7:39:be:8a:76:fd:
7d:d4:83:93:dc:66:71:80:c1:d4:bd:03:35:49:8c:65:9e:ea:
06:f0:2a:bc:76:08:be:65:b5:6d:a2:8d:d4:63:b7:33:27:f5:
4a:89:b2:0d:ee:d5:56:17:33:bd:96:12:08:b3:e3:07:cb:c2:
0d:c1:3d:ff
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzlBOEQxMTAvBgNVBAUTKDgyRDgxODg2MURENEE3MEY3NzA4RDIwNUU0Qjg5RTg1
MTRDQTFGNkMwHhcNMjYwNDE2MjM1NzQ0WhcNMjYwNDIzMjM1NzQ0WjAYMRYwFAYD
VQQDEw02OWUxNzc3OC03NmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvQ8eR3ltCiVmFksYjcLVDIa6oW1WESje8emrqijXQekAXEvzJjArWMGnmb5+
kA6967J9/aH+/+ydTtZ2LAks1CakXBQdJ7NA78DyKEkSyBofmpad+QH5eg8EK4lo
98UDvjr+xWObPOWR6jnMC+3ftfkHBKpeWMpvnHDWs0Rjk7C/toBLamu9PaRkrE9q
a2TXZP1QoSex0Zss9uH3BRhvY/pUiHWZQ27f0U5uq+vC/sjs04HOjarTv/fB0Xfy
yk2x4Wh+wDrBHGDjSgnRf/xTCj2RUfm2sLIXxFYYKndkhv4oyOG+PY8h4h/uKNgD
4vmn6QkQg0WY7xOj2DEyGGqIpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIAxyDs7
iqgm8ROm4BXeHn5kItKzMB8GA1UdIwQYMBaAFILYGIYd1KcPdwjSBeS4noUUyh9s
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUE4RC8zMkYxRjRDMjgz
RTkxMUVDQjg3M0M4NzFDNEY5QUUwMi9ndGdZaGgzVXB3OTNDTklGNUxpZWhSVEtI
MncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d0Z1loaDNVcHc5M0NOSUY1TGllaFJUS0gydy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OUE4RC8zMkYxRjRDMjgzRTkxMUVDQjg3M0M4NzFDNEY5QUUwMi9ndGdZaGgzVXB3
OTNDTklGNUxpZWhSVEtIMncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAELpMfuk/3VWOf+/BXlQ5ErSqeRxZPH+gSxQjsEQnhZ5tpPkgECgNxpIA2KLV
plKQaOW9825ogdIpYzJ375mi8U6+6ZciAI6KqVyNSN4AtAxMyGG2JarEtdTyPtda
7JQchG3DuQZu8+ZOsUJFW2B5dmXqG/6l7rR1ywuEUkz0K6htucWKqOabVb+TRY8D
Su//o95NVFWzIUHspG3Wvh3TfSJ4mxJ/FRo9GZxoU+GGcJKS4xtWqcWPZDhuuUwN
ghJwtzm+inb9fdSDk9xmcYDB1L0DNUmMZZ7qBvAqvHYIvmW1baKN1GO3Myf1Somy
De7VVhczvZYSCLPjB8vCDcE9/w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:06:59 2026 by rpki-client