
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE9F1/EE695FE6875D11EE8F489913C4F9AE02/Gns-z0RjPh6iTJBhetOXRV505rI.mft
File: Gns-z0RjPh6iTJBhetOXRV505rI.mft (raw, json)
Hash identifier: v55XAFY4AAwQt6unQZbUCyEumVaOABaSYlSmv/U6w3s=
Subject key identifier: 22:C0:D8:5B:8B:69:AE:0E:CC:CA:9D:10:B3:67:FF:D8:0D:87:E6:51
Authority key identifier: 1A:7B:3E:CF:44:63:3E:1E:A2:4C:90:61:7A:D3:97:45:5E:74:E6:B2
Certificate issuer: /CN=A91CE9F1/serialNumber=1A7B3ECF44633E1EA24C90617AD397455E74E6B2
Certificate serial: 01FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gns-z0RjPh6iTJBhetOXRV505rI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE9F1/EE695FE6875D11EE8F489913C4F9AE02/Gns-z0RjPh6iTJBhetOXRV505rI.mft
Manifest number: 01F8
Signing time: Mon 27 Jul 2026 04:49:46 +0000
Manifest this update: Mon 27 Jul 2026 04:49:46 +0000
Manifest next update: Mon 03 Aug 2026 04:49:46 +0000
Files and hashes: 1: Gns-z0RjPh6iTJBhetOXRV505rI.crl (hash: 5Mi4XqIvGznC8hvB1heOUP0jJ7vlQAH4kSY+/EaTX5I=)
2: 398B4EEE875E11EEBCAB2514C4F9AE02.roa (hash: t10meiycpjtLJ/5vDavAMDin3n4ylNyYCIEx6WOGCC4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE9F1/EE695FE6875D11EE8F489913C4F9AE02/Gns-z0RjPh6iTJBhetOXRV505rI.crl
rsync://rpki.apnic.net/member_repository/A91CE9F1/EE695FE6875D11EE8F489913C4F9AE02/Gns-z0RjPh6iTJBhetOXRV505rI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gns-z0RjPh6iTJBhetOXRV505rI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:49:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 509 (0x1fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE9F1, serialNumber=1A7B3ECF44633E1EA24C90617AD397455E74E6B2
Validity
Not Before: Jul 27 04:49:46 2026 GMT
Not After : Aug 3 04:49:46 2026 GMT
Subject: CN=6a66e36a-c806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d6:53:9a:94:30:34:8f:af:35:f5:37:42:1e:
02:a5:81:63:5f:2d:bb:4f:9a:85:9a:38:e0:5f:7c:
38:1b:03:76:0b:78:f3:d1:f1:fd:88:43:6e:4e:68:
5c:89:39:1a:5d:5d:88:98:26:17:be:a4:91:99:68:
95:6f:73:08:b7:95:1b:fc:f8:13:df:38:fd:10:10:
6d:7d:dd:9e:b1:de:d6:97:12:40:73:97:96:f4:18:
4f:43:6b:b4:ba:94:65:af:8a:42:2d:1d:11:63:29:
2f:4d:e1:48:fd:93:5b:fc:97:1a:66:39:13:9b:31:
11:86:25:ef:ff:96:8d:18:49:3c:c3:e9:02:81:17:
03:85:dd:9b:cd:25:2e:94:d7:87:c6:cb:b8:7c:b1:
9e:9a:3f:7b:bb:81:24:3a:9d:28:e8:0a:b9:d0:22:
4c:52:a3:ec:9a:1f:de:97:54:80:b6:ec:29:12:cf:
d3:c4:0f:87:33:e1:24:ed:70:79:6f:d2:e8:3c:dd:
c3:4e:54:47:03:ee:a6:91:4b:d5:08:44:d3:5b:48:
17:d5:b2:38:cc:9c:74:7e:e8:54:c9:93:e4:c8:f9:
f4:16:10:9c:cc:12:36:e1:18:a4:f9:50:4d:ec:0d:
de:43:c9:94:e7:6e:4c:5c:3e:64:21:c9:fe:d3:83:
18:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C0:D8:5B:8B:69:AE:0E:CC:CA:9D:10:B3:67:FF:D8:0D:87:E6:51
X509v3 Authority Key Identifier:
keyid:1A:7B:3E:CF:44:63:3E:1E:A2:4C:90:61:7A:D3:97:45:5E:74:E6:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE9F1/EE695FE6875D11EE8F489913C4F9AE02/Gns-z0RjPh6iTJBhetOXRV505rI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gns-z0RjPh6iTJBhetOXRV505rI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE9F1/EE695FE6875D11EE8F489913C4F9AE02/Gns-z0RjPh6iTJBhetOXRV505rI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:f4:af:e5:0b:7f:11:f8:f0:f8:70:be:bf:fe:43:45:d9:e2:
ef:64:2f:b4:6b:60:97:77:b8:03:00:59:43:57:22:60:aa:be:
61:39:2c:a8:9f:d3:e3:1d:06:0f:27:b9:28:76:8c:0d:3e:29:
0b:96:cd:ca:f3:bc:ca:49:24:83:f3:2c:bf:5a:b5:25:a0:ff:
d1:ba:07:cf:28:3f:93:91:81:ab:32:fe:d6:75:ea:78:36:1e:
b0:a7:48:49:07:0b:66:ac:bc:ae:fa:2e:4c:89:a8:08:ea:f4:
d2:de:f5:e3:a8:40:3c:9a:5f:52:02:c1:93:5d:20:5e:3f:61:
af:30:f4:8b:6d:df:b0:09:6e:5b:fd:15:7b:cc:39:cd:de:0d:
53:86:28:ba:ca:06:a2:42:51:9a:0b:6a:2d:e3:ab:b9:f9:96:
fe:4d:6b:ba:bf:04:6e:0c:55:31:4d:f4:7e:6a:0d:1b:b4:4a:
75:55:23:f5:cd:9a:9c:e6:69:a5:20:67:92:2f:56:10:fd:73:
c3:27:76:10:2b:53:f0:41:2e:15:40:f2:90:09:cf:23:72:1a:
ae:fa:77:65:fb:b2:25:01:aa:14:0f:80:cb:0a:e9:dc:db:60:
4a:e9:e8:22:53:31:25:1e:2a:55:60:67:cc:37:26:11:f0:b2:
e9:34:55:db
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0U5RjExMTAvBgNVBAUTKDFBN0IzRUNGNDQ2MzNFMUVBMjRDOTA2MTdBRDM5NzQ1
NUU3NEU2QjIwHhcNMjYwNzI3MDQ0OTQ2WhcNMjYwODAzMDQ0OTQ2WjAYMRYwFAYD
VQQDEw02YTY2ZTM2YS1jODA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt9ZTmpQwNI+vNfU3Qh4CpYFjXy27T5qFmjjgX3w4GwN2C3jz0fH9iENuTmhc
iTkaXV2ImCYXvqSRmWiVb3MIt5Ub/PgT3zj9EBBtfd2esd7WlxJAc5eW9BhPQ2u0
upRlr4pCLR0RYykvTeFI/ZNb/JcaZjkTmzERhiXv/5aNGEk8w+kCgRcDhd2bzSUu
lNeHxsu4fLGemj97u4EkOp0o6Aq50CJMUqPsmh/el1SAtuwpEs/TxA+HM+Ek7XB5
b9LoPN3DTlRHA+6mkUvVCETTW0gX1bI4zJx0fuhUyZPkyPn0FhCczBI24Rik+VBN
7A3eQ8mU525MXD5kIcn+04MYDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCLA2FuL
aa4OzMqdELNn/9gNh+ZRMB8GA1UdIwQYMBaAFBp7Ps9EYz4eokyQYXrTl0VedOay
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTlGMS9FRTY5NUZFNjg3
NUQxMUVFOEY0ODk5MTNDNEY5QUUwMi9HbnMtejBSalBoNmlUSkJoZXRPWFJWNTA1
ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ducy16MFJqUGg2aVRKQmhldE9YUlY1MDVySS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RTlGMS9FRTY5NUZFNjg3NUQxMUVFOEY0ODk5MTNDNEY5QUUwMi9HbnMtejBSalBo
NmlUSkJoZXRPWFJWNTA1ckkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYPSv5Qt/Efjw+HC+v/5DRdni72QvtGtgl3e4AwBZQ1ciYKq+YTksqJ/T4x0G
Dye5KHaMDT4pC5bNyvO8ykkkg/Msv1q1JaD/0boHzyg/k5GBqzL+1nXqeDYesKdI
SQcLZqy8rvouTImoCOr00t7146hAPJpfUgLBk10gXj9hrzD0i23fsAluW/0Ve8w5
zd4NU4YousoGokJRmgtqLeOrufmW/k1rur8EbgxVMU30fmoNG7RKdVUj9c2anOZp
pSBnki9WEP1zwyd2ECtT8EEuFUDykAnPI3Iarvp3ZfuyJQGqFA+Aywrp3NtgSuno
IlMxJR4qVWBnzDcmEfCy6TRV2w==
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:31:44 2026 by rpki-client