
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft
File: _GiPuVzFIF4D5wpgXJlMXUlaszI.mft (raw, json)
Hash identifier: 5sYsIIYM8tasjkVrHCOtaQVzZrxlUfqNNgeWehqSA/U=
Subject key identifier: 4B:3D:40:E5:92:F0:0B:DA:C6:4F:92:8B:8E:DF:4F:54:C9:B7:0F:8F
Authority key identifier: FC:68:8F:B9:5C:C5:20:5E:03:E7:0A:60:5C:99:4C:5D:49:5A:B3:32
Certificate issuer: /CN=A91CFD43/serialNumber=FC688FB95CC5205E03E70A605C994C5D495AB332
Certificate serial: 040D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GiPuVzFIF4D5wpgXJlMXUlaszI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft
Manifest number: 0406
Signing time: Thu 05 Nov 2026 00:41:36 +0000
Manifest this update: Thu 05 Nov 2026 00:41:35 +0000
Manifest next update: Thu 12 Nov 2026 00:41:35 +0000
Files and hashes: 1: _GiPuVzFIF4D5wpgXJlMXUlaszI.crl (hash: mk0i5l+C3zVU2PXGzFWa6U3x+Ay/Eae2HB6IG/2ezGY=)
2: 4E8DA224547711EF9EDD014DC4F9AE02.roa (hash: r5gelgjZp5B3j7+l6m368Vdh062KkVezcOMS+HcP7j0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.crl
rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GiPuVzFIF4D5wpgXJlMXUlaszI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 00:41:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1037 (0x40d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFD43, serialNumber=FC688FB95CC5205E03E70A605C994C5D495AB332
Validity
Not Before: Nov 5 00:41:35 2026 GMT
Not After : Nov 12 00:41:35 2026 GMT
Subject: CN=6aebd0c0-cdad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c7:35:39:52:84:3a:f7:ac:e1:1b:41:d4:99:
ab:df:16:16:55:42:a0:c2:b4:fd:0c:a3:5a:53:c5:
31:00:40:b3:00:d8:51:10:22:ba:48:4f:2f:4f:f8:
77:88:e6:7b:20:81:79:0a:ed:f6:60:42:15:30:1a:
91:35:53:5f:b1:c7:01:94:9d:69:dd:9d:21:28:74:
42:2f:f6:f2:9f:40:eb:78:fc:c7:81:f1:28:d5:e9:
ae:f1:f5:82:1a:12:c3:42:c3:ee:e9:85:30:b6:b3:
8d:56:69:e3:cb:c0:4a:1e:a7:3c:2c:81:8b:12:90:
68:a3:b8:58:23:72:6b:ea:82:05:0a:34:d0:f7:34:
be:74:26:13:d5:1d:d9:49:52:2e:9b:e8:d4:dc:c6:
0a:13:d5:b3:ae:d5:b2:72:42:81:6f:f9:e3:3c:e0:
f3:0d:62:78:fe:b3:eb:60:54:48:22:94:a4:0e:b0:
3f:41:09:80:fa:7b:86:10:ab:ce:0b:eb:b2:92:08:
d5:65:f6:65:e7:46:6d:5d:65:5f:e9:4c:55:73:c9:
50:0f:95:cf:ab:3e:d5:3c:b9:56:d5:c2:1a:8a:3f:
be:65:d4:2c:c8:84:08:71:85:1a:2d:3f:bd:3f:69:
83:31:7d:77:61:a1:5d:fc:bf:c2:5c:e3:e9:0d:b3:
7a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3D:40:E5:92:F0:0B:DA:C6:4F:92:8B:8E:DF:4F:54:C9:B7:0F:8F
X509v3 Authority Key Identifier:
keyid:FC:68:8F:B9:5C:C5:20:5E:03:E7:0A:60:5C:99:4C:5D:49:5A:B3:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GiPuVzFIF4D5wpgXJlMXUlaszI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:6a:d2:08:e9:b4:35:0b:41:66:a2:dc:47:ff:a8:21:91:52:
3d:bb:65:9d:06:3f:d0:27:9a:bb:9e:99:6f:81:97:a4:21:35:
33:8b:7c:43:0a:f2:a6:5a:d6:a7:f3:51:0e:79:bc:d8:b5:1b:
d0:52:8f:0b:97:07:d1:07:2a:06:ea:4a:66:fc:60:df:56:02:
15:df:27:d5:b0:4d:f8:1e:27:16:ce:eb:63:a1:a0:b7:7f:16:
76:ae:11:db:36:be:95:16:93:18:9e:46:ef:da:15:63:e3:18:
9f:1b:95:70:d9:69:47:c0:39:57:02:fd:4a:62:ae:1a:1e:82:
4a:9b:ec:6b:94:93:df:45:63:8a:da:b0:99:40:92:64:ea:a0:
5f:c0:b8:aa:33:ab:93:01:44:b2:0f:f6:2b:c3:c2:ac:f8:ba:
3d:26:54:c5:39:ec:08:52:6b:28:d3:f2:51:e8:c1:d7:c0:45:
6a:21:4e:1f:a6:1c:ee:07:de:fc:ed:d6:3a:e3:5a:ad:67:02:
32:a8:a1:d5:b9:6a:0c:12:81:d5:4a:e9:d4:2f:06:f4:ba:d8:
74:68:ea:f5:da:43:b8:a6:b5:39:b2:22:e2:27:04:57:a1:cb:
e5:17:31:61:e0:d2:45:6b:95:a3:f5:b9:99:67:11:4b:f2:af:
4b:04:92:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 08:57:00 2026 by rpki-client