
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft
File: _GiPuVzFIF4D5wpgXJlMXUlaszI.mft (raw, json)
Hash identifier: fFN+kGfI8vU7IjVn7tHSJU4MLbKKNkx5k0raLcmM+2w=
Subject key identifier: 26:E7:60:87:1B:DD:6A:B4:23:B7:F4:05:B3:F2:6F:FA:46:C2:39:02
Authority key identifier: FC:68:8F:B9:5C:C5:20:5E:03:E7:0A:60:5C:99:4C:5D:49:5A:B3:32
Certificate issuer: /CN=A91CFD43/serialNumber=FC688FB95CC5205E03E70A605C994C5D495AB332
Certificate serial: 03D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GiPuVzFIF4D5wpgXJlMXUlaszI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft
Manifest number: 03D2
Signing time: Mon 27 Jul 2026 01:39:48 +0000
Manifest this update: Mon 27 Jul 2026 01:39:48 +0000
Manifest next update: Mon 03 Aug 2026 01:39:48 +0000
Files and hashes: 1: _GiPuVzFIF4D5wpgXJlMXUlaszI.crl (hash: X2+rzJF4r0sWxeFdr0ohpF5u4bfyRnhSzSdVuKUgPuE=)
2: 4E8DA224547711EF9EDD014DC4F9AE02.roa (hash: r5gelgjZp5B3j7+l6m368Vdh062KkVezcOMS+HcP7j0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.crl
rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GiPuVzFIF4D5wpgXJlMXUlaszI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 01:39:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 985 (0x3d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFD43, serialNumber=FC688FB95CC5205E03E70A605C994C5D495AB332
Validity
Not Before: Jul 27 01:39:48 2026 GMT
Not After : Aug 3 01:39:48 2026 GMT
Subject: CN=6a66b6e4-b162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8a:f8:10:a8:40:2f:8b:83:4a:f8:df:70:35:
23:0d:82:52:b5:07:1a:f4:b1:c9:dc:3f:94:36:9a:
80:37:52:f1:9c:a0:73:7a:df:c7:dd:58:63:64:c2:
e3:cd:38:6c:16:07:3f:01:b2:19:7e:46:b7:74:7b:
82:64:b6:ae:8e:6c:21:a8:ae:b4:0b:21:70:7c:15:
46:d6:a2:e3:dc:48:39:8e:79:66:5e:c4:34:ca:1a:
08:44:b3:c8:dd:59:d5:7c:fc:b0:7d:3c:c3:03:42:
01:85:6b:97:62:72:5b:4f:6e:06:8d:9c:15:00:91:
47:29:56:f4:d0:89:a5:a6:dc:67:57:4c:a1:6e:46:
50:0c:a3:51:d9:9d:96:18:75:21:ae:94:e2:02:62:
63:0d:22:e0:96:44:eb:3b:93:67:6d:5c:91:df:76:
bc:08:2a:d6:f8:1e:75:26:f6:67:0f:8c:a3:52:c9:
5a:51:5b:b5:09:c2:60:17:1b:90:a7:2b:bb:3f:ba:
a6:db:a3:99:1e:ea:36:33:27:9c:b0:7d:6b:d6:b7:
d9:61:e1:b2:69:82:8d:ed:f6:53:83:00:52:01:73:
a5:b1:e8:81:24:19:d2:8a:78:17:7a:b9:7c:3f:88:
15:2e:8d:69:0f:b0:3a:70:55:dc:e6:4f:41:29:47:
a0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E7:60:87:1B:DD:6A:B4:23:B7:F4:05:B3:F2:6F:FA:46:C2:39:02
X509v3 Authority Key Identifier:
keyid:FC:68:8F:B9:5C:C5:20:5E:03:E7:0A:60:5C:99:4C:5D:49:5A:B3:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GiPuVzFIF4D5wpgXJlMXUlaszI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:bf:d4:e2:22:e2:f3:bf:cd:1a:06:12:77:60:bf:f9:a6:1c:
fa:b0:0e:7e:bc:57:79:5c:4a:43:13:c1:34:1d:b0:05:8d:6d:
74:29:28:44:cf:ee:00:17:a5:a8:03:04:ac:aa:e4:d1:63:1b:
d2:f8:ce:69:73:53:d3:6c:2f:c4:9e:c4:1e:2d:14:c7:bb:07:
30:62:e1:40:6e:34:1c:7b:da:bd:61:f2:cd:00:52:e8:5b:7c:
7a:ac:90:f2:8a:9c:a8:a9:de:1a:c6:25:ab:6b:83:09:db:92:
78:6d:bb:f4:16:bb:ea:2d:7c:de:af:70:5f:36:22:a4:70:f2:
f0:ec:26:3f:fc:58:56:32:0c:6e:e2:27:d8:a0:ee:f1:94:d4:
b2:ee:27:c6:6e:1b:52:7c:4e:e2:86:ce:ce:9b:1c:80:87:08:
00:87:5c:9b:8f:ff:54:3d:4f:70:46:04:77:1c:32:0d:b2:c3:
e6:59:da:10:d7:86:1b:e7:b5:9b:08:af:63:5c:f5:52:dd:0f:
fc:0f:01:64:54:a6:47:28:fa:cc:c0:60:ac:43:69:1a:57:c5:
a1:cb:3a:ea:50:88:d1:f2:98:dd:5a:78:09:a6:c3:07:6c:0f:
7c:73:27:ad:45:c8:3d:fe:f0:f2:ca:e2:a3:54:bb:5a:6b:a7:
d1:2d:16:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:20:21 2026 by rpki-client