
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft
File: GJZ9zbckqEpxcR5niqsdLnIhXWw.mft (raw, json)
Hash identifier: UkgspBfRWRFW+WJF5ugeoMrGHh5J7IwV2FZFUgPI54E=
Subject key identifier: D1:38:B1:92:DA:AE:24:77:15:AE:15:B1:26:06:7B:61:AC:FD:59:22
Authority key identifier: 18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C
Certificate issuer: /CN=A91D243F/serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C
Certificate serial: 011E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft
Manifest number: E8
Signing time: Thu 11 Jun 2026 08:57:59 +0000
Manifest this update: Thu 11 Jun 2026 08:57:58 +0000
Manifest next update: Thu 18 Jun 2026 08:57:58 +0000
Files and hashes: 1: GJZ9zbckqEpxcR5niqsdLnIhXWw.crl (hash: wo46gMiPk7rjDmINVUPXw7u8BI56spMtGhP7XlSFp5s=)
2: 3408F1BA450811F09650FF5FC4F9AE02.roa (hash: v4VAeTRhLetshvqbEadOdfyl/dOEP9N+4RKLhZ4e7qE=)
3: 17894A68318411F0BC1DD041C4F9AE02.roa (hash: 8ix/WnrdPiWa322J3erRaZZ4qyQ1QZ0UIEQCCV8f4LA=)
4: 372E72941F7811F0AC4FFF82C4F9AE02.roa (hash: lc4x/4krlU7IrBNm9yndeIsd6X4Oi1wYGPdwnSnT+2s=)
5: 349ACBB2450811F09650FF5FC4F9AE02.roa (hash: ElTWkHinF5kZlSpWnOacvfk821L7f3zWiiILDU+FV5g=)
6: 1879BE8A318411F0BC1DD041C4F9AE02.roa (hash: j2Keh6m8tIx7/TCOD6hIJ0OBGZazoatVXlizWriG7AA=)
7: 37B448241F7811F0AC4FFF82C4F9AE02.roa (hash: mFeODnTqqCYAbyyDP1f7ewIXqtu+6WN+eZxifMY5OQQ=)
8: 6896A446318411F0BBC4F91DC4F9AE02.roa (hash: 4FovTEqwPM1DYoWEf0hfar9xlGLMGj5cisGTHLJPYsI=)
9: 1808A790318411F0BC1DD041C4F9AE02.roa (hash: ySHv/z2aBIpi4ZmJwdGMW7JXmKAnxSrgO8kpo1pxZzc=)
10: 5E6EBAF64D0611F09396603CC4F9AE02.roa (hash: WwIDIxcJSfVf47feTm39rcx36NVF4Zg4PvbNM1OFevw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl
rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 08:57:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 286 (0x11e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D243F, serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C
Validity
Not Before: Jun 11 08:57:58 2026 GMT
Not After : Jun 18 08:57:58 2026 GMT
Subject: CN=6a2a7897-97a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:51:03:24:93:58:03:cb:dc:8c:fd:06:cb:c9:
52:c6:14:54:a1:22:60:20:4b:78:eb:26:3d:78:35:
ef:26:7e:d1:bc:7b:ca:6b:ce:ac:08:03:79:59:e6:
c0:a4:46:84:f3:b7:da:4c:36:8c:09:ea:ae:4d:4a:
a1:bd:22:73:c5:af:5f:68:05:f3:32:1d:3c:5c:e0:
cd:62:cf:a5:5d:d6:ff:00:14:9f:b8:4a:0b:7a:5d:
7c:25:3b:27:c6:33:a1:8b:76:52:b4:ec:d3:c5:ee:
1d:bb:9a:b2:60:75:aa:b1:9d:0d:15:33:22:02:d7:
c4:30:3e:a3:5d:da:36:6d:cc:9d:2b:3f:4b:22:7d:
78:57:42:ac:93:7a:23:bd:e5:e1:b3:6d:66:93:1a:
c1:b2:84:9f:65:1e:49:9b:69:3d:0c:db:95:e0:d2:
d7:89:3c:b2:b2:d8:7a:b6:1e:3a:e8:11:60:c6:d9:
d2:d2:14:4e:5b:d5:7e:ef:8f:37:de:b2:9f:f0:6f:
6a:8e:a0:4e:a7:0e:c1:bf:66:7b:93:09:23:bf:a2:
a1:4b:42:4a:fa:8e:6d:e8:21:95:c4:60:67:fe:3a:
aa:a3:e0:eb:ae:ab:c0:f1:0f:38:6b:f4:7f:16:2c:
32:35:ec:e7:4a:3a:d4:fd:05:5f:fc:8b:13:c4:a5:
8c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:38:B1:92:DA:AE:24:77:15:AE:15:B1:26:06:7B:61:AC:FD:59:22
X509v3 Authority Key Identifier:
keyid:18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:1e:a2:57:3b:4e:e3:ed:ab:0a:37:03:21:08:8f:fe:bb:52:
49:ee:c2:0a:a3:92:26:40:dd:1c:9d:c7:93:4f:0c:1c:50:e4:
d6:f8:fa:35:f9:59:5b:08:6a:e7:a2:a3:a0:f1:ce:9c:b7:0c:
81:0a:cf:66:5e:cc:b2:fc:2c:69:d4:4e:9c:32:d8:ac:21:8e:
9e:f8:79:83:43:50:6f:ab:a6:9d:bf:95:e5:47:32:76:3d:be:
89:d1:43:5b:6b:b4:60:d9:75:cf:ed:a4:f2:a7:47:cd:c8:06:
98:44:a3:c8:99:23:33:17:96:ee:71:d8:f9:61:a7:fb:ca:bd:
fc:2c:58:a7:85:a0:8a:e3:61:3e:54:19:a3:32:6a:7a:2b:e5:
7b:df:9e:a7:7f:fd:bb:dd:0e:36:3d:d2:71:b5:15:1d:e4:a2:
ee:d2:24:b3:ef:e1:c4:bf:0e:40:ec:67:be:3b:ac:11:c8:11:
57:b0:42:c0:1a:57:e7:0e:44:6c:62:60:c8:bc:c4:5c:b1:6d:
d2:a8:90:15:e0:ae:fc:3d:8e:ac:fc:a0:4b:4f:2e:f8:e7:d7:
95:b7:f8:b6:07:c6:58:f3:ad:5e:f7:65:5e:b0:12:7c:be:51:
da:03:7c:be:74:69:fd:c2:42:b2:bc:78:77:32:c7:e9:1d:38:
c8:a9:f9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:35:02 2026 by rpki-client