
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft
File: GJZ9zbckqEpxcR5niqsdLnIhXWw.mft (raw, json)
Hash identifier: nU6ncoMyMGxT1ee7IdF/TLoaKVChNY+T8zAAhBNqxtI=
Subject key identifier: 1F:58:6C:DE:D2:BA:85:0B:13:D7:A4:19:F3:9B:58:E6:92:D2:4F:2C
Authority key identifier: 18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C
Certificate issuer: /CN=A91D243F/serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C
Certificate serial: 0135
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft
Manifest number: FF
Signing time: Mon 27 Jul 2026 08:27:21 +0000
Manifest this update: Mon 27 Jul 2026 08:27:20 +0000
Manifest next update: Mon 03 Aug 2026 08:27:20 +0000
Files and hashes: 1: GJZ9zbckqEpxcR5niqsdLnIhXWw.crl (hash: pbn18eO9ET0pWrAfXBhCuN+oeJ052u/vJZtO/uLsr0A=)
2: 37B448241F7811F0AC4FFF82C4F9AE02.roa (hash: mFeODnTqqCYAbyyDP1f7ewIXqtu+6WN+eZxifMY5OQQ=)
3: 349ACBB2450811F09650FF5FC4F9AE02.roa (hash: ElTWkHinF5kZlSpWnOacvfk821L7f3zWiiILDU+FV5g=)
4: 1879BE8A318411F0BC1DD041C4F9AE02.roa (hash: j2Keh6m8tIx7/TCOD6hIJ0OBGZazoatVXlizWriG7AA=)
5: 17894A68318411F0BC1DD041C4F9AE02.roa (hash: 8ix/WnrdPiWa322J3erRaZZ4qyQ1QZ0UIEQCCV8f4LA=)
6: 3408F1BA450811F09650FF5FC4F9AE02.roa (hash: v4VAeTRhLetshvqbEadOdfyl/dOEP9N+4RKLhZ4e7qE=)
7: 5E6EBAF64D0611F09396603CC4F9AE02.roa (hash: WwIDIxcJSfVf47feTm39rcx36NVF4Zg4PvbNM1OFevw=)
8: 1808A790318411F0BC1DD041C4F9AE02.roa (hash: ySHv/z2aBIpi4ZmJwdGMW7JXmKAnxSrgO8kpo1pxZzc=)
9: 6896A446318411F0BBC4F91DC4F9AE02.roa (hash: 4FovTEqwPM1DYoWEf0hfar9xlGLMGj5cisGTHLJPYsI=)
10: 372E72941F7811F0AC4FFF82C4F9AE02.roa (hash: lc4x/4krlU7IrBNm9yndeIsd6X4Oi1wYGPdwnSnT+2s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl
rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:27:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 309 (0x135)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D243F, serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C
Validity
Not Before: Jul 27 08:27:20 2026 GMT
Not After : Aug 3 08:27:20 2026 GMT
Subject: CN=6a671669-c653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:76:f7:a3:63:d5:a7:ae:fb:f5:16:85:be:9e:
4a:cb:4d:ba:e0:df:64:4c:42:77:5f:26:0d:6d:cd:
76:4b:89:8d:56:7b:13:2d:72:98:07:45:f1:d3:06:
25:e7:e4:d7:96:b8:6d:38:20:ee:60:16:ff:77:8c:
dd:0d:05:b9:5e:82:17:1c:77:ec:1d:84:ab:db:79:
ad:b1:f6:71:e5:9d:f9:19:a9:db:1b:70:55:be:e0:
1a:32:80:d5:57:ad:42:0f:f8:a3:57:62:93:81:c2:
b7:dd:6f:04:91:da:f2:c2:68:2b:75:e0:f0:43:bb:
98:65:6d:26:a5:b5:cb:03:7b:1b:8c:d0:cd:e5:c0:
7f:9f:80:a8:c5:d4:14:44:2b:78:ec:fd:eb:1c:b0:
bc:f5:aa:0d:24:0a:80:fd:cc:8d:64:95:20:f5:6d:
cd:8b:2d:2d:ed:5d:93:8d:92:92:95:24:d2:eb:1f:
16:fc:1b:31:4b:7d:bb:65:05:15:0e:4f:4a:ec:0a:
21:2d:7a:64:bc:aa:a9:75:48:6c:55:86:2c:e0:17:
a3:bc:a9:75:1d:41:67:86:61:e7:4b:65:20:d8:b4:
90:da:23:91:4a:43:fd:97:49:c0:cd:14:04:bf:86:
8a:b4:df:59:c0:a2:b8:64:82:74:f6:20:26:6a:af:
0a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:58:6C:DE:D2:BA:85:0B:13:D7:A4:19:F3:9B:58:E6:92:D2:4F:2C
X509v3 Authority Key Identifier:
keyid:18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:68:89:b1:07:ab:af:68:06:b3:53:d5:b4:67:a5:28:e9:25:
03:8c:32:2e:3d:a3:b2:b1:bf:30:ee:cc:fe:2a:04:1a:da:c8:
41:1b:7d:88:4b:9c:25:b5:a7:a0:03:85:e8:8b:e7:e4:08:c2:
82:2f:b0:ba:0c:3f:21:7f:22:1a:45:a5:12:46:72:8e:c9:8d:
f7:59:73:b5:ed:68:f7:f9:cf:3e:43:e0:14:42:40:5e:2d:ae:
a2:bb:67:e9:dc:22:d2:94:4a:8e:12:07:6b:03:81:9a:c8:a2:
3f:e6:1f:b5:a8:0a:ee:a3:b9:19:a0:0f:a6:1f:dc:04:7a:5f:
f3:d5:d9:27:72:6c:dd:61:bd:3b:d4:d4:9b:fa:4a:e4:fd:6b:
b4:3f:d4:97:ee:15:7e:39:9a:eb:c9:e8:d1:f9:01:88:c6:3c:
96:e4:a9:dd:9e:b5:cf:e0:2c:ae:f6:d9:d9:0d:e8:1c:09:7d:
83:26:0d:33:ad:29:b3:66:41:6f:b7:88:01:52:79:94:e7:e1:
eb:cf:85:5e:22:d1:f2:a9:98:01:78:ad:cc:1b:ab:e7:91:29:
e4:65:42:9c:fe:a4:b1:8f:f7:24:ad:f8:de:ea:eb:6f:9f:0c:
09:7e:41:97:46:7a:b5:b6:20:ef:b2:ed:43:4a:78:24:50:4c:
ed:18:83:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:45:23 2026 by rpki-client