
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft
File: GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft (raw, json)
Hash identifier: FPA/oqrecJy4sLQ7OdvjBIZ59mkIX1FI8M/1m4P426c=
Subject key identifier: 8A:E9:D7:33:85:12:C9:27:07:72:6C:3A:4C:D3:9B:22:58:48:23:E4
Authority key identifier: 18:81:5B:34:C8:69:28:4B:43:23:C9:16:99:36:77:0F:DD:0B:42:36
Certificate issuer: /CN=A91DACA7/serialNumber=18815B34C869284B4323C9169936770FDD0B4236
Certificate serial: 0149
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GIFbNMhpKEtDI8kWmTZ3D90LQjY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft
Manifest number: 0149
Signing time: Fri 17 Apr 2026 04:54:52 +0000
Manifest this update: Fri 17 Apr 2026 04:54:51 +0000
Manifest next update: Fri 24 Apr 2026 04:54:51 +0000
Files and hashes: 1: GIFbNMhpKEtDI8kWmTZ3D90LQjY.crl (hash: ZrpA1P6bWrEtpzNWrSXlv2/NLuH9NNIiarsPuQ6eY/Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.crl
rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GIFbNMhpKEtDI8kWmTZ3D90LQjY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:54:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 329 (0x149)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DACA7, serialNumber=18815B34C869284B4323C9169936770FDD0B4236
Validity
Not Before: Apr 17 04:54:51 2026 GMT
Not After : Apr 24 04:54:51 2026 GMT
Subject: CN=69e1bd1b-51b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ed:3a:46:fe:4c:2d:f5:91:27:fc:9d:80:fa:
a1:7b:03:d1:f9:f1:eb:7c:91:95:a3:82:25:c1:cd:
e2:eb:ec:03:33:0d:00:48:4d:f9:e1:bc:eb:8f:32:
89:e3:77:c3:e9:40:c3:c3:26:25:8c:ab:3f:f0:0b:
78:87:3c:b0:2e:f7:ed:87:bb:82:61:2a:90:ac:4a:
54:58:a3:6a:73:22:71:32:63:be:58:61:68:03:14:
99:31:86:4f:d6:a2:c8:ca:51:e4:f9:ff:5d:59:ea:
3f:04:a4:14:24:af:92:34:53:26:f7:65:cf:c1:68:
b8:88:cc:71:81:a8:51:bf:35:7c:f2:50:5b:98:73:
49:9c:4e:02:d7:dd:c7:97:2a:38:57:57:1c:a8:36:
cf:af:ed:e7:d4:39:3f:55:f5:ca:6f:14:63:97:55:
06:ed:5e:92:0f:33:22:49:47:23:c6:f5:20:92:c1:
13:b4:7e:50:f0:c4:a2:64:55:4b:cd:86:3d:ed:9b:
d7:50:5a:e1:4c:9b:3e:a5:59:1a:b7:98:6a:74:7b:
0c:7e:c5:5c:3d:56:c9:6d:45:b6:11:5f:8c:5c:bb:
6d:4a:72:ed:da:80:0b:06:29:c5:1b:47:20:08:4e:
8a:e9:ae:9c:13:b2:3d:b4:bf:af:54:ed:07:58:60:
b1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E9:D7:33:85:12:C9:27:07:72:6C:3A:4C:D3:9B:22:58:48:23:E4
X509v3 Authority Key Identifier:
keyid:18:81:5B:34:C8:69:28:4B:43:23:C9:16:99:36:77:0F:DD:0B:42:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GIFbNMhpKEtDI8kWmTZ3D90LQjY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:5e:7d:3b:8c:f8:c8:e5:7f:d7:2c:10:d2:29:fd:65:8f:ae:
ac:f2:a4:23:ac:9d:42:fc:f9:90:ed:4b:8e:72:5b:c9:35:08:
bf:b8:8c:11:20:26:bc:e1:79:08:31:42:ea:6f:18:10:52:5e:
20:5d:93:91:ec:8b:34:c0:1d:00:a1:1a:28:70:cd:a9:43:fc:
ea:2e:c3:0a:d8:81:7b:4f:27:97:07:5a:fc:64:3f:40:9f:47:
01:fa:85:c2:b4:b4:c2:b7:d6:69:2d:30:cb:0c:63:43:7c:6d:
4f:13:e7:4b:85:41:57:e1:95:a4:da:b7:56:49:5e:39:4d:16:
b3:92:76:b0:87:6d:10:39:63:1b:67:59:1c:9f:4b:11:f3:a5:
1c:98:10:54:44:51:54:f6:48:4e:7a:f8:9b:d1:46:c5:33:0c:
01:bf:74:b7:bf:02:5a:d1:e6:66:8f:2c:de:9e:6f:e4:a5:02:
af:f5:e0:15:ad:e4:f6:d5:1d:68:fb:5c:a1:f9:ad:d5:fe:8d:
fb:4c:cc:ba:b3:71:19:a7:67:eb:e7:fa:88:37:54:55:9b:2a:
f7:a1:bc:11:c2:3b:d3:2c:5d:f1:9c:6e:c7:3a:ef:15:ea:26:
4d:0b:3e:16:5a:4b:3f:fa:a8:6b:2b:94:68:c4:a8:29:58:4f:
91:50:45:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:34:53 2026 by rpki-client