
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft
File: GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft (raw, json)
Hash identifier: v4p2+3czdrqRP3nS5d6wDzSN+pys7rUTwOgEJkA/Sj4=
Subject key identifier: 3C:B9:59:90:79:6B:38:DF:1B:24:4B:64:E0:A9:A4:A7:83:33:6A:06
Authority key identifier: 18:81:5B:34:C8:69:28:4B:43:23:C9:16:99:36:77:0F:DD:0B:42:36
Certificate issuer: /CN=A91DACA7/serialNumber=18815B34C869284B4323C9169936770FDD0B4236
Certificate serial: 017B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GIFbNMhpKEtDI8kWmTZ3D90LQjY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft
Manifest number: 017B
Signing time: Mon 27 Jul 2026 06:27:52 +0000
Manifest this update: Mon 27 Jul 2026 06:27:52 +0000
Manifest next update: Mon 03 Aug 2026 06:27:52 +0000
Files and hashes: 1: GIFbNMhpKEtDI8kWmTZ3D90LQjY.crl (hash: uQyddJ1slP34rYO1DX6cn4QhguOKNWWocNFWKzrag7I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.crl
rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GIFbNMhpKEtDI8kWmTZ3D90LQjY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 06:27:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 379 (0x17b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DACA7, serialNumber=18815B34C869284B4323C9169936770FDD0B4236
Validity
Not Before: Jul 27 06:27:52 2026 GMT
Not After : Aug 3 06:27:52 2026 GMT
Subject: CN=6a66fa68-c82e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:93:6a:ea:8f:01:8f:8e:00:cb:b1:be:16:3b:
d1:48:ed:e3:3a:91:71:82:cd:4b:d7:95:d8:cb:d1:
5a:bd:93:d9:46:13:bc:f7:da:97:3d:f5:98:75:52:
b2:f0:e5:1c:6b:ad:15:7b:1c:d6:26:65:f9:92:32:
ca:28:77:1b:5e:bf:8a:f5:dc:aa:9e:2d:c1:54:39:
bd:eb:e0:c4:00:71:27:bc:be:ac:3d:8e:f3:8f:11:
82:52:c0:2d:ea:cb:ae:90:c0:3d:75:25:3b:d0:b0:
c8:2a:0e:79:43:ee:ed:de:9f:05:18:79:be:c3:04:
5f:b9:78:f2:3e:3c:bf:eb:7a:30:36:14:fe:14:20:
d6:e1:8b:af:04:35:7c:c2:da:00:88:42:ca:ed:56:
d7:61:7a:0b:8b:ef:77:58:8e:ce:2d:32:ae:d0:b3:
c5:da:51:8c:2a:b3:a0:a8:4a:92:46:62:89:3f:bb:
9c:d4:bd:11:cd:95:c6:32:aa:0b:e4:f1:66:7a:b8:
c4:6f:9c:75:d0:f1:ba:33:c6:75:0f:5c:7a:1f:35:
ed:ec:62:55:b3:3e:71:80:5d:22:66:0b:10:ef:b2:
0b:17:a7:bf:93:58:37:f1:75:71:39:0b:db:ad:ed:
42:9c:08:f5:1c:bd:31:20:cc:e5:a1:c7:d5:48:f1:
b3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B9:59:90:79:6B:38:DF:1B:24:4B:64:E0:A9:A4:A7:83:33:6A:06
X509v3 Authority Key Identifier:
keyid:18:81:5B:34:C8:69:28:4B:43:23:C9:16:99:36:77:0F:DD:0B:42:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GIFbNMhpKEtDI8kWmTZ3D90LQjY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:37:ac:14:3c:ab:18:e8:34:c4:67:f6:5f:39:c9:6a:6d:4e:
e9:99:b5:79:f6:06:6b:71:a8:7c:36:96:30:52:74:2b:69:99:
97:b8:bd:ee:d1:14:97:1f:22:e8:cf:f6:28:db:f1:72:94:68:
88:aa:ba:ef:4c:76:d8:18:13:d0:94:c1:2a:40:b4:b6:e3:d6:
35:b9:22:83:fb:f6:c2:b9:f0:3c:a1:66:88:00:44:14:78:38:
a4:30:c8:05:13:79:52:d9:6d:96:14:4c:c5:39:34:59:d4:5b:
2c:74:63:15:d8:8e:e9:07:93:37:be:b8:4d:aa:38:3f:3a:12:
99:1c:87:ab:f5:45:43:3c:df:77:c7:ae:0f:6e:c7:df:1c:86:
d3:1a:d8:d5:d7:9d:f5:69:43:43:a0:81:11:9a:0c:f9:39:13:
ec:a1:4f:6e:87:c8:0e:6d:64:79:ca:c8:ee:d1:85:2f:ed:8e:
22:2c:46:a6:ab:0c:74:d8:2f:f8:f7:79:e8:8d:13:de:f8:62:
1c:62:36:89:01:e8:e4:83:61:f1:2b:c4:f4:f5:5f:40:79:ed:
fe:b2:06:c7:e9:3f:7c:ea:14:e0:0e:77:b4:dd:f4:ba:6b:00:
43:58:d2:b9:1c:4c:a9:73:0d:36:be:4e:e6:cd:ec:55:6d:1b:
85:9c:e7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:31:14 2026 by rpki-client