
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft
File: GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft (raw, json)
Hash identifier: WSogqrwV5MtyPDu4f+2z9MDt8wT1bJ/80x2KfwGpIRg=
Subject key identifier: 54:E1:ED:0E:06:45:E7:94:95:92:E5:40:9D:BA:C7:B3:FF:D0:FA:69
Authority key identifier: 18:81:5B:34:C8:69:28:4B:43:23:C9:16:99:36:77:0F:DD:0B:42:36
Certificate issuer: /CN=A91DACA7/serialNumber=18815B34C869284B4323C9169936770FDD0B4236
Certificate serial: 0198
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GIFbNMhpKEtDI8kWmTZ3D90LQjY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft
Manifest number: 0198
Signing time: Mon 21 Sep 2026 04:18:45 +0000
Manifest this update: Mon 21 Sep 2026 04:18:45 +0000
Manifest next update: Mon 28 Sep 2026 04:18:45 +0000
Files and hashes: 1: GIFbNMhpKEtDI8kWmTZ3D90LQjY.crl (hash: QLPhtnGOqDf6u/uF1XPEofHUZVASzODLfFnxEM3+KDQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.crl
rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GIFbNMhpKEtDI8kWmTZ3D90LQjY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 04:18:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 408 (0x198)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DACA7, serialNumber=18815B34C869284B4323C9169936770FDD0B4236
Validity
Not Before: Sep 21 04:18:45 2026 GMT
Not After : Sep 28 04:18:45 2026 GMT
Subject: CN=6ab0b025-2447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:37:13:ca:fc:ac:9a:33:99:c9:b1:93:b3:c0:
7f:f6:9f:28:05:99:df:f9:75:d2:c0:1b:18:e4:06:
a5:32:34:60:dc:60:9a:87:bf:28:2a:87:ab:68:85:
75:ea:25:31:15:27:93:9e:1a:55:3c:b4:e1:06:84:
7f:be:db:74:a0:43:41:dc:44:24:00:69:3c:8d:90:
62:33:a1:ad:fd:8f:81:13:30:45:4b:ae:f1:9b:28:
c1:eb:55:58:19:f9:23:01:ff:33:eb:b3:08:74:c2:
65:bd:d8:5a:88:1d:9e:57:4a:dd:26:48:4b:bc:bf:
9d:11:a5:9f:3b:08:74:8f:88:3b:ff:08:47:64:bc:
18:c1:17:3e:74:0d:99:fc:b8:4e:80:4f:d4:17:1e:
e1:31:8b:01:9e:b3:b4:3e:44:b7:03:92:cf:b4:37:
51:09:2b:f9:8b:fb:ad:1f:af:1b:f0:0c:82:dd:02:
ab:d4:cc:cd:9e:cb:27:fa:0e:b9:27:8d:a1:51:85:
75:8a:5e:b1:ff:f7:81:20:25:8a:62:4f:f9:0e:a2:
d0:69:9e:e6:92:2d:a3:d9:15:59:b9:24:2d:3a:20:
ad:c4:8c:dc:4b:08:a8:15:76:34:fb:74:92:4e:f0:
63:03:00:9f:4e:2c:76:51:45:26:75:23:fd:f9:1f:
e8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E1:ED:0E:06:45:E7:94:95:92:E5:40:9D:BA:C7:B3:FF:D0:FA:69
X509v3 Authority Key Identifier:
keyid:18:81:5B:34:C8:69:28:4B:43:23:C9:16:99:36:77:0F:DD:0B:42:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GIFbNMhpKEtDI8kWmTZ3D90LQjY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:1b:26:9c:d9:8c:c5:e4:d9:cf:fd:48:c1:f9:d3:1d:61:2b:
dd:2c:8f:ae:8e:3b:34:7c:3f:fa:d9:0e:d1:6f:d1:b9:bc:fe:
6e:a1:95:99:95:83:a8:57:6d:a3:ae:b0:b3:ce:d2:92:e4:12:
32:5d:22:30:08:e8:f6:c0:82:32:24:43:d8:02:6a:99:01:13:
7c:d9:12:2c:a2:ca:b6:6c:16:e3:43:ec:e3:e0:35:f5:a3:52:
63:d6:18:d6:d8:99:8e:e4:c4:cd:19:01:42:50:c8:6a:c4:34:
e1:5f:0b:a9:cf:86:e6:3e:43:88:08:e7:7a:a5:45:f6:86:c3:
b4:76:1b:8a:e8:ea:03:d3:af:ac:4f:64:ae:7e:4c:27:98:01:
4d:89:d7:49:e3:ea:63:6f:f0:c4:87:be:68:72:01:34:d5:71:
ca:d2:6e:80:1a:96:8a:cb:2c:6d:46:02:53:62:15:de:28:b7:
c8:c2:9e:a3:7f:c7:a5:08:20:c1:64:51:af:18:45:d1:99:01:
53:2f:ce:1b:58:91:25:34:f8:9e:78:f6:dc:c4:b4:0a:05:6b:
db:67:1e:c3:72:14:98:57:41:a8:14:48:58:3e:4e:d2:26:24:
d7:cb:65:b0:e1:b4:d0:c2:a6:4b:b6:7b:46:46:5d:7e:e7:93:
f7:78:b2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:38:00 2026 by rpki-client