
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft
File: GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft (raw, json)
Hash identifier: qdwE7ahSdu0FX+9iLLjm+PgPk4L2WnyV3Y6L7raCyEs=
Subject key identifier: 43:1A:68:F0:12:D7:5C:BE:B1:BA:AF:A8:C6:C2:25:D5:B2:DB:94:65
Authority key identifier: 18:F9:7D:09:8E:4E:BD:06:10:D5:4F:48:D5:B3:E1:AA:74:3A:20:29
Certificate issuer: /CN=A91DCD09/serialNumber=18F97D098E4EBD0610D54F48D5B3E1AA743A2029
Certificate serial: 1B36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft
Manifest number: 1B06
Signing time: Sat 10 Oct 2026 16:18:09 +0000
Manifest this update: Sat 10 Oct 2026 16:18:08 +0000
Manifest next update: Sat 17 Oct 2026 16:18:08 +0000
Files and hashes: 1: GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl (hash: gjgTpor4TbEGHRhIPL1uqjMXkkJL1felQ/jr6mnMQRU=)
2: 234205EA327A11E8A1143B79C4F9AE02.roa (hash: hVP5S39wlvmMDtmRClMQB/QRISi73IfXdzraddCLdKE=)
3: CF4E04A6639A11F1BC9896E97047A888.roa (hash: ypxX0jBaXkiCB0ETTMRiSUcoQBnGELanHxTUttpVceQ=)
4: 9DF7DA5C557C11E7B34BCE81C4F9AE02.roa (hash: aa78yEwla8gioa81Qat/hfsABb5YPFtp7OCbzreLAxQ=)
5: 64A7FFE2F74811E8A07B9609C4F9AE02.roa (hash: drCBlu0Wd1j+au7csh/4YsHVMmmQfy83EvLOelKgjpk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl
rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 16:18:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6966 (0x1b36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DCD09, serialNumber=18F97D098E4EBD0610D54F48D5B3E1AA743A2029
Validity
Not Before: Oct 10 16:18:08 2026 GMT
Not After : Oct 17 16:18:08 2026 GMT
Subject: CN=6aca6540-3a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:48:d0:e6:9e:30:e8:9f:2c:9e:2e:d8:48:c0:
9b:3c:7a:f1:0a:e9:ca:72:5e:79:be:24:c1:2c:2d:
1b:d5:9d:8a:22:72:0d:34:26:96:db:cb:47:43:2e:
5a:8f:b2:12:84:83:1c:7b:b7:e5:e6:e3:2b:59:a5:
45:05:8b:aa:da:e0:3d:2d:90:78:4a:8b:13:42:f2:
1e:8a:fb:d1:58:e8:89:1e:c3:d3:6f:f4:81:ba:92:
ea:4b:cd:72:20:34:f2:75:b8:86:ca:1f:2d:5a:6d:
05:85:ab:e3:c7:90:72:03:76:cb:ce:81:ac:9c:51:
f5:3e:62:9c:b6:74:0b:0b:2e:d3:39:94:b4:bf:be:
7e:2f:e9:2d:c6:bc:9a:50:e2:31:e7:53:ea:01:bf:
c5:78:da:b7:fd:b0:0e:a8:4e:d5:0b:a1:e5:44:7c:
60:0b:e6:f2:4e:8f:08:ea:30:6f:29:15:92:70:ae:
be:f4:02:89:9a:4c:6b:95:76:9e:b8:7b:32:24:9b:
9f:5e:3f:5f:2b:36:a2:c8:12:38:a9:93:16:9b:59:
5f:5c:f7:f5:a4:f1:17:da:18:cd:17:12:88:5e:71:
12:c7:bb:d2:88:d6:cc:a2:03:f3:8e:6f:ad:f7:23:
08:12:ec:9b:2f:58:bd:9c:7c:5a:80:12:4f:24:10:
36:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1A:68:F0:12:D7:5C:BE:B1:BA:AF:A8:C6:C2:25:D5:B2:DB:94:65
X509v3 Authority Key Identifier:
keyid:18:F9:7D:09:8E:4E:BD:06:10:D5:4F:48:D5:B3:E1:AA:74:3A:20:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:21:01:b7:ff:84:fc:b3:56:01:cc:8d:45:59:98:c2:8e:a3:
f7:07:47:db:1a:4f:a5:40:18:ea:84:67:53:5d:ce:6d:d4:c0:
e5:21:50:26:36:5e:1c:2c:d5:f3:2b:32:9c:71:32:2e:4c:fa:
40:05:02:1e:ac:9e:ce:aa:11:23:71:9e:f5:bd:79:1f:f7:c8:
89:80:60:7b:01:eb:1b:c3:ee:61:5c:72:bd:05:2b:7f:8e:a9:
93:ac:34:ef:15:2d:49:bc:3a:66:bf:af:fa:b7:cf:ad:5e:0d:
90:d5:03:e4:7d:20:8c:d2:0b:05:4a:9c:12:03:fa:ab:d7:f1:
f0:54:6e:43:b1:6c:21:c2:29:17:ce:ab:1c:51:df:99:9d:50:
ae:bf:6a:59:a5:c1:a4:6e:8e:1a:c9:8f:22:85:4d:2b:75:96:
c7:00:f3:5b:5c:53:70:13:c3:4b:e3:c6:00:f6:21:f1:6a:1f:
6e:81:ca:f2:ce:0e:76:91:8d:9d:20:56:cf:07:1d:9e:83:7d:
39:4b:28:50:09:ec:e0:4d:7c:5e:60:33:f6:83:35:74:1f:11:
56:f4:3b:60:8b:03:36:1a:a9:9a:d9:84:4f:26:30:ec:ab:2f:
62:ce:54:ce:c1:4d:69:db:21:5f:4c:32:fd:27:38:36:96:f8:
02:51:90:ef
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RENEMDkxMTAvBgNVBAUTKDE4Rjk3RDA5OEU0RUJEMDYxMEQ1NEY0OEQ1QjNFMUFB
NzQzQTIwMjkwHhcNMjYxMDEwMTYxODA4WhcNMjYxMDE3MTYxODA4WjAYMRYwFAYD
VQQDEw02YWNhNjU0MC0zYThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsEjQ5p4w6J8sni7YSMCbPHrxCunKcl55viTBLC0b1Z2KInINNCaW28tHQy5a
j7IShIMce7fl5uMrWaVFBYuq2uA9LZB4SosTQvIeivvRWOiJHsPTb/SBupLqS81y
IDTydbiGyh8tWm0Fhavjx5ByA3bLzoGsnFH1PmKctnQLCy7TOZS0v75+L+ktxrya
UOIx51PqAb/FeNq3/bAOqE7VC6HlRHxgC+byTo8I6jBvKRWScK6+9AKJmkxrlXae
uHsyJJufXj9fKzaiyBI4qZMWm1lfXPf1pPEX2hjNFxKIXnESx7vSiNbMogPzjm+t
9yMIEuybL1i9nHxagBJPJBA24QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEMaaPAS
11y+sbqvqMbCJdWy25RlMB8GA1UdIwQYMBaAFBj5fQmOTr0GENVPSNWz4ap0OiAp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS8yRjhCODU1MjU0
ODUxMUU3QjFEODQ3MTNDNEY5QUUwMi9HUGw5Q1k1T3ZRWVExVTlJMWJQaHFuUTZJ
Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dQbDlDWTVPdlFZUTFVOUkxYlBocW5RNklDay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
Q0QwOS8yRjhCODU1MjU0ODUxMUU3QjFEODQ3MTNDNEY5QUUwMi9HUGw5Q1k1T3ZR
WVExVTlJMWJQaHFuUTZJQ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnCEBt/+E/LNWAcyNRVmYwo6j9wdH2xpPpUAY6oRnU13ObdTA5SFQJjZeHCzV
8ysynHEyLkz6QAUCHqyezqoRI3Ge9b15H/fIiYBgewHrG8PuYVxyvQUrf46pk6w0
7xUtSbw6Zr+v+rfPrV4NkNUD5H0gjNILBUqcEgP6q9fx8FRuQ7FsIcIpF86rHFHf
mZ1Qrr9qWaXBpG6OGsmPIoVNK3WWxwDzW1xTcBPDS+PGAPYh8WofboHK8s4OdpGN
nSBWzwcdnoN9OUsoUAns4E18XmAz9oM1dB8RVvQ7YIsDNhqpmtmETyYw7KsvYs5U
zsFNadshX0wy/Sc4Npb4AlGQ7w==
-----END CERTIFICATE-----
Generated at Mon Oct 12 04:56:41 2026 by rpki-client