
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft
File: GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft (raw, json)
Hash identifier: hDakKug0XX2gaN4W1Uy4vP0jMErJbS8Rc/dDoc6K7y8=
Subject key identifier: E3:19:0C:00:A5:91:02:BC:97:59:12:A5:9A:A6:F1:9C:BD:54:77:64
Authority key identifier: 18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B
Certificate issuer: /CN=A91DDCB6/serialNumber=18DC531D44F05962E97F23845736141D3E02681B
Certificate serial: 07A7
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft
Manifest number: 0795
Signing time: Sun 20 Sep 2026 20:05:56 +0000
Manifest this update: Sun 20 Sep 2026 20:05:55 +0000
Manifest next update: Sun 27 Sep 2026 20:05:55 +0000
Files and hashes: 1: GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl (hash: 5Yqdocv4PtXf14h6W01o2vIQ31GgWsSBMoM8OHac72U=)
2: 48D65BC2D28F11EB9F83683DC4F9AE02.roa (hash: PKuAHlg7IDQmqtBcmxC313Us4ZuOMAlQSrtZq4f+5Bg=)
3: 00756F7E63F011EC987F5B19C4F9AE02.roa (hash: NJ2yttVg/1tKklwG0b4mf3B8YWLlDm4GZ+hgK2zNvsU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl
rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 20:05:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1959 (0x7a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DDCB6, serialNumber=18DC531D44F05962E97F23845736141D3E02681B
Validity
Not Before: Sep 20 20:05:55 2026 GMT
Not After : Sep 27 20:05:55 2026 GMT
Subject: CN=6ab03ca3-b082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a8:7c:1e:2d:dc:f7:14:e3:18:9a:60:1b:82:
5c:16:4d:83:1f:6b:8f:96:e0:4a:18:cd:bc:fa:a8:
35:08:cc:60:2b:ab:f1:4e:d4:01:f3:4c:2a:b3:63:
e5:20:bb:62:d5:79:a5:d3:a7:16:5c:77:ee:77:f7:
84:06:4e:1e:fb:23:5e:a0:99:53:3a:d2:f9:38:a3:
4b:99:7a:6a:5d:01:d6:23:7d:8c:ae:c2:fe:49:eb:
3a:e6:09:6a:70:e0:4b:aa:9d:6b:fc:36:fd:93:d6:
b1:99:e0:c4:7f:4f:09:84:d3:f0:cc:53:b2:e6:0f:
08:82:90:0e:b4:c6:da:89:65:ea:fc:5b:57:2b:61:
67:f1:b1:2c:20:e5:9c:ac:e1:0b:e5:c7:99:ed:99:
18:24:e3:68:b4:50:42:0a:62:ba:28:55:6c:6a:13:
70:09:37:be:23:09:51:07:12:62:75:dc:0d:80:42:
0a:1c:5d:8b:8c:2b:7f:0f:13:58:a3:5b:be:fe:d9:
0a:be:9e:3c:45:60:58:46:09:4e:5d:3a:e1:f6:80:
36:79:b2:67:33:d2:1b:6a:c3:c0:c1:ae:c5:5a:a6:
7a:2d:a0:67:14:41:59:02:bd:73:a8:4b:59:26:87:
09:e8:74:de:16:80:64:2f:a8:6f:21:ba:61:a7:82:
cf:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:19:0C:00:A5:91:02:BC:97:59:12:A5:9A:A6:F1:9C:BD:54:77:64
X509v3 Authority Key Identifier:
keyid:18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:de:c5:3b:75:fc:99:18:6f:1b:94:86:f9:6e:c2:d3:64:34:
3f:70:27:cb:20:f5:61:73:39:7e:84:26:b9:73:ba:e4:23:85:
9f:f9:9e:dd:20:b6:43:55:32:9d:f7:aa:29:08:67:e4:fa:fb:
7a:5e:ec:33:d5:a5:3c:41:fa:df:cd:38:b9:98:77:0b:5f:1d:
3a:91:4c:f2:03:e1:7a:3c:2d:8f:fc:6b:77:0a:de:1c:d5:ac:
27:ad:88:55:24:bd:06:da:81:c2:cb:e3:e0:ef:9f:23:fd:9b:
a0:1a:b8:7d:85:e9:92:9e:f1:9f:e4:ad:ff:b5:1a:c6:8d:e1:
e7:29:3b:eb:3a:b6:6f:0b:dd:e3:9d:a6:3b:c8:4f:4b:60:64:
c6:7e:59:65:c6:ea:a8:34:2e:30:33:85:0e:58:1a:5f:cd:f8:
17:f5:ec:49:13:21:d2:90:62:72:24:c6:a8:c9:b0:f2:1e:03:
d2:9e:1b:c0:d8:35:1d:76:45:15:77:3b:3c:b0:ab:13:4b:34:
43:51:31:20:cc:bf:12:e8:fa:93:be:c2:1e:f6:8d:e4:26:65:
cd:5a:e2:8a:3b:4c:4f:82:30:67:1b:78:e0:46:13:55:4b:f2:
26:8b:0d:c2:eb:62:72:70:16:9b:00:b3:25:65:cb:a5:2d:f0:
a2:7c:3e:9c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RERDQjYxMTAvBgNVBAUTKDE4REM1MzFENDRGMDU5NjJFOTdGMjM4NDU3MzYxNDFE
M0UwMjY4MUIwHhcNMjYwOTIwMjAwNTU1WhcNMjYwOTI3MjAwNTU1WjAYMRYwFAYD
VQQDEw02YWIwM2NhMy1iMDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq6h8Hi3c9xTjGJpgG4JcFk2DH2uPluBKGM28+qg1CMxgK6vxTtQB80wqs2Pl
ILti1Xml06cWXHfud/eEBk4e+yNeoJlTOtL5OKNLmXpqXQHWI32MrsL+Ses65glq
cOBLqp1r/Db9k9axmeDEf08JhNPwzFOy5g8IgpAOtMbaiWXq/FtXK2Fn8bEsIOWc
rOEL5ceZ7ZkYJONotFBCCmK6KFVsahNwCTe+IwlRBxJiddwNgEIKHF2LjCt/DxNY
o1u+/tkKvp48RWBYRglOXTrh9oA2ebJnM9IbasPAwa7FWqZ6LaBnFEFZAr1zqEtZ
JocJ6HTeFoBkL6hvIbphp4LP5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOMZDACl
kQK8l1kSpZqm8Zy9VHdkMB8GA1UdIwQYMBaAFBjcUx1E8Fli6X8jhFc2FB0+Amgb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENCNi82RTlBQzgwNjcx
RDgxMUVCODA0NzcyMURDNEY5QUUwMi9HTnhUSFVUd1dXTHBmeU9FVnpZVUhUNENh
QnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL0dOeFRIVVR3V1dMcGZ5T0VWellVSFQ0Q2FCcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RENCNi82RTlBQzgwNjcxRDgxMUVCODA0NzcyMURDNEY5QUUwMi9HTnhUSFVUd1dX
THBmeU9FVnpZVUhUNENhQnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAb97FO3X8mRhvG5SG+W7C02Q0P3AnyyD1YXM5foQmuXO65COFn/me3SC2Q1Uy
nfeqKQhn5Pr7el7sM9WlPEH63804uZh3C18dOpFM8gPhejwtj/xrdwreHNWsJ62I
VSS9BtqBwsvj4O+fI/2boBq4fYXpkp7xn+St/7Uaxo3h5yk76zq2bwvd452mO8hP
S2Bkxn5ZZcbqqDQuMDOFDlgaX834F/XsSRMh0pBiciTGqMmw8h4D0p4bwNg1HXZF
FXc7PLCrE0s0Q1ExIMy/Euj6k77CHvaN5CZlzVriijtMT4IwZxt44EYTVUvyJosN
wuticnAWmwCzJWXLpS3wonw+nA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 03:26:28 2026 by rpki-client