
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft
File: GNdIiJK3LFSvZOLdI4thnIm3LWg.mft (raw, json)
Hash identifier: +PoOTDqjbVWH4V4CCkdR23MkGjCk2HZYbj8HY11pAcs=
Subject key identifier: 35:2F:3F:3A:27:B9:CE:E2:8D:FC:05:D6:89:C9:21:75:10:89:62:87
Authority key identifier: 18:D7:48:88:92:B7:2C:54:AF:64:E2:DD:23:8B:61:9C:89:B7:2D:68
Certificate issuer: /CN=A91E17BF/serialNumber=18D7488892B72C54AF64E2DD238B619C89B72D68
Certificate serial: 0371
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft
Manifest number: 0368
Signing time: Mon 27 Jul 2026 02:01:14 +0000
Manifest this update: Mon 27 Jul 2026 02:01:14 +0000
Manifest next update: Mon 03 Aug 2026 02:01:14 +0000
Files and hashes: 1: GNdIiJK3LFSvZOLdI4thnIm3LWg.crl (hash: OBXxUhxYtiWwDbqTBKN6eFaVn0WS0tkiSnHJp1v9Ulw=)
2: 83D6FAEE077511EDBD013D37C4F9AE02.roa (hash: XduLMfOTlu5b31dWGwP8GqlgYSkiZV7iaoNBfx7mKds=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.crl
rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 881 (0x371)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E17BF, serialNumber=18D7488892B72C54AF64E2DD238B619C89B72D68
Validity
Not Before: Jul 27 02:01:14 2026 GMT
Not After : Aug 3 02:01:14 2026 GMT
Subject: CN=6a66bbea-77bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b5:78:da:78:db:d0:13:fc:a2:47:71:f8:c9:
e4:ad:1d:60:e2:4e:3a:e2:53:3b:13:73:c2:84:b1:
67:f8:0f:3a:e9:b5:e7:4b:64:b7:52:b9:4e:85:e8:
86:44:9f:25:e3:46:ad:c7:f3:4b:ca:3c:ef:ee:ae:
81:c6:a5:ae:df:ab:b5:d2:1b:bb:a3:b4:51:db:c3:
d6:07:41:9c:3e:4f:e3:3c:c5:02:ff:66:d1:74:4f:
79:a2:88:14:76:e0:b1:98:e5:8d:57:24:7b:18:b8:
43:8c:91:ce:d4:be:9a:eb:43:c1:78:4c:29:b3:a8:
9d:08:27:eb:42:45:e5:d7:cb:bd:71:ca:5f:0d:2b:
e9:4f:7a:57:3a:19:85:9e:22:aa:f0:42:14:ea:e3:
28:a5:57:a6:6c:ea:ed:1f:c2:af:16:ff:2c:76:56:
2e:a2:13:c8:a0:f2:1b:68:46:a8:b1:47:53:4d:92:
05:68:24:b5:7a:de:de:f3:2d:23:8d:0a:ca:ee:e5:
87:c2:a6:bb:e6:5d:03:a5:26:44:41:6e:5b:9e:05:
90:d2:e9:3f:11:10:ff:bc:5f:d0:a9:0b:ad:7d:3d:
2a:d8:17:3b:8d:40:6e:ee:89:57:cf:0b:ad:47:d9:
4a:98:30:f3:68:e6:1b:3c:8a:eb:b4:c2:e2:e0:13:
a4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:2F:3F:3A:27:B9:CE:E2:8D:FC:05:D6:89:C9:21:75:10:89:62:87
X509v3 Authority Key Identifier:
keyid:18:D7:48:88:92:B7:2C:54:AF:64:E2:DD:23:8B:61:9C:89:B7:2D:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:ab:2c:27:39:6f:0d:75:83:7b:36:52:ac:6e:c6:d9:eb:fd:
3a:de:a8:72:71:0c:63:14:38:d5:67:b7:f0:8b:ca:db:cd:1e:
d1:7c:37:2f:4b:cc:b1:66:78:fd:d3:1c:3f:40:e5:9e:63:7f:
70:d9:95:41:04:7d:0c:80:d4:f6:9e:ec:f0:25:f7:b7:5c:6c:
d3:f7:9a:50:a9:f4:74:64:04:22:f0:03:fb:6c:20:0a:4e:55:
c3:46:a3:5a:3b:a2:41:50:8e:14:3a:87:60:e2:4b:9a:f1:c0:
3c:87:8c:ef:d5:e5:a0:cf:3a:6b:ed:aa:c8:df:83:42:71:56:
be:34:f1:da:48:30:53:5a:5d:1e:7a:d3:99:9b:16:ab:10:c2:
02:26:c9:62:0f:7a:9c:90:aa:88:5b:0e:c4:ef:20:e1:93:1e:
4d:f9:7c:15:07:0d:bb:4b:ab:e1:2f:21:7c:b7:15:e2:bc:57:
5a:c8:d4:fc:96:16:2b:ef:b0:34:55:99:c6:69:b9:fe:b4:e8:
3f:c7:65:2a:de:07:0e:9a:a5:1f:35:60:6f:bb:1f:bb:c2:73:
70:67:e6:82:e6:68:60:70:48:5e:eb:1d:40:ef:1c:48:84:dd:
e4:61:eb:ad:40:e4:79:25:82:12:42:ee:1e:73:70:7d:db:8a:
43:85:5d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:23:06 2026 by rpki-client