
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft
File: GNdIiJK3LFSvZOLdI4thnIm3LWg.mft (raw, json)
Hash identifier: qzKW1/rPkcfOERlCG7HnQ+iwHM4C4Y6Qb2MD+A4J5So=
Subject key identifier: 46:13:DD:56:9D:7F:A6:E4:6D:AB:74:EB:F7:BA:8A:BD:02:5A:52:31
Authority key identifier: 18:D7:48:88:92:B7:2C:54:AF:64:E2:DD:23:8B:61:9C:89:B7:2D:68
Certificate issuer: /CN=A91E17BF/serialNumber=18D7488892B72C54AF64E2DD238B619C89B72D68
Certificate serial: 0392
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft
Manifest number: 0388
Signing time: Wed 23 Sep 2026 00:22:38 +0000
Manifest this update: Wed 23 Sep 2026 00:22:38 +0000
Manifest next update: Wed 30 Sep 2026 00:22:38 +0000
Files and hashes: 1: GNdIiJK3LFSvZOLdI4thnIm3LWg.crl (hash: Crp0tUtdCORXG+sYt96Ct6CWC2j0SXHs+w4hVCG652E=)
2: 83D6FAEE077511EDBD013D37C4F9AE02.roa (hash: zggpt7R4a+PI4pARo9mUAXvumVGB88Ycl82ZQK6m+OE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.crl
rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 00:22:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 914 (0x392)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E17BF, serialNumber=18D7488892B72C54AF64E2DD238B619C89B72D68
Validity
Not Before: Sep 23 00:22:38 2026 GMT
Not After : Sep 30 00:22:38 2026 GMT
Subject: CN=6ab31bce-1c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:37:51:9d:c1:73:ad:76:ea:39:6b:b1:90:28:
fe:17:d5:0f:64:63:a8:0a:22:03:93:dd:1a:15:cd:
65:ec:cf:51:ca:da:5d:96:e3:0f:1f:1a:07:0e:5a:
76:5b:0a:6d:04:78:22:6c:ae:75:95:49:64:d9:4c:
16:a0:f3:b3:4d:3b:1f:dd:a3:a7:df:79:57:36:f5:
a6:31:4a:a2:0b:b0:0b:ee:51:d3:00:d8:f6:9d:ec:
f0:82:34:2d:5c:08:26:48:fd:a6:06:ef:cb:15:57:
6f:3d:50:1f:22:1b:c0:c4:e2:d9:e3:46:6d:62:6c:
68:cd:2b:ed:8c:8c:8c:e6:a6:48:e3:66:5d:53:25:
f4:ae:d2:af:f5:1e:67:92:70:af:04:aa:6c:11:a5:
62:47:26:9f:c1:2d:08:58:bc:8f:47:75:a9:d7:53:
8e:9c:21:29:28:3d:1c:d3:ac:6c:ac:d1:80:38:07:
58:cc:26:95:3b:12:f9:99:9c:6d:0a:6e:26:61:59:
e7:ca:df:38:56:a0:fc:0c:c5:d6:02:52:a8:ad:ce:
a8:f8:07:69:d4:5c:18:6a:70:cb:91:b9:f8:07:59:
e6:84:ed:a5:ac:a8:41:4c:f2:af:dc:f3:c8:eb:e5:
5a:1c:e8:6b:9d:0f:15:a4:fc:55:97:8f:6e:48:30:
4a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:13:DD:56:9D:7F:A6:E4:6D:AB:74:EB:F7:BA:8A:BD:02:5A:52:31
X509v3 Authority Key Identifier:
keyid:18:D7:48:88:92:B7:2C:54:AF:64:E2:DD:23:8B:61:9C:89:B7:2D:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:79:6c:a8:e4:07:bd:93:2a:fa:fb:ef:a3:2f:4a:69:e1:d2:
e5:62:67:fe:97:d7:dd:c2:38:d5:44:ea:2c:75:63:63:65:9f:
2f:c1:9e:8f:08:22:24:6d:ae:98:d3:18:c1:30:7a:a8:e7:5e:
bd:02:ea:a0:59:0a:16:c6:95:45:2f:b0:80:14:31:01:e6:3e:
b0:7c:cc:ad:92:03:ab:70:21:a2:0d:1c:57:3c:9f:0d:db:72:
e8:0b:56:8e:7c:af:c2:f5:a9:9c:ff:40:f9:1f:74:ab:fd:5f:
e0:32:4e:b8:f3:11:05:2e:17:68:3a:f0:c4:a3:aa:c6:ed:fa:
12:60:ae:2d:4b:43:d3:33:40:cf:cf:d9:b5:a6:71:a9:ed:a8:
38:69:ee:cb:5d:a1:73:e8:89:fa:66:2f:66:73:12:c6:5b:f1:
5a:ec:ca:3d:bf:a3:a2:1f:28:54:65:1e:a8:4a:b9:ac:6d:f5:
3c:01:11:64:fd:81:d2:b4:8e:13:37:a2:dc:61:3f:af:20:2b:
57:92:b1:97:65:8f:fa:7f:97:aa:0d:d5:32:99:ee:d1:c5:da:
08:45:d6:8e:d5:95:92:a9:f1:51:4d:e7:8a:f1:e7:b9:88:70:
f5:56:5f:b3:b5:48:a0:eb:72:69:88:ac:38:ec:df:b0:03:34:
2a:7c:87:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:39:04 2026 by rpki-client