
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft
File: GfKkbixJA4dTXpRfaxSGcABoV2E.mft (raw, json)
Hash identifier: 4g63UCNH+fkyar6sTeDDrLdWBcqKiHcXs9nbsNI8krM=
Subject key identifier: 71:4F:8F:33:8F:77:3C:BE:87:83:10:9B:1C:F0:81:9F:16:95:E9:EA
Authority key identifier: 19:F2:A4:6E:2C:49:03:87:53:5E:94:5F:6B:14:86:70:00:68:57:61
Certificate issuer: /CN=A91F0BDE/serialNumber=19F2A46E2C490387535E945F6B14867000685761
Certificate serial: 84
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft
Manifest number: 82
Signing time: Fri 17 Apr 2026 07:22:45 +0000
Manifest this update: Fri 17 Apr 2026 07:22:45 +0000
Manifest next update: Fri 24 Apr 2026 07:22:45 +0000
Files and hashes: 1: GfKkbixJA4dTXpRfaxSGcABoV2E.crl (hash: q3S/kF73E+a8KUAIjjlPL8yd0wG8qRum/z0UOj0uhLo=)
2: 7DF6251A74B311F0A365281CC4F9AE02.roa (hash: zAfzIwWbsqduKym8Tq6NvhU1YHpokkZy+Zh0KEGQ0oM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.crl
rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:22:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132 (0x84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0BDE, serialNumber=19F2A46E2C490387535E945F6B14867000685761
Validity
Not Before: Apr 17 07:22:45 2026 GMT
Not After : Apr 24 07:22:45 2026 GMT
Subject: CN=69e1dfc5-4ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:82:99:ef:07:7c:29:40:d1:23:bb:6d:e7:a8:
ef:ff:36:29:33:1b:fd:3e:3d:80:b0:1e:86:0b:36:
c2:8a:76:89:dd:a3:68:86:b8:cd:ed:f5:b0:3e:13:
be:80:c0:9a:d7:05:b2:78:0d:4c:9e:fa:c3:ab:08:
0d:d5:25:4a:d6:d1:2b:8a:8e:12:38:9e:9f:b4:d2:
cb:98:6e:79:b0:7c:4e:88:95:75:de:72:6d:10:69:
44:3a:f4:a4:98:16:7e:8f:dd:0c:ed:f5:20:73:07:
84:96:36:02:d3:b3:1e:da:2e:39:d3:5c:9d:b7:45:
57:bb:5e:92:11:60:74:68:83:49:22:96:fb:2b:5c:
98:3a:bf:d5:64:98:72:a6:f8:29:fe:38:6c:0b:54:
d6:b0:95:1d:bb:3c:e1:83:77:dd:05:aa:86:8b:73:
0c:9a:ac:20:fa:70:6b:e8:15:8e:5e:c1:23:55:4f:
75:b8:21:2c:54:87:6d:7d:f9:06:57:bc:2d:27:40:
6d:8e:fe:a1:d7:b5:b5:4c:87:ab:fd:85:ec:95:4b:
92:61:52:1a:7c:d0:1d:e1:fa:72:cd:a2:32:5a:66:
0e:42:61:0c:e5:4a:c1:10:ad:bc:3f:29:19:c1:9e:
18:3a:ba:4e:c9:c5:61:df:54:0a:c4:1d:e8:51:e3:
e1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:4F:8F:33:8F:77:3C:BE:87:83:10:9B:1C:F0:81:9F:16:95:E9:EA
X509v3 Authority Key Identifier:
keyid:19:F2:A4:6E:2C:49:03:87:53:5E:94:5F:6B:14:86:70:00:68:57:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:68:5e:72:62:12:0f:cb:26:8c:e2:bb:5d:d8:e2:71:ca:5e:
11:94:eb:f8:1c:d9:4b:0c:87:07:c9:15:72:8d:24:f5:f0:65:
a7:f9:47:ea:d0:3f:95:bd:9a:84:d0:3b:f0:21:1b:06:6b:f0:
d7:60:22:09:13:77:98:f8:23:a0:79:d8:6b:be:23:83:6a:a1:
fc:02:76:23:78:f2:48:61:39:9f:43:3b:33:1f:f9:b9:e2:11:
38:bb:cd:a5:96:5c:d2:86:15:23:7b:ff:06:1e:e9:d7:68:d2:
54:8e:20:f1:1c:0f:6d:a9:b4:6f:bc:3c:05:36:6f:31:e5:01:
ee:9f:fb:9d:c6:72:ea:06:dd:b5:47:dd:b7:d9:94:c3:42:a4:
b2:37:cc:0e:67:5a:fc:9b:48:a4:8d:bf:cc:5f:d4:0b:41:f7:
67:de:c4:1b:40:ac:d5:63:d8:65:07:a0:b9:99:da:60:6c:5b:
aa:61:cf:13:f5:9f:72:6e:0a:34:28:98:6e:e3:3a:0f:b1:5b:
ae:1d:d7:b4:48:31:d5:69:9d:01:2f:a1:b2:18:ab:d9:ab:f7:
f2:f0:ac:b0:ea:1f:ff:19:31:4c:ff:ff:41:26:c4:66:80:7d:
d6:b6:67:5c:d0:d0:69:ca:94:2a:52:35:00:0d:9d:a1:57:1e:
80:06:a3:d0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjBCREUxMTAvBgNVBAUTKDE5RjJBNDZFMkM0OTAzODc1MzVFOTQ1RjZCMTQ4Njcw
MDA2ODU3NjEwHhcNMjYwNDE3MDcyMjQ1WhcNMjYwNDI0MDcyMjQ1WjAYMRYwFAYD
VQQDEw02OWUxZGZjNS00YWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmYKZ7wd8KUDRI7tt56jv/zYpMxv9Pj2AsB6GCzbCinaJ3aNohrjN7fWwPhO+
gMCa1wWyeA1MnvrDqwgN1SVK1tErio4SOJ6ftNLLmG55sHxOiJV13nJtEGlEOvSk
mBZ+j90M7fUgcweEljYC07Me2i4501ydt0VXu16SEWB0aINJIpb7K1yYOr/VZJhy
pvgp/jhsC1TWsJUduzzhg3fdBaqGi3MMmqwg+nBr6BWOXsEjVU91uCEsVIdtffkG
V7wtJ0Btjv6h17W1TIer/YXslUuSYVIafNAd4fpyzaIyWmYOQmEM5UrBEK28PykZ
wZ4YOrpOycVh31QKxB3oUePhgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHFPjzOP
dzy+h4MQmxzwgZ8WlenqMB8GA1UdIwQYMBaAFBnypG4sSQOHU16UX2sUhnAAaFdh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEJERS8yOUQxRTc2Qzc0
QjMxMUYwQUUyOTUyMUJDNEY5QUUwMi9HZktrYml4SkE0ZFRYcFJmYXhTR2NBQm9W
MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0dmS2tiaXhKQTRkVFhwUmZheFNHY0FCb1YyRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MEJERS8yOUQxRTc2Qzc0QjMxMUYwQUUyOTUyMUJDNEY5QUUwMi9HZktrYml4SkE0
ZFRYcFJmYXhTR2NBQm9WMkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaWhecmISD8smjOK7XdjiccpeEZTr+BzZSwyHB8kVco0k9fBlp/lH6tA/lb2a
hNA78CEbBmvw12AiCRN3mPgjoHnYa74jg2qh/AJ2I3jySGE5n0M7Mx/5ueIROLvN
pZZc0oYVI3v/Bh7p12jSVI4g8RwPbam0b7w8BTZvMeUB7p/7ncZy6gbdtUfdt9mU
w0KksjfMDmda/JtIpI2/zF/UC0H3Z97EG0Cs1WPYZQeguZnaYGxbqmHPE/Wfcm4K
NCiYbuM6D7Fbrh3XtEgx1WmdAS+hshir2av38vCssOof/xkxTP//QSbEZoB91rZn
XNDQacqUKlI1AA2doVcegAaj0A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:05:50 2026 by rpki-client