
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft
File: GfKkbixJA4dTXpRfaxSGcABoV2E.mft (raw, json)
Hash identifier: 9+JzBfu8rI2k9FOgjLfjfaaNe0Pq/UT058itMHr9CQ4=
Subject key identifier: E0:65:7D:99:D5:D3:45:D8:8F:81:F3:02:FF:30:42:11:62:C4:77:79
Authority key identifier: 19:F2:A4:6E:2C:49:03:87:53:5E:94:5F:6B:14:86:70:00:68:57:61
Certificate issuer: /CN=A91F0BDE/serialNumber=19F2A46E2C490387535E945F6B14867000685761
Certificate serial: DB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft
Manifest number: D8
Signing time: Thu 01 Oct 2026 07:59:00 +0000
Manifest this update: Thu 01 Oct 2026 07:58:59 +0000
Manifest next update: Thu 08 Oct 2026 07:58:59 +0000
Files and hashes: 1: GfKkbixJA4dTXpRfaxSGcABoV2E.crl (hash: lfKdPQqgUdrttPRFTrnYHu3PsNC1SL5OaqL1I2fjcWg=)
2: 7DF6251A74B311F0A365281CC4F9AE02.roa (hash: CSo2AGQqGn0kd2y3BxFVD7WYUjWebI85PFFaDCSVnE8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.crl
rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 08 Oct 2026 07:58:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 219 (0xdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0BDE, serialNumber=19F2A46E2C490387535E945F6B14867000685761
Validity
Not Before: Oct 1 07:58:59 2026 GMT
Not After : Oct 8 07:58:59 2026 GMT
Subject: CN=6abe12c4-e278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:73:8e:ff:f5:c5:46:3d:34:01:05:cc:69:a3:
60:e4:93:01:66:82:cf:c3:00:92:28:a6:85:6b:10:
11:77:2d:a2:48:b1:d1:d6:ad:9f:fe:07:a2:dd:13:
41:db:c1:8b:83:29:5e:96:8a:a9:b1:cb:af:ee:bf:
b7:92:09:6e:b7:e2:f3:92:cf:9e:89:69:0c:07:7e:
2b:73:1a:29:4b:9b:a4:bd:4a:f3:e4:1c:31:9c:e5:
95:1f:65:02:38:66:ee:fc:a9:6a:98:7e:03:6f:89:
90:a3:fe:c4:f4:52:cf:33:a4:0b:fa:57:7a:f6:8b:
a8:03:ca:47:e1:89:33:70:17:cf:4a:11:05:16:a0:
da:30:64:31:7b:ea:8c:c2:0f:31:b7:49:42:11:d7:
a9:e2:d9:7a:74:ef:26:15:1b:50:6b:fd:d9:93:f6:
49:34:39:ce:bb:3f:58:7c:61:dc:a1:68:9e:7f:2a:
9f:da:7c:49:81:eb:93:23:32:71:e5:52:0d:7c:91:
42:93:56:55:58:b1:9e:2a:cd:54:07:4e:4f:0d:db:
8f:44:77:3d:54:89:82:f1:3e:79:64:a8:92:07:10:
fa:ea:66:60:ca:50:03:ea:51:f7:62:58:f0:e3:4a:
3b:bf:c2:ae:d9:e3:96:e3:6d:3d:81:fd:ae:69:fa:
06:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:65:7D:99:D5:D3:45:D8:8F:81:F3:02:FF:30:42:11:62:C4:77:79
X509v3 Authority Key Identifier:
keyid:19:F2:A4:6E:2C:49:03:87:53:5E:94:5F:6B:14:86:70:00:68:57:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:84:12:b2:43:96:73:93:77:ac:e6:e3:aa:cb:c5:34:d7:5b:
63:c9:3d:a8:0d:81:6e:14:01:6f:4e:1e:70:38:ad:c3:d1:a1:
7d:10:72:8d:cf:4d:d5:26:20:d5:8b:26:5f:3b:62:3d:af:bd:
79:7e:c1:f2:77:f1:57:20:f2:bd:34:4a:9b:7f:0f:3f:33:97:
13:fe:05:6c:d0:cd:bb:e8:21:b5:82:9c:c7:33:62:e9:d3:bc:
f4:f3:67:ed:91:45:1e:63:84:5b:fe:14:68:63:fd:c5:b3:07:
ad:e0:fa:75:42:f4:0f:d6:79:74:c3:b4:30:36:89:de:0e:21:
4d:d7:50:ef:b5:1c:63:49:a4:94:81:63:e6:b8:e3:e9:70:f2:
3f:fd:79:e5:b9:51:35:dc:08:3e:05:c0:09:bd:06:eb:e8:ed:
a5:c5:66:de:eb:ad:de:4d:b5:67:29:85:fe:64:21:43:2c:f7:
62:95:38:3e:8d:f3:17:a0:f4:5f:58:dc:c7:3a:e2:ee:d5:69:
6c:f2:e8:f9:3d:37:c6:f4:51:e8:f1:27:ef:ac:93:fe:5c:3b:
90:f9:b6:ad:35:39:87:81:7a:f7:cc:b3:94:1a:d8:4a:ca:96:
05:11:72:39:5d:0e:db:75:e1:77:0b:21:75:c7:91:58:23:cb:
51:e2:a6:ac
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjBCREUxMTAvBgNVBAUTKDE5RjJBNDZFMkM0OTAzODc1MzVFOTQ1RjZCMTQ4Njcw
MDA2ODU3NjEwHhcNMjYxMDAxMDc1ODU5WhcNMjYxMDA4MDc1ODU5WjAYMRYwFAYD
VQQDEw02YWJlMTJjNC1lMjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA13OO//XFRj00AQXMaaNg5JMBZoLPwwCSKKaFaxARdy2iSLHR1q2f/gei3RNB
28GLgyleloqpscuv7r+3kglut+Lzks+eiWkMB34rcxopS5ukvUrz5BwxnOWVH2UC
OGbu/KlqmH4Db4mQo/7E9FLPM6QL+ld69ouoA8pH4YkzcBfPShEFFqDaMGQxe+qM
wg8xt0lCEdep4tl6dO8mFRtQa/3Zk/ZJNDnOuz9YfGHcoWiefyqf2nxJgeuTIzJx
5VINfJFCk1ZVWLGeKs1UB05PDduPRHc9VImC8T55ZKiSBxD66mZgylAD6lH3Yljw
40o7v8Ku2eOW4209gf2uafoGEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOBlfZnV
00XYj4HzAv8wQhFixHd5MB8GA1UdIwQYMBaAFBnypG4sSQOHU16UX2sUhnAAaFdh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEJERS8yOUQxRTc2Qzc0
QjMxMUYwQUUyOTUyMUJDNEY5QUUwMi9HZktrYml4SkE0ZFRYcFJmYXhTR2NBQm9W
MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0dmS2tiaXhKQTRkVFhwUmZheFNHY0FCb1YyRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MEJERS8yOUQxRTc2Qzc0QjMxMUYwQUUyOTUyMUJDNEY5QUUwMi9HZktrYml4SkE0
ZFRYcFJmYXhTR2NBQm9WMkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnIQSskOWc5N3rObjqsvFNNdbY8k9qA2BbhQBb04ecDitw9GhfRByjc9N1SYg
1YsmXztiPa+9eX7B8nfxVyDyvTRKm38PPzOXE/4FbNDNu+ghtYKcxzNi6dO89PNn
7ZFFHmOEW/4UaGP9xbMHreD6dUL0D9Z5dMO0MDaJ3g4hTddQ77UcY0mklIFj5rjj
6XDyP/155blRNdwIPgXACb0G6+jtpcVm3uut3k21ZymF/mQhQyz3YpU4Po3zF6D0
X1jcxzri7tVpbPLo+T03xvRR6PEn76yT/lw7kPm2rTU5h4F698yzlBrYSsqWBRFy
OV0O23XhdwshdceRWCPLUeKmrA==
-----END CERTIFICATE-----
Generated at Sat Oct 3 08:50:22 2026 by rpki-client