
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft
File: GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft (raw, json)
Hash identifier: EG4XGdPCxfProPn0Vrr2G2YKl0O5lXjeXeLhpVvjT1I=
Subject key identifier: 31:EA:9A:36:B0:22:C6:49:31:6B:64:10:3B:0F:FF:35:46:85:DA:77
Authority key identifier: 18:F9:7D:09:8E:4E:BD:06:10:D5:4F:48:D5:B3:E1:AA:74:3A:20:29
Certificate issuer: /CN=A91DCD09/serialNumber=18F97D098E4EBD0610D54F48D5B3E1AA743A2029
Certificate serial: 1B06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft
Manifest number: 1ADA
Signing time: Mon 20 Jul 2026 16:24:59 +0000
Manifest this update: Mon 20 Jul 2026 16:24:59 +0000
Manifest next update: Mon 27 Jul 2026 16:24:59 +0000
Files and hashes: 1: GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl (hash: cNedE/14C+D3kGBreFbXjepv8PKdMxDefmH9rNINpkc=)
2: 234205EA327A11E8A1143B79C4F9AE02.roa (hash: +gU0wUPJzdPGvi0Ro7xFlOsQHmLKis/hh0dBME4aong=)
3: 64A7FFE2F74811E8A07B9609C4F9AE02.roa (hash: M9XcsGu+O0Zk52IzM7Z06ElXp8zYwD2w5zBvqMmkl5E=)
4: CF4E04A6639A11F1BC9896E97047A888.roa (hash: AHKgPDalvgbP0KjwpNMKO/iAmjTMQ6+zGyM2geiYq3Y=)
5: 9DF7DA5C557C11E7B34BCE81C4F9AE02.roa (hash: QYJCGTrhNobc9om3BoJ26lPH+BId3l/MUNDCYqKgq0Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl
rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 16:24:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6918 (0x1b06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DCD09, serialNumber=18F97D098E4EBD0610D54F48D5B3E1AA743A2029
Validity
Not Before: Jul 20 16:24:59 2026 GMT
Not After : Jul 27 16:24:59 2026 GMT
Subject: CN=6a5e4bdb-a3e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ee:e5:48:49:ee:00:c2:62:02:86:fe:37:8e:
f5:4c:26:d7:23:7d:6e:62:32:c6:e0:5f:8a:b7:a8:
eb:46:17:42:52:cf:4e:64:58:2c:10:05:e3:fd:08:
15:16:80:5c:cb:e0:dd:76:e9:9e:b3:4f:f2:d8:c4:
c2:8f:2b:f8:15:9a:42:be:56:1e:f6:17:f0:0d:ac:
01:ab:a7:c4:d2:d9:c3:fe:81:ed:d5:13:17:3f:b3:
d8:18:0d:b7:55:9a:a4:ad:68:88:1b:7d:d9:e6:fe:
ed:9c:29:0a:56:84:89:6c:da:b3:96:88:56:00:1f:
d2:b6:af:bc:4d:c4:91:67:c2:44:e7:78:f3:23:03:
6c:25:1b:d2:32:20:56:ca:04:f1:52:79:9b:60:3e:
71:8d:39:e7:8c:92:af:4e:5f:06:d6:7b:8d:eb:93:
2b:ed:35:56:9a:e7:4e:60:6a:81:24:0a:7e:98:89:
53:71:9b:3d:52:41:d4:38:e4:9a:1e:1c:d2:d5:af:
4a:43:9a:a5:e3:63:67:ba:fa:7b:25:fa:c7:67:0b:
c6:22:92:71:00:cf:13:95:bb:1d:27:6b:9f:b4:d3:
01:21:76:41:e5:89:b9:dc:89:5c:d6:bc:1f:30:51:
c7:ff:0e:46:9c:df:1b:fa:88:15:5c:f6:b7:43:bc:
50:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:EA:9A:36:B0:22:C6:49:31:6B:64:10:3B:0F:FF:35:46:85:DA:77
X509v3 Authority Key Identifier:
keyid:18:F9:7D:09:8E:4E:BD:06:10:D5:4F:48:D5:B3:E1:AA:74:3A:20:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:9f:dc:b4:19:aa:7a:5b:73:b9:a7:2f:b3:15:4f:3a:1d:77:
0b:a0:39:17:40:a8:28:17:38:31:91:36:1d:25:85:fe:62:64:
37:d1:48:8e:74:70:e7:5b:ea:f6:32:11:ba:f0:e2:cf:4c:54:
0e:d2:b6:44:a4:59:2a:8d:5d:ed:3a:7a:ad:37:98:48:2e:6e:
4c:d9:4e:f3:bd:ec:8f:ff:9f:ed:8e:41:2a:cd:89:31:c9:f6:
a3:8e:b5:bd:5e:eb:19:02:5f:7f:5c:11:4b:5d:1a:cf:41:5c:
9d:7c:9c:3a:3c:4a:b0:1d:06:b7:fc:4b:44:37:8c:0c:2c:3b:
bb:77:05:d8:4c:9b:8f:cc:5c:be:a3:6c:69:21:db:01:ee:f1:
34:94:97:92:1b:4f:f5:50:88:32:46:b8:84:09:11:98:eb:e7:
fc:27:36:06:c9:bb:86:32:76:7f:cd:a3:49:3c:7b:76:1a:07:
e3:75:04:cd:08:7e:c4:cc:9e:8f:82:f4:28:28:0e:86:f8:f8:
fe:6d:e4:d7:9c:f7:b9:fe:ae:e7:fd:81:f1:5e:fb:39:14:c3:
d1:9f:0c:a4:7d:b0:00:fb:ac:01:2a:f4:db:f6:c5:4c:de:00:
05:19:5c:b8:df:97:22:84:fc:93:f0:47:3d:51:e6:57:a8:48:
d4:df:a2:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 07:08:07 2026 by rpki-client