
$ rpki-client -vvf rpki.apnic.net/member_repository/A91393AF/3CBD07F8995B11F1BE0CE0905811F970/gadKy_Wfp1IOzmzFxDYnqb2qcq0.mft
File: gadKy_Wfp1IOzmzFxDYnqb2qcq0.mft (raw, json)
Hash identifier: gIMsVzsHUukcJfzdRwQ6NOKqoY253v7zGQaG2EY0d+0=
Subject key identifier: CD:99:5F:2A:36:6B:4D:0A:33:3B:05:E3:E3:19:DA:51:E5:0D:8E:B1
Authority key identifier: 81:A7:4A:CB:F5:9F:A7:52:0E:CE:6C:C5:C4:36:27:A9:BD:AA:72:AD
Certificate issuer: /CN=A91393AF/serialNumber=81A74ACBF59FA7520ECE6CC5C43627A9BDAA72AD
Certificate serial: 04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gadKy_Wfp1IOzmzFxDYnqb2qcq0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91393AF/3CBD07F8995B11F1BE0CE0905811F970/gadKy_Wfp1IOzmzFxDYnqb2qcq0.mft
Manifest number: 04
Signing time: Wed 19 Aug 2026 09:59:26 +0000
Manifest this update: Wed 19 Aug 2026 09:59:26 +0000
Manifest next update: Wed 26 Aug 2026 09:59:26 +0000
Files and hashes: 1: gadKy_Wfp1IOzmzFxDYnqb2qcq0.crl (hash: G9lzhQFHIc6bVZX9HaT+V4GSzopjIII+WW2plQw7uaw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91393AF/3CBD07F8995B11F1BE0CE0905811F970/gadKy_Wfp1IOzmzFxDYnqb2qcq0.crl
rsync://rpki.apnic.net/member_repository/A91393AF/3CBD07F8995B11F1BE0CE0905811F970/gadKy_Wfp1IOzmzFxDYnqb2qcq0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gadKy_Wfp1IOzmzFxDYnqb2qcq0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:59:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91393AF, serialNumber=81A74ACBF59FA7520ECE6CC5C43627A9BDAA72AD
Validity
Not Before: Aug 19 09:59:26 2026 GMT
Not After : Aug 26 09:59:26 2026 GMT
Subject: CN=6a857e7e-364d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f0:62:cb:b9:75:cb:81:18:b6:77:f5:1a:0e:
10:dc:cf:d3:f6:42:9d:f4:9e:48:ea:34:53:af:cd:
59:35:72:e3:80:db:03:a6:b9:09:ff:f2:06:67:ad:
bb:76:4a:ec:d1:e9:90:c5:22:2a:8f:f0:81:b8:0b:
b3:cb:05:9e:d9:fb:5e:ef:4f:7d:d7:c0:bf:e1:a7:
19:0a:ea:36:5b:f3:27:e3:14:ef:95:83:a4:d3:22:
c6:9b:0b:80:6e:39:22:f6:56:1f:7f:cd:0d:12:f9:
62:a3:af:96:4c:ba:22:cc:99:d9:6c:29:62:98:d6:
30:96:0b:5e:cf:5e:14:7c:d4:0f:7c:1f:30:3f:41:
8f:b3:6c:06:85:9f:e3:e3:6d:8e:20:5f:16:06:06:
7a:90:6a:c4:ec:1b:d2:20:e3:95:43:93:37:ee:09:
e3:fd:ef:55:94:31:d7:df:21:ff:c0:42:38:44:56:
57:aa:44:62:7d:1a:34:c6:7b:7c:9a:8a:9f:e7:c1:
66:8c:d6:d6:f7:0d:6c:83:f4:70:13:39:40:ec:87:
3b:11:ad:bc:74:53:32:9e:c9:2a:19:98:9e:73:f8:
dc:95:ed:3b:dc:7c:a3:84:64:57:dd:13:36:7b:bc:
8d:02:92:b4:02:3e:3b:d8:9d:b3:b7:da:b8:35:d5:
10:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:99:5F:2A:36:6B:4D:0A:33:3B:05:E3:E3:19:DA:51:E5:0D:8E:B1
X509v3 Authority Key Identifier:
keyid:81:A7:4A:CB:F5:9F:A7:52:0E:CE:6C:C5:C4:36:27:A9:BD:AA:72:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91393AF/3CBD07F8995B11F1BE0CE0905811F970/gadKy_Wfp1IOzmzFxDYnqb2qcq0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gadKy_Wfp1IOzmzFxDYnqb2qcq0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91393AF/3CBD07F8995B11F1BE0CE0905811F970/gadKy_Wfp1IOzmzFxDYnqb2qcq0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:aa:75:20:b7:03:54:55:63:f6:dd:d3:0b:24:89:b4:58:ee:
16:1b:af:a6:f5:3f:58:98:1d:f2:92:75:59:53:dc:00:9e:08:
9d:46:02:03:70:5e:47:eb:c3:21:dd:c7:f5:de:7a:01:d1:02:
92:14:b2:9c:d5:24:cd:86:44:7f:79:7a:0a:da:09:40:c3:50:
b5:91:2a:09:c0:fa:d7:f3:fb:21:10:17:68:d2:9c:75:5b:a7:
61:2c:2c:47:3d:06:27:2c:6d:d2:99:61:6c:f7:83:d4:7b:1c:
53:d6:0f:7b:e6:40:51:ec:ee:17:96:b2:3e:19:6b:74:5f:1c:
d2:30:f1:14:fb:cc:31:97:0e:58:8d:75:a6:4f:1e:72:39:92:
1b:af:ca:e3:bf:3f:05:c0:c7:24:24:01:34:48:4e:99:77:65:
91:69:67:43:62:a4:f8:4e:02:13:21:fd:01:2e:cb:b4:a7:70:
8b:0b:d0:a6:69:a5:91:3f:2b:fe:a8:ff:f4:76:72:77:c4:91:
6e:df:bc:d8:02:07:1d:80:6f:04:ab:d1:49:e6:59:d7:58:03:
57:6a:32:12:f5:5f:3b:d1:b2:3a:a8:6e:6b:9b:0b:ed:46:f1:
dd:40:ce:f6:ab:ea:6f:38:3b:6b:5c:97:1c:48:e4:68:6c:da:
df:0e:97:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:44:30 2026 by rpki-client