
$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft
File: GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft (raw, json)
Hash identifier: DzkxDoIvG/al9ef3GQnog7UTpkv3X0djcsh5Cji45Ys=
Subject key identifier: AA:79:13:8F:F6:EB:73:FC:30:3F:19:B1:F2:EF:9C:57:EA:61:84:87
Authority key identifier: 19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17
Certificate issuer: /CN=A91991D3/serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17
Certificate serial: 0282
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft
Manifest number: 024E
Signing time: Tue 07 Jul 2026 02:32:44 +0000
Manifest this update: Tue 07 Jul 2026 02:32:43 +0000
Manifest next update: Tue 14 Jul 2026 02:32:43 +0000
Files and hashes: 1: GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl (hash: mB7eCC6WlyBaFSKjwQXGy0Otpd2MJTeQXZYjwdP+MQU=)
2: 96FAA6BA2DBF11F1A3BE1D0DAB833773.roa (hash: e8yxWxSmmRPk+ltdy8gP6pzlZlCCw4QZs3be9NGpjEQ=)
3: F250438EF44011F0A1A516A45F6F56BC.roa (hash: 39UXrQgnsrOoQwxWVU9MQlKYuieI5NM5dujARlQugR8=)
4: 6E1C49FA031811F1BA97C916183D8C67.roa (hash: lJOk2wev4MkzbOS+niqS+uVfAej8rZrkP6By/CI08sY=)
5: 1F388278205F11F0A895DE1EC4F9AE02.roa (hash: 3fG2xSQYFFInAFhuIsOyJ8jvQ4PTgeRTg6IF8vTLUVw=)
6: 926A40AC205E11F0A7552513C4F9AE02.roa (hash: YKiXx5HCj2zwN3jfK9q5GakLYQcoFw4kl98GWbjUs9o=)
7: 12D4E3D41AA411F0A196BA66C4F9AE02.roa (hash: Wb9fqxh/2GhJbzzPZAroheRX0Q4IRD6pGw48st/qKjM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl
rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 02:32:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 642 (0x282)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91991D3, serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17
Validity
Not Before: Jul 7 02:32:43 2026 GMT
Not After : Jul 14 02:32:43 2026 GMT
Subject: CN=6a4c654c-9ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:41:e8:21:8c:1a:52:37:2f:e6:e0:c6:76:22:
5f:84:b3:60:12:fb:7c:17:f1:57:f4:51:d0:f7:c6:
9b:35:1e:7a:45:c0:81:e6:66:c1:b3:bf:69:7a:4f:
6d:c4:b0:61:2d:4f:68:34:eb:d2:03:b8:58:1c:5c:
d7:8a:cc:fe:d7:f2:cb:f1:5f:57:2d:d8:bd:af:61:
a5:2c:2f:07:d1:93:81:fe:a6:95:f9:d2:01:cb:76:
30:22:5f:b9:9d:f9:4b:b6:ed:d1:7f:94:59:73:84:
09:d2:b2:5e:f6:81:57:5a:db:07:da:c5:86:d2:f2:
fb:4d:af:a2:6a:cd:19:d9:e5:78:ba:ba:9a:07:26:
35:a2:e8:49:6d:f8:72:bf:4a:9d:0e:81:14:68:61:
17:cc:41:d7:72:b6:d6:9b:cd:a0:a0:93:fb:c9:e2:
98:9f:9d:95:4f:09:f4:bf:7a:2c:6b:15:f3:97:c4:
64:30:01:4a:e0:39:79:0c:25:2a:27:9a:38:b1:43:
ba:85:2a:82:46:b1:de:c3:8a:85:4e:2d:c7:2f:02:
14:08:d3:43:4a:14:da:3b:da:30:e1:64:46:dc:b2:
c5:35:1a:b9:73:c7:7c:28:86:3b:4b:ef:ce:19:35:
22:34:bf:15:15:e6:38:60:1f:6d:71:a4:df:78:89:
de:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:79:13:8F:F6:EB:73:FC:30:3F:19:B1:F2:EF:9C:57:EA:61:84:87
X509v3 Authority Key Identifier:
keyid:19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:68:05:15:54:aa:ed:8b:77:87:2a:18:cd:fc:b3:7b:af:bc:
38:2b:58:b9:a3:40:36:be:bc:52:d1:07:01:8d:2f:9c:8a:22:
ba:76:5a:a8:e7:04:1c:3e:c2:28:fe:ab:53:cc:59:6c:d5:c8:
ca:92:eb:32:37:9b:cf:6d:de:6f:f8:52:88:18:7f:c5:bd:96:
c9:56:bf:91:ff:32:af:8e:ec:4e:13:0a:a2:53:68:0e:31:8d:
ae:b0:3f:73:99:86:79:0e:af:0f:57:79:a7:73:a2:cc:80:79:
6e:31:ff:42:8b:5a:cd:6c:7e:9e:77:bc:46:6e:d0:d3:4b:a9:
63:fa:1a:3a:5f:13:da:0c:16:38:96:42:ca:2e:d8:f8:2e:9a:
28:4b:2c:f6:cb:c0:12:7d:99:73:66:aa:37:46:21:95:c3:3a:
67:bc:0d:dd:7e:72:62:a0:68:df:ea:70:35:db:83:1b:21:e6:
fd:a2:93:e2:36:0a:b1:b0:3a:0b:14:85:f1:80:d8:15:70:47:
f4:48:38:4a:4f:d8:0e:e4:e9:25:59:d0:ef:b8:c4:50:82:93:
de:d0:61:bb:77:28:b9:68:4a:3d:74:e8:36:9a:36:2b:72:e3:
6e:3c:94:6d:10:e5:dc:93:2b:d4:ce:96:91:39:67:8a:38:e2:
88:cc:dc:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 23:12:46 2026 by rpki-client