
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft
File: GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft (raw, json)
Hash identifier: B+XPehwrKajPO+foZYYO0MoN1Oj3yztrlyCe+SqN7cs=
Subject key identifier: E3:CB:9F:ED:CF:A6:F9:F9:43:28:D3:0F:64:56:B0:13:5C:FF:62:13
Authority key identifier: 19:9D:4B:E0:60:8A:56:F5:04:80:C0:AD:26:45:DA:D7:B6:90:02:59
Certificate issuer: /CN=A91A470C/serialNumber=199D4BE0608A56F50480C0AD2645DAD7B6900259
Certificate serial: BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GZ1L4GCKVvUEgMCtJkXa17aQAlk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft
Manifest number: B5
Signing time: Sat 03 Oct 2026 07:55:07 +0000
Manifest this update: Sat 03 Oct 2026 07:55:06 +0000
Manifest next update: Sat 10 Oct 2026 07:55:06 +0000
Files and hashes: 1: GZ1L4GCKVvUEgMCtJkXa17aQAlk.crl (hash: TcdKrk6l4w8Lsiq6JZtNZtcbqjy/6Jr/TH8Brs5RqaU=)
2: B53453C2961211F1A0325584A1EE528E.roa (hash: xJqVTb/PoXlS9Nw4K65VtvKl9hX152JntnAXbbPw/xs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.crl
rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GZ1L4GCKVvUEgMCtJkXa17aQAlk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 07:55:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187 (0xbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A470C, serialNumber=199D4BE0608A56F50480C0AD2645DAD7B6900259
Validity
Not Before: Oct 3 07:55:06 2026 GMT
Not After : Oct 10 07:55:06 2026 GMT
Subject: CN=6ac0b4db-6d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:64:ac:4e:18:bc:1f:93:a6:96:6f:16:6f:1a:
49:d6:51:4c:47:05:c3:be:60:2f:ca:c6:10:c5:a3:
49:b2:6b:32:fa:37:f1:f8:f1:88:4f:ca:e0:08:d5:
2a:7b:17:d8:ae:aa:e5:a5:1a:1e:7e:d6:78:34:44:
74:f9:83:17:b2:aa:32:ce:36:31:0a:7d:51:f3:74:
a4:a6:ca:a2:13:9d:1c:ab:8d:16:59:9f:b3:d4:17:
1b:51:8c:f4:9b:f1:66:a9:13:2f:2e:79:ef:10:44:
00:48:af:5a:dd:6d:32:45:b5:fe:47:4f:34:5b:78:
21:fa:fe:c5:54:82:df:cc:30:0b:11:11:a5:7e:06:
b0:1b:b6:8a:26:5e:70:06:c3:2b:17:fa:f5:be:c9:
c9:11:d7:7f:1d:aa:4d:36:c4:b6:ec:da:8a:06:3a:
c4:b9:4b:0d:d2:1d:21:e2:a0:a8:32:9f:7a:67:17:
cc:96:57:e6:c5:3a:2b:a4:f9:37:7e:2d:ca:10:0d:
ce:51:38:77:28:63:f7:3d:f7:e8:ea:8b:4d:01:74:
ff:c3:0a:08:19:f1:16:fa:13:ff:5e:f4:47:ea:c6:
68:5e:33:07:92:32:30:2c:9e:bf:3f:88:89:2a:a8:
f1:48:09:bf:ac:4e:67:c2:eb:37:78:db:9b:63:a0:
4e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:CB:9F:ED:CF:A6:F9:F9:43:28:D3:0F:64:56:B0:13:5C:FF:62:13
X509v3 Authority Key Identifier:
keyid:19:9D:4B:E0:60:8A:56:F5:04:80:C0:AD:26:45:DA:D7:B6:90:02:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GZ1L4GCKVvUEgMCtJkXa17aQAlk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:97:f1:30:c5:ab:f7:44:ba:7c:33:07:0f:3a:79:48:a8:9e:
2b:83:48:55:0b:0b:18:fc:e3:47:6a:ba:99:e1:91:87:62:ce:
9a:a4:43:e4:28:c0:82:c0:02:44:ab:00:71:76:e3:33:88:25:
7d:8c:ee:6b:16:c2:be:ff:10:fa:62:d8:91:37:6e:1b:66:99:
e4:69:bc:12:61:fd:35:ce:b3:2d:e4:b9:c3:83:ff:9e:77:5d:
70:bc:46:58:41:19:32:54:91:58:23:23:25:81:67:88:44:2a:
f2:cf:38:5f:0e:51:d9:89:d2:0a:47:cf:78:f4:b3:f2:c2:37:
d8:57:c6:53:54:50:17:c5:bb:31:a9:23:b1:54:3c:9d:ee:4f:
e7:a2:71:cd:85:2f:16:0e:37:3d:91:ed:46:2b:48:e6:5c:00:
55:9c:d5:e7:97:1f:07:e7:96:91:43:11:98:3c:7d:9f:d1:40:
30:9d:78:c9:16:26:25:5a:ca:5c:65:45:7e:e1:f6:ed:e4:12:
48:0b:11:8c:55:ff:bd:a0:8b:6b:37:d0:8a:9b:87:d7:8b:76:
f6:f6:b2:b0:23:fa:4d:cc:e0:ac:34:2a:0b:a7:00:ac:04:03:
af:76:c4:2a:b5:1f:e1:57:c3:a6:74:27:93:8f:a3:fb:e0:26:
f0:7a:2e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 10:23:45 2026 by rpki-client