
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft
File: GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft (raw, json)
Hash identifier: HRTXksfqfT5k39bxLcICmN5ilQE+3w85RqTvZzoOfSU=
Subject key identifier: C3:8E:F3:00:58:3D:3A:F6:9D:72:A5:34:86:58:35:1C:FE:3E:75:04
Authority key identifier: 18:61:53:CB:98:88:38:A3:A6:D4:8C:F0:42:3C:5B:46:23:00:59:E8
Certificate issuer: /CN=A91AE69C/serialNumber=186153CB988838A3A6D48CF0423C5B46230059E8
Certificate serial: 035C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft
Manifest number: 0354
Signing time: Wed 19 Aug 2026 01:19:26 +0000
Manifest this update: Wed 19 Aug 2026 01:19:26 +0000
Manifest next update: Wed 26 Aug 2026 01:19:26 +0000
Files and hashes: 1: GGFTy5iIOKOm1IzwQjxbRiMAWeg.crl (hash: E5grVXyHbOgEv2fAW3DRcrRlNe/+wUVcfoLwlxlboM4=)
2: DD1FEE48C77311EEA5076E2CC4F9AE02.roa (hash: A1R3Y4X7LUU1B6vjhdMdznAPyuhYgB7EU9CPG7tpvR4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.crl
rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 01:19:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 860 (0x35c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE69C, serialNumber=186153CB988838A3A6D48CF0423C5B46230059E8
Validity
Not Before: Aug 19 01:19:26 2026 GMT
Not After : Aug 26 01:19:26 2026 GMT
Subject: CN=6a85049e-a826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6a:41:e4:b0:f5:c1:66:9c:b7:c9:ab:fb:04:
60:37:45:a7:a3:9e:ca:5e:31:22:ac:2e:24:cd:e7:
cb:f5:06:9e:5f:63:45:c7:be:12:5d:55:9e:45:cc:
73:c1:67:67:d9:44:79:c5:91:1e:b2:88:60:1e:7b:
8d:87:b1:9f:ed:5c:99:71:52:c7:35:f7:43:57:d3:
9a:f1:07:00:90:38:0d:f9:82:7e:37:b0:07:ac:65:
2d:eb:33:b7:f9:f4:8f:d8:a4:d1:97:6a:d0:a0:27:
f6:af:5d:a7:69:53:94:49:60:ac:9c:97:b3:51:a6:
12:1b:00:2a:2f:03:f7:9c:62:de:d9:7a:58:b1:fc:
6a:4f:a3:96:73:30:bd:eb:80:de:38:be:c5:48:cc:
45:e8:c2:8d:14:72:aa:44:62:de:fa:00:86:fc:62:
a2:76:54:47:32:1e:17:93:a0:c6:d8:13:d5:82:af:
5f:c7:88:08:6a:4c:60:a9:37:18:aa:03:50:05:85:
20:9e:85:48:62:ca:fe:40:b7:05:5d:f9:b6:e8:2b:
40:66:d3:4d:b5:08:66:9c:a5:c0:b3:71:69:eb:0b:
cf:bd:4c:97:91:e1:31:da:5c:58:93:ab:16:42:fe:
37:1c:bd:b4:39:2c:6d:0c:e7:09:dc:be:cf:ed:08:
a2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:8E:F3:00:58:3D:3A:F6:9D:72:A5:34:86:58:35:1C:FE:3E:75:04
X509v3 Authority Key Identifier:
keyid:18:61:53:CB:98:88:38:A3:A6:D4:8C:F0:42:3C:5B:46:23:00:59:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:bf:96:59:4f:d8:3f:20:11:43:f9:92:68:cf:75:09:b9:df:
18:9e:7e:3e:76:7e:bc:3b:43:f5:57:51:9a:9d:b8:66:7c:f8:
39:97:45:48:4b:ca:6f:f2:0d:f8:f9:66:f6:da:bc:5b:e1:6a:
a8:78:94:65:c0:7f:a1:da:55:5d:4a:84:5a:2b:fe:a6:25:fc:
52:70:66:b8:b7:8a:2c:1c:aa:ee:12:8c:80:4d:83:e1:41:cf:
1b:fc:d8:9d:ab:d6:8f:59:10:1f:21:69:60:f6:62:49:ed:cb:
ed:ef:0b:14:c8:0f:b6:c8:ea:5f:69:18:84:81:ec:2b:3d:92:
9e:18:71:fd:7a:95:ca:db:8d:07:e7:73:82:81:12:7c:8a:2e:
3a:b6:b2:14:03:f2:b2:dc:1d:bd:1b:45:00:32:c9:fa:1d:a2:
c7:fa:93:af:9e:d5:dd:d7:a7:8c:f7:35:59:00:b1:2a:1d:2a:
53:9f:fd:b6:d0:d1:af:5c:53:53:00:d7:6b:c8:f3:ef:6d:4e:
00:3f:b0:67:5d:99:94:fd:20:46:48:3b:48:ff:c2:ca:49:50:
9c:58:f5:ae:5f:7c:0d:91:45:90:e6:05:12:87:16:eb:25:08:
e8:2d:6a:d7:2b:2e:9e:e8:de:e1:06:eb:08:86:d9:b6:30:b5:
f9:2a:0e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:31:24 2026 by rpki-client