
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft
File: GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft (raw, json)
Hash identifier: BxuUmZv0YAnA8Qjzcupc36ZUYphnbKzOO+VGhQD28Bg=
Subject key identifier: 10:4C:BB:BE:77:05:3D:15:83:5C:40:90:D3:43:2F:B5:A3:40:06:21
Authority key identifier: 18:61:53:CB:98:88:38:A3:A6:D4:8C:F0:42:3C:5B:46:23:00:59:E8
Certificate issuer: /CN=A91AE69C/serialNumber=186153CB988838A3A6D48CF0423C5B46230059E8
Certificate serial: 032B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft
Manifest number: 0324
Signing time: Thu 21 May 2026 01:13:39 +0000
Manifest this update: Thu 21 May 2026 01:13:38 +0000
Manifest next update: Thu 28 May 2026 01:13:38 +0000
Files and hashes: 1: GGFTy5iIOKOm1IzwQjxbRiMAWeg.crl (hash: gSsx55m6XwmsgpU4p2Gbt2/dGeKlRLVPUsVuWXz4Plw=)
2: DD1FEE48C77311EEA5076E2CC4F9AE02.roa (hash: /c+Xc/pq6gS3lH+dpF5Op6yyoSbbMrofTbdHTbTMtyY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.crl
rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 01:13:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 811 (0x32b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE69C, serialNumber=186153CB988838A3A6D48CF0423C5B46230059E8
Validity
Not Before: May 21 01:13:38 2026 GMT
Not After : May 28 01:13:38 2026 GMT
Subject: CN=6a0e5c43-0e13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:78:39:29:9c:02:53:37:d4:5a:d2:7f:e1:a2:
c2:29:af:5d:03:b6:82:99:c1:96:55:13:2e:be:87:
c0:fa:e7:43:4d:77:8f:5e:e6:47:98:e5:00:00:65:
e5:a2:d3:b3:9d:17:b8:68:49:9b:2e:8e:7b:fa:d0:
7e:c0:2c:9d:32:f2:1b:53:84:a5:3c:36:fd:94:a9:
92:3f:ec:48:50:63:80:6c:9e:0f:24:ad:e5:c7:1b:
9f:24:07:e4:34:5c:a4:ec:20:e7:a6:07:78:f8:7a:
38:c3:08:53:f6:59:b3:13:77:20:4e:37:84:ee:84:
a2:f6:2a:6f:54:20:f0:da:79:5f:cc:63:5b:a5:af:
8f:73:fc:02:4d:76:24:15:f0:f4:18:3d:97:91:44:
7f:0d:ab:a1:52:6e:90:6d:f5:5b:db:6d:30:b5:c7:
fa:9c:ac:81:3d:95:26:55:24:0e:58:9d:95:99:4c:
ee:a3:a3:92:48:a0:8b:ef:38:72:ba:3f:66:a5:75:
22:96:b0:3d:9c:9a:b5:c9:d5:ff:b1:2c:85:a1:81:
2a:93:e9:9a:8b:55:76:23:61:e0:97:be:63:fe:17:
4f:60:23:29:e9:ca:83:87:6f:84:96:b8:15:b7:f6:
ff:20:46:64:47:57:99:09:0d:be:e1:56:98:03:06:
0c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:4C:BB:BE:77:05:3D:15:83:5C:40:90:D3:43:2F:B5:A3:40:06:21
X509v3 Authority Key Identifier:
keyid:18:61:53:CB:98:88:38:A3:A6:D4:8C:F0:42:3C:5B:46:23:00:59:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:a9:70:65:a2:68:29:da:af:51:6b:cf:75:12:bf:05:df:d1:
41:38:f0:8f:a4:47:48:74:ee:2a:68:7f:75:60:97:29:25:8f:
07:dc:eb:8d:77:b4:5e:ff:2a:14:df:72:76:80:8e:ee:99:4c:
44:63:db:39:1b:61:38:53:84:ba:9c:0f:35:0a:0d:58:42:8e:
9f:d6:b6:52:58:f7:5e:d0:eb:50:07:60:5f:7e:99:92:9b:9f:
6d:40:c2:9e:e3:88:aa:3c:91:2f:c2:dc:5b:4d:c6:aa:99:63:
10:18:ae:42:9a:48:0e:15:3e:0c:88:57:01:11:01:b2:c2:7d:
1f:dd:8b:02:f8:c4:72:89:07:91:fc:ad:64:31:6c:c3:26:78:
93:59:74:1a:17:b8:2e:0a:33:e6:ff:0c:a9:0f:2c:8f:b5:ed:
03:48:e4:06:46:ba:79:af:59:eb:fb:11:6b:fe:27:1b:d1:75:
2c:87:66:5c:ed:8a:75:66:02:8e:00:44:a9:92:d8:f2:d8:5d:
09:53:2b:23:f5:05:42:78:60:d1:7e:f7:d8:69:74:26:4e:91:
f4:eb:53:05:fa:00:eb:e5:08:ed:e9:22:87:ce:9a:a1:7f:f9:
c5:e1:dc:05:52:54:4a:6d:25:ac:a9:51:36:f4:4d:65:1d:8e:
24:f9:10:21
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAyswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUU2OUMxMTAvBgNVBAUTKDE4NjE1M0NCOTg4ODM4QTNBNkQ0OENGMDQyM0M1QjQ2
MjMwMDU5RTgwHhcNMjYwNTIxMDExMzM4WhcNMjYwNTI4MDExMzM4WjAYMRYwFAYD
VQQDEw02YTBlNWM0My0wZTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6Hg5KZwCUzfUWtJ/4aLCKa9dA7aCmcGWVRMuvofA+udDTXePXuZHmOUAAGXl
otOznRe4aEmbLo57+tB+wCydMvIbU4SlPDb9lKmSP+xIUGOAbJ4PJK3lxxufJAfk
NFyk7CDnpgd4+Ho4wwhT9lmzE3cgTjeE7oSi9ipvVCDw2nlfzGNbpa+Pc/wCTXYk
FfD0GD2XkUR/DauhUm6QbfVb220wtcf6nKyBPZUmVSQOWJ2VmUzuo6OSSKCL7zhy
uj9mpXUilrA9nJq1ydX/sSyFoYEqk+mai1V2I2Hgl75j/hdPYCMp6cqDh2+ElrgV
t/b/IEZkR1eZCQ2+4VaYAwYM0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBBMu753
BT0Vg1xAkNNDL7WjQAYhMB8GA1UdIwQYMBaAFBhhU8uYiDijptSM8EI8W0YjAFno
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTY5Qy85RUIwNzk5ODEy
N0ExMUVEOTAyREZFMjdDNEY5QUUwMi9HR0ZUeTVpSU9LT20xSXp3UWp4YlJpTUFX
ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dHRlR5NWlJT0tPbTFJendRanhiUmlNQVdlZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RTY5Qy85RUIwNzk5ODEyN0ExMUVEOTAyREZFMjdDNEY5QUUwMi9HR0ZUeTVpSU9L
T20xSXp3UWp4YlJpTUFXZWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPKlwZaJoKdqvUWvPdRK/Bd/RQTjwj6RHSHTuKmh/dWCXKSWPB9zrjXe0Xv8q
FN9ydoCO7plMRGPbORthOFOEupwPNQoNWEKOn9a2Ulj3XtDrUAdgX36ZkpufbUDC
nuOIqjyRL8LcW03GqpljEBiuQppIDhU+DIhXAREBssJ9H92LAvjEcokHkfytZDFs
wyZ4k1l0Ghe4Lgoz5v8MqQ8sj7XtA0jkBka6ea9Z6/sRa/4nG9F1LIdmXO2KdWYC
jgBEqZLY8thdCVMrI/UFQnhg0X732Gl0Jk6R9OtTBfoA6+UI7ekih86aoX/5xeHc
BVJUSm0lrKlRNvRNZR2OJPkQIQ==
-----END CERTIFICATE-----
Generated at Thu May 21 09:39:16 2026 by rpki-client