
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft
File: GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft (raw, json)
Hash identifier: bmjBZXRs69bTycYAKDWCypN9zyExQcO8zWsWIxJ/4BE=
Subject key identifier: 64:D1:67:15:67:54:31:7E:FC:44:1B:1B:57:AE:79:9C:A3:45:96:FB
Authority key identifier: 18:61:53:CB:98:88:38:A3:A6:D4:8C:F0:42:3C:5B:46:23:00:59:E8
Certificate issuer: /CN=A91AE69C/serialNumber=186153CB988838A3A6D48CF0423C5B46230059E8
Certificate serial: 0373
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft
Manifest number: 036B
Signing time: Sat 03 Oct 2026 01:11:06 +0000
Manifest this update: Sat 03 Oct 2026 01:11:05 +0000
Manifest next update: Sat 10 Oct 2026 01:11:05 +0000
Files and hashes: 1: GGFTy5iIOKOm1IzwQjxbRiMAWeg.crl (hash: MjdmNUGLp1PNIlSHBUytqJ4wUdi3gl7a+wg8oZsagBQ=)
2: DD1FEE48C77311EEA5076E2CC4F9AE02.roa (hash: A1R3Y4X7LUU1B6vjhdMdznAPyuhYgB7EU9CPG7tpvR4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.crl
rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 01:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 883 (0x373)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE69C, serialNumber=186153CB988838A3A6D48CF0423C5B46230059E8
Validity
Not Before: Oct 3 01:11:05 2026 GMT
Not After : Oct 10 01:11:05 2026 GMT
Subject: CN=6ac05629-39a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:bf:a8:98:9e:7f:bf:99:80:4a:62:f7:91:7e:
a8:af:7c:8d:2a:f1:d0:31:7c:5e:2a:0e:b8:40:87:
ee:4a:5a:11:62:dc:7b:d1:1d:a7:da:a2:69:c3:6c:
5d:1b:25:df:cf:1a:9d:2c:80:51:39:94:c8:1b:c8:
ac:ee:37:fe:24:77:46:33:d1:d5:0c:6e:f9:f1:58:
88:ed:85:f1:d1:3b:64:e2:5b:8e:65:ca:d4:87:d2:
51:16:e3:a3:96:b9:56:00:c9:9c:dd:76:7f:27:37:
d0:6e:6d:e7:f0:f2:a6:dc:76:9c:25:1f:b1:50:bf:
98:97:50:2c:b5:f5:db:ec:25:d0:3a:3f:9e:78:10:
3b:33:1b:84:87:4d:99:d3:35:3e:5f:0e:71:e9:bf:
5e:10:34:2b:43:8b:05:6d:34:b3:1b:f8:ea:4d:30:
e3:22:37:df:24:b8:2d:51:60:29:8f:26:94:74:e1:
0f:5c:e8:86:33:db:f9:6e:95:56:29:2e:a9:f2:4a:
ba:d0:23:8b:a7:ef:8a:57:e1:eb:9f:78:ed:b0:be:
39:b5:a2:2b:02:54:d7:e8:eb:2f:cf:72:d3:9c:b3:
8b:05:f1:d8:fc:5d:e8:ef:18:69:ae:e1:14:6a:6a:
bf:fc:eb:f6:61:85:bf:f6:85:5d:de:ee:c4:99:2e:
89:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D1:67:15:67:54:31:7E:FC:44:1B:1B:57:AE:79:9C:A3:45:96:FB
X509v3 Authority Key Identifier:
keyid:18:61:53:CB:98:88:38:A3:A6:D4:8C:F0:42:3C:5B:46:23:00:59:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:6c:0d:0a:9f:a7:32:9a:c5:b1:c9:24:17:99:62:d7:a8:39:
07:7c:c7:85:aa:09:60:94:e4:ba:4d:3a:2d:8c:cf:8f:19:be:
8e:c7:b7:13:60:46:b5:89:52:55:3f:09:61:e5:38:ff:17:8f:
aa:09:29:d9:e1:64:ed:7f:ed:43:53:fd:61:de:95:6d:28:71:
58:5d:57:49:28:7f:2b:c9:91:27:4e:57:f6:84:b5:29:bb:42:
a7:af:55:e1:62:d9:e0:ee:c5:00:a0:e5:6e:64:a5:6f:5b:cb:
b5:c1:14:b0:26:f6:be:9b:6f:f8:ec:04:4a:4d:54:4b:13:9f:
02:33:ae:03:1c:ff:bf:ec:da:4c:b9:05:65:85:ce:7d:8e:7d:
ea:2b:3c:21:78:74:d3:a4:60:1c:f1:58:2e:97:2d:db:3a:39:
02:6c:a1:0e:f1:5a:65:83:83:34:6d:b1:d3:f6:75:d7:82:b7:
5b:97:15:7d:48:45:51:45:96:a6:fa:08:3e:47:92:ff:b7:ef:
bc:1e:0f:1b:01:71:17:f6:63:a2:d0:4e:b5:07:e1:b0:7e:dc:
20:0b:ae:76:55:eb:2e:6d:54:e0:af:11:27:aa:10:70:f8:e6:
68:d9:e0:5a:81:69:8f:25:10:bc:28:94:0d:df:ee:23:74:ef:
d1:7a:23:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 06:43:42 2026 by rpki-client