
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft
File: GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft (raw, json)
Hash identifier: Lf9Or/4ufRftqhAzXIaY4auacAchb2JfPNZmVG8pUjY=
Subject key identifier: 5A:59:AD:55:0B:7E:07:98:23:79:70:27:09:53:AE:4D:42:64:4F:92
Authority key identifier: 18:61:53:CB:98:88:38:A3:A6:D4:8C:F0:42:3C:5B:46:23:00:59:E8
Certificate issuer: /CN=A91AE69C/serialNumber=186153CB988838A3A6D48CF0423C5B46230059E8
Certificate serial: 0314
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft
Manifest number: 030D
Signing time: Sun 05 Apr 2026 00:57:45 +0000
Manifest this update: Sun 05 Apr 2026 00:57:44 +0000
Manifest next update: Sun 12 Apr 2026 00:57:44 +0000
Files and hashes: 1: GGFTy5iIOKOm1IzwQjxbRiMAWeg.crl (hash: uEktfQVmZfASLyILqgtM4OaXi6U7T5JoIGwbK4y6IdU=)
2: DD1FEE48C77311EEA5076E2CC4F9AE02.roa (hash: /c+Xc/pq6gS3lH+dpF5Op6yyoSbbMrofTbdHTbTMtyY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.crl
rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 00:57:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 788 (0x314)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE69C, serialNumber=186153CB988838A3A6D48CF0423C5B46230059E8
Validity
Not Before: Apr 5 00:57:44 2026 GMT
Not After : Apr 12 00:57:44 2026 GMT
Subject: CN=69d1b389-48af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1f:41:d6:68:e7:17:79:f3:3e:ec:3f:f0:6e:
ec:f2:c8:68:f1:0e:bb:4c:86:e5:ae:44:0f:a1:64:
43:2e:f5:04:f7:f1:c3:0b:f5:bf:3e:7f:7e:6c:6a:
e8:9d:18:3f:e6:ed:a8:f7:b9:7f:35:ee:19:01:56:
7c:06:c7:28:07:b9:c3:7b:e8:8b:46:62:55:38:a7:
f2:c4:54:b0:47:df:55:73:3d:c7:58:fd:22:37:4d:
3e:a8:07:1b:e8:31:7b:8f:d4:87:3e:5c:d3:63:80:
59:d9:27:b5:69:40:8d:fc:44:e2:8d:97:74:39:7b:
30:d0:09:21:82:da:37:c7:d0:72:88:52:41:f9:b0:
36:3f:a0:19:5e:d6:b8:54:d8:40:53:54:28:6c:b9:
35:91:49:2f:34:27:a5:c0:e7:ac:64:ab:89:0d:5e:
c5:1c:04:ea:ca:93:07:18:7f:c3:ce:c8:8a:8d:4e:
9d:17:17:04:5e:92:f2:e2:0d:2d:f3:6a:8c:d6:aa:
66:82:bb:a8:44:94:a2:56:7e:28:bf:72:85:39:63:
0e:e6:b3:a3:79:6d:a8:06:ff:27:30:17:f8:03:fc:
b6:e2:4e:ef:a5:d3:e5:b6:c0:6d:0f:79:96:90:25:
1a:3d:39:46:93:75:d1:e7:02:5a:ee:4b:b5:fb:4f:
4d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:59:AD:55:0B:7E:07:98:23:79:70:27:09:53:AE:4D:42:64:4F:92
X509v3 Authority Key Identifier:
keyid:18:61:53:CB:98:88:38:A3:A6:D4:8C:F0:42:3C:5B:46:23:00:59:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:e0:ff:f9:6f:22:09:cb:46:64:85:de:ac:4a:12:99:24:bf:
67:e1:12:97:b5:a5:8d:4e:c1:64:1a:b0:87:26:7f:b4:ea:ab:
e9:89:d1:41:c8:4a:23:22:6d:f3:8c:8e:8f:d3:14:76:a8:40:
f4:1f:b5:e4:c0:ff:14:b9:04:34:84:28:16:bb:ca:1c:6f:7f:
aa:94:41:ec:3f:f2:53:77:36:6b:b5:67:ae:0c:cb:f6:fe:c6:
8e:f5:8a:37:5c:6a:59:cd:5d:62:32:85:24:cc:75:4b:3e:6b:
2d:67:db:bd:1b:98:fa:3d:f7:c8:7c:10:a8:f5:13:9e:ab:80:
f8:f9:09:ca:f5:e5:b4:f0:dc:47:cd:b8:be:8b:94:85:d9:40:
f2:41:53:0f:bd:50:a7:23:5f:1b:b8:37:d2:46:f1:11:38:d8:
dd:76:fa:a0:51:cb:a1:b4:61:81:72:46:cc:7b:02:67:ad:92:
f9:a4:f7:83:62:b2:86:e0:27:54:ec:a3:25:1f:3b:5b:63:f8:
3b:ad:da:c0:a8:09:1d:a0:50:f5:b6:6f:37:99:30:51:f3:18:
52:52:5b:9a:1b:d6:b2:42:5c:49:c6:b9:c0:b9:39:9d:c1:7c:
b8:53:10:67:7e:22:56:e7:10:aa:24:1b:49:3b:8a:e5:ea:60:
ae:e2:2f:4f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAxQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUU2OUMxMTAvBgNVBAUTKDE4NjE1M0NCOTg4ODM4QTNBNkQ0OENGMDQyM0M1QjQ2
MjMwMDU5RTgwHhcNMjYwNDA1MDA1NzQ0WhcNMjYwNDEyMDA1NzQ0WjAYMRYwFAYD
VQQDEw02OWQxYjM4OS00OGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsR9B1mjnF3nzPuw/8G7s8sho8Q67TIblrkQPoWRDLvUE9/HDC/W/Pn9+bGro
nRg/5u2o97l/Ne4ZAVZ8BscoB7nDe+iLRmJVOKfyxFSwR99Vcz3HWP0iN00+qAcb
6DF7j9SHPlzTY4BZ2Se1aUCN/ETijZd0OXsw0Akhgto3x9ByiFJB+bA2P6AZXta4
VNhAU1QobLk1kUkvNCelwOesZKuJDV7FHATqypMHGH/DzsiKjU6dFxcEXpLy4g0t
82qM1qpmgruoRJSiVn4ov3KFOWMO5rOjeW2oBv8nMBf4A/y24k7vpdPltsBtD3mW
kCUaPTlGk3XR5wJa7ku1+09NewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFpZrVUL
fgeYI3lwJwlTrk1CZE+SMB8GA1UdIwQYMBaAFBhhU8uYiDijptSM8EI8W0YjAFno
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTY5Qy85RUIwNzk5ODEy
N0ExMUVEOTAyREZFMjdDNEY5QUUwMi9HR0ZUeTVpSU9LT20xSXp3UWp4YlJpTUFX
ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dHRlR5NWlJT0tPbTFJendRanhiUmlNQVdlZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RTY5Qy85RUIwNzk5ODEyN0ExMUVEOTAyREZFMjdDNEY5QUUwMi9HR0ZUeTVpSU9L
T20xSXp3UWp4YlJpTUFXZWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJeD/+W8iCctGZIXerEoSmSS/Z+ESl7WljU7BZBqwhyZ/tOqr6YnRQchKIyJt
84yOj9MUdqhA9B+15MD/FLkENIQoFrvKHG9/qpRB7D/yU3c2a7VnrgzL9v7GjvWK
N1xqWc1dYjKFJMx1Sz5rLWfbvRuY+j33yHwQqPUTnquA+PkJyvXltPDcR824vouU
hdlA8kFTD71QpyNfG7g30kbxETjY3Xb6oFHLobRhgXJGzHsCZ62S+aT3g2KyhuAn
VOyjJR87W2P4O63awKgJHaBQ9bZvN5kwUfMYUlJbmhvWskJcSca5wLk5ncF8uFMQ
Z34iVucQqiQbSTuK5epgruIvTw==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:32:07 2026 by rpki-client