
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft
File: GpfC9HEfe8gC4misZvEQhivleIg.mft (raw, json)
Hash identifier: SVJkfIDvEyBd56ObBYQTKuMY6CoTkSytcf0lnZJVyAg=
Subject key identifier: 79:FB:D3:CB:5D:11:DB:43:34:05:8E:B8:4C:24:CB:83:60:71:96:70
Authority key identifier: 1A:97:C2:F4:71:1F:7B:C8:02:E2:68:AC:66:F1:10:86:2B:E5:78:88
Certificate issuer: /CN=A91C2663/serialNumber=1A97C2F4711F7BC802E268AC66F110862BE57888
Certificate serial: 2407
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft
Manifest number: 23A6
Signing time: Thu 10 Sep 2026 15:47:31 +0000
Manifest this update: Thu 10 Sep 2026 15:47:31 +0000
Manifest next update: Thu 17 Sep 2026 15:47:31 +0000
Files and hashes: 1: GpfC9HEfe8gC4misZvEQhivleIg.crl (hash: NkH3KXDtaYmER+XQpizYsjZVoZ0NeTR7xouvXL0KmSA=)
2: 05596FAEBA1811F080138957C4F9AE02.roa (hash: tyGMd+HN3XNyreUh3joDHlUhGigz8P1uPZWOL8YggfQ=)
3: 07412A002D3111F1B77CD687BC833773.roa (hash: m3KakV6D8uqf1vPRe2G0m6SVTDUuzIzt+KLbrHZc+PI=)
4: 13DD1B662D3111F180CCA088BC833773.roa (hash: R7dTMiB8fLcK528K7ntTaoxEftrwMiKxX3YP8FhMfmA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.crl
rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 15:35:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9223 (0x2407)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2663, serialNumber=1A97C2F4711F7BC802E268AC66F110862BE57888
Validity
Not Before: Sep 10 15:47:31 2026 GMT
Not After : Sep 17 15:47:31 2026 GMT
Subject: CN=6aa2d113-59c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d8:fd:50:08:63:42:df:44:21:b0:a9:80:90:
29:9c:52:cd:c5:26:a9:78:0d:54:82:14:7a:a9:ec:
80:85:0d:8a:e5:a1:1b:02:24:a5:c6:96:90:32:25:
34:22:a2:58:d2:5d:68:45:60:9f:31:df:9a:4f:53:
f1:3f:d6:d7:bb:15:00:8c:86:e4:5e:47:72:ae:84:
dd:30:3a:9c:a0:d5:2b:13:25:5f:f2:d3:a0:d8:f6:
30:ba:2d:bb:e3:c4:aa:b8:a0:b6:0f:c4:81:1f:15:
13:23:67:cd:54:6e:84:ac:8e:95:4b:d6:46:6a:bc:
4c:04:99:ea:2e:d9:9d:f3:fb:ae:ba:12:65:b8:f4:
c9:90:1a:d7:ae:c4:b7:b3:1d:f1:47:fe:e0:78:df:
8f:16:be:40:03:ae:ac:37:7f:01:a7:f6:2a:3a:97:
65:51:e8:e7:b8:83:b3:b9:b1:92:68:d9:05:3b:30:
61:8a:bd:61:61:72:6f:95:5c:a8:a4:ec:48:6e:ca:
4b:81:2a:4f:31:6e:19:2e:1c:08:98:40:bd:be:f6:
fa:f8:a7:36:cc:20:c0:40:8c:f6:77:35:d1:29:44:
09:c8:4e:02:ad:87:9c:80:1e:0e:95:0c:d0:cc:32:
81:13:6a:1e:e0:9b:75:26:58:c8:97:8e:64:f4:80:
3f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:FB:D3:CB:5D:11:DB:43:34:05:8E:B8:4C:24:CB:83:60:71:96:70
X509v3 Authority Key Identifier:
keyid:1A:97:C2:F4:71:1F:7B:C8:02:E2:68:AC:66:F1:10:86:2B:E5:78:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:ca:dd:7a:0d:b2:f7:06:f1:a9:a1:7a:d3:bf:1d:61:73:e3:
63:07:9c:45:61:a5:37:50:ef:f6:16:e4:c7:48:29:9c:e1:4d:
ab:25:e9:d8:8b:16:c4:34:b7:80:7f:92:aa:c9:af:7a:4c:42:
39:e7:ce:ca:0d:71:88:f5:d6:34:28:ba:50:b6:7c:f0:f0:36:
45:e7:e7:54:30:15:64:10:e2:65:c7:06:09:39:0b:78:a4:77:
1a:08:48:f6:b2:79:fc:f5:f4:b6:5d:cc:61:a8:d2:63:36:3f:
29:f0:ff:9c:d6:07:d9:8d:f0:a4:0d:eb:03:31:f7:22:2b:9d:
02:1f:0b:4d:10:34:07:27:0d:91:ad:8d:9c:9f:b6:e1:4e:61:
78:45:e5:aa:0e:9e:f1:d6:e4:f6:d0:08:e6:04:62:ca:72:30:
36:b8:10:1c:48:e0:dc:b1:ae:ec:04:8e:88:d4:06:96:20:a0:
2a:2c:21:de:d8:15:66:9c:34:fe:85:f1:d7:fe:c2:6a:37:3d:
c8:55:98:32:80:9b:34:dc:86:23:00:66:e7:49:37:90:1a:e5:
97:e5:a5:0f:6f:ca:54:03:d9:12:51:7f:63:6b:4d:eb:bc:7c:
eb:f3:15:49:be:92:5c:0c:c5:4c:f4:5e:cf:b4:1b:2c:da:e9:
f1:82:0f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:35:15 2026 by rpki-client