
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft
File: GJZ9zbckqEpxcR5niqsdLnIhXWw.mft (raw, json)
Hash identifier: Ue5KpB0ErNc2yW3KoVGPTuFyt9wkDnSmJpMAquaAY8s=
Subject key identifier: 4F:6F:7F:BB:62:38:73:A8:1F:05:06:36:28:B6:0B:77:7D:96:3D:CB
Authority key identifier: 18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C
Certificate issuer: /CN=A91D243F/serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C
Certificate serial: 0151
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft
Manifest number: 011B
Signing time: Sat 19 Sep 2026 06:08:05 +0000
Manifest this update: Sat 19 Sep 2026 06:08:05 +0000
Manifest next update: Sat 26 Sep 2026 06:08:05 +0000
Files and hashes: 1: GJZ9zbckqEpxcR5niqsdLnIhXWw.crl (hash: /V9J/O29MIi1bOQ/6evyr8HUop5BUcLB+GM5h52jmRk=)
2: 1808A790318411F0BC1DD041C4F9AE02.roa (hash: ySHv/z2aBIpi4ZmJwdGMW7JXmKAnxSrgO8kpo1pxZzc=)
3: 3408F1BA450811F09650FF5FC4F9AE02.roa (hash: v4VAeTRhLetshvqbEadOdfyl/dOEP9N+4RKLhZ4e7qE=)
4: 6896A446318411F0BBC4F91DC4F9AE02.roa (hash: 4FovTEqwPM1DYoWEf0hfar9xlGLMGj5cisGTHLJPYsI=)
5: 17894A68318411F0BC1DD041C4F9AE02.roa (hash: 8ix/WnrdPiWa322J3erRaZZ4qyQ1QZ0UIEQCCV8f4LA=)
6: 372E72941F7811F0AC4FFF82C4F9AE02.roa (hash: lc4x/4krlU7IrBNm9yndeIsd6X4Oi1wYGPdwnSnT+2s=)
7: 37B448241F7811F0AC4FFF82C4F9AE02.roa (hash: mFeODnTqqCYAbyyDP1f7ewIXqtu+6WN+eZxifMY5OQQ=)
8: 1879BE8A318411F0BC1DD041C4F9AE02.roa (hash: j2Keh6m8tIx7/TCOD6hIJ0OBGZazoatVXlizWriG7AA=)
9: 349ACBB2450811F09650FF5FC4F9AE02.roa (hash: ElTWkHinF5kZlSpWnOacvfk821L7f3zWiiILDU+FV5g=)
10: 5E6EBAF64D0611F09396603CC4F9AE02.roa (hash: WwIDIxcJSfVf47feTm39rcx36NVF4Zg4PvbNM1OFevw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl
rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 337 (0x151)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D243F, serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C
Validity
Not Before: Sep 19 06:08:05 2026 GMT
Not After : Sep 26 06:08:05 2026 GMT
Subject: CN=6aae26c5-b25e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ae:75:58:8c:b6:80:d1:ca:66:b4:1c:7a:4b:
d0:ec:1a:85:26:4e:37:e9:92:a6:ee:9f:9e:eb:26:
6f:e7:5e:58:40:12:69:ed:32:72:b6:a7:b0:46:80:
30:5b:10:9e:20:87:9f:7c:cd:27:28:87:07:04:68:
7b:c8:ff:e4:76:4c:30:f7:00:fb:74:cb:7e:b1:82:
56:11:45:8a:c9:13:a1:57:46:37:8e:e6:39:ea:3e:
f0:4c:8e:81:7b:1f:f4:a1:8b:03:bb:29:cf:da:7a:
e7:9b:c2:25:26:2a:bd:54:cb:e5:1c:82:6b:44:fb:
28:1d:49:c4:f7:b7:b4:6d:3f:14:6c:ce:dc:91:d0:
13:38:1b:86:6a:45:16:50:4e:0e:45:84:43:98:9f:
06:17:9c:78:17:c1:4a:ed:da:48:9d:22:f7:f0:ce:
95:ed:61:b2:a2:86:34:14:f2:63:82:04:84:9d:cc:
d7:20:03:ae:dc:c6:5c:13:b7:b3:d1:2c:17:e1:4f:
23:18:a4:57:26:95:8d:3d:52:85:8c:29:72:1c:07:
5c:64:c7:48:f5:b6:a4:67:d0:db:7b:37:93:41:a7:
a9:1c:d7:8c:4e:5d:e9:0a:21:a2:d8:ab:54:91:ba:
4f:99:0c:52:d2:74:b3:2f:dd:44:08:ea:26:bb:e0:
28:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:6F:7F:BB:62:38:73:A8:1F:05:06:36:28:B6:0B:77:7D:96:3D:CB
X509v3 Authority Key Identifier:
keyid:18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d0:b8:70:88:24:3b:55:18:79:61:6f:d5:b8:1d:05:c2:cc:92:
51:c7:04:f7:89:99:6f:fc:0e:26:a3:50:09:93:2d:e3:20:7e:
a5:b3:f4:37:3e:f6:72:56:89:dd:51:44:ec:c1:8c:1b:ed:2b:
23:78:7c:d4:e8:9a:5c:82:d8:97:5e:8b:63:57:65:44:9d:b0:
eb:d6:7a:ec:6f:8e:a4:71:62:8d:46:0f:f0:51:64:48:8b:71:
e4:fc:a7:86:8d:7f:fb:22:11:12:13:34:46:0b:53:58:42:cc:
fa:7a:1f:e8:d8:47:4c:c9:2f:ee:01:8b:67:32:50:47:f4:3f:
0d:28:ce:43:d9:2a:4c:10:93:bd:79:db:dd:37:48:4c:98:53:
d4:f1:0d:70:82:e2:7c:33:1d:8a:38:bf:e1:0d:53:83:d0:bb:
4f:eb:0f:22:9e:51:2b:ab:94:de:d5:7e:ac:55:28:4e:41:98:
09:3e:c7:17:3a:22:b1:68:02:d4:df:fd:b9:74:fe:d4:04:44:
cf:9a:21:9e:23:60:bc:53:10:c7:a6:bd:5d:e5:08:41:eb:cd:
11:f1:51:63:f4:a3:ad:c6:44:ce:67:2c:1d:74:95:64:3b:bc:
15:2a:37:ec:07:10:c7:8a:1c:ff:c9:fc:30:93:18:95:ae:db:
77:65:98:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 00:22:04 2026 by rpki-client