
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft
File: GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft (raw, json)
Hash identifier: NHl3mO4G7/JsJLQCu+/dWr+ONY5IlUnxXS1U6kyTFxw=
Subject key identifier: FC:D5:09:B1:E4:47:A2:8F:73:DE:B2:E3:EE:A5:CE:A7:78:B1:99:86
Authority key identifier: 18:81:5B:34:C8:69:28:4B:43:23:C9:16:99:36:77:0F:DD:0B:42:36
Certificate issuer: /CN=A91DACA7/serialNumber=18815B34C869284B4323C9169936770FDD0B4236
Certificate serial: 01A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GIFbNMhpKEtDI8kWmTZ3D90LQjY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft
Manifest number: 01A0
Signing time: Wed 07 Oct 2026 04:42:09 +0000
Manifest this update: Wed 07 Oct 2026 04:42:09 +0000
Manifest next update: Wed 14 Oct 2026 04:42:09 +0000
Files and hashes: 1: GIFbNMhpKEtDI8kWmTZ3D90LQjY.crl (hash: 2AfnTW3L87YUnD68KC9xxUrpM7oIVWBVg0VWwC3RG8M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.crl
rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GIFbNMhpKEtDI8kWmTZ3D90LQjY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 04:42:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 416 (0x1a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DACA7, serialNumber=18815B34C869284B4323C9169936770FDD0B4236
Validity
Not Before: Oct 7 04:42:09 2026 GMT
Not After : Oct 14 04:42:09 2026 GMT
Subject: CN=6ac5cda1-2324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2c:a3:c3:49:ac:34:8c:43:67:00:b5:50:03:
45:bb:07:a6:80:ca:da:3b:d7:16:51:6d:55:c0:11:
f2:c6:9c:de:f0:bf:8b:93:66:4e:3f:6f:45:33:bf:
81:a6:f8:14:39:21:b9:18:3a:2b:b6:ac:2d:9e:59:
a2:e8:92:68:98:f0:7a:04:7a:75:e7:a3:2f:1a:ff:
c2:eb:25:76:2b:90:a7:a4:9b:48:96:b9:dd:e7:68:
92:52:93:01:86:cd:ef:b8:f5:51:4a:66:f6:f5:5d:
a1:aa:40:4a:9e:93:13:86:b0:64:d7:eb:2d:51:e7:
94:06:e0:3c:6f:43:7a:46:df:07:26:92:26:e8:b3:
03:1f:44:97:fe:a3:55:c8:e8:1e:13:70:2b:77:a9:
d7:ec:7b:5a:23:8e:7a:9f:17:bf:86:ea:4b:29:0b:
7a:ad:d9:88:1e:bc:98:9a:39:43:ca:58:43:4d:71:
3a:75:ad:c2:1f:f0:e6:3f:e9:ee:a1:71:31:e3:b4:
38:e7:ac:66:86:84:66:35:72:4c:1f:57:5c:19:6e:
3a:d9:ae:b6:ec:7d:01:f3:54:7a:09:12:d8:95:76:
69:4e:45:73:5e:92:4e:83:f8:a7:22:e2:8e:ed:2f:
60:db:75:c3:6a:24:ca:16:8d:cf:40:b4:58:6d:44:
92:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D5:09:B1:E4:47:A2:8F:73:DE:B2:E3:EE:A5:CE:A7:78:B1:99:86
X509v3 Authority Key Identifier:
keyid:18:81:5B:34:C8:69:28:4B:43:23:C9:16:99:36:77:0F:DD:0B:42:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GIFbNMhpKEtDI8kWmTZ3D90LQjY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c8:f0:ea:e1:bd:37:4e:5e:d7:ad:49:1e:19:ef:13:b6:94:
4c:bd:6d:a4:35:fb:98:70:91:64:5b:96:1f:ca:56:ab:8e:bd:
97:5b:e8:ac:6b:42:0e:c0:47:9e:2e:e4:1e:66:2c:7f:00:fb:
d3:e5:a0:3f:37:5e:d8:1a:18:08:ad:7e:2f:08:7c:93:9d:5a:
74:03:3b:81:3d:5b:fa:c5:4e:cd:24:7b:a5:19:d3:dd:5f:9c:
5c:e4:a4:8d:f6:49:16:0b:19:56:d7:bc:2b:d9:22:1b:6d:72:
74:26:14:12:6c:9c:ac:f6:bc:82:60:6e:dd:74:e4:22:69:56:
ac:f9:2e:32:ff:15:f7:ea:60:9d:f5:75:c9:25:e9:8e:b7:44:
60:81:3f:ec:f9:f9:a3:59:5d:3c:76:f3:9e:68:b4:01:fd:46:
a0:24:b6:23:b8:87:89:a1:14:11:f1:ec:c8:c4:92:de:0f:35:
4c:4b:9e:cb:a0:7c:66:32:73:a9:32:5d:5f:7c:62:f0:d5:b7:
21:fb:ca:6d:b8:f4:cf:3a:58:7b:04:c6:bb:36:e0:24:41:a4:
17:d4:cc:12:7b:3e:1d:8d:90:f9:f9:78:1c:46:9e:24:8a:5f:
79:77:ef:7c:d3:84:c7:b8:82:f7:f9:36:bc:89:20:bd:2d:3b:
bb:9d:15:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:03:11 2026 by rpki-client