
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft
File: GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft (raw, json)
Hash identifier: n+9s5BW+tS4Xhxa69BrlSqOfqXoXRF42bthTFDvQKaM=
Subject key identifier: 7C:FB:38:35:67:A0:1F:9C:73:CF:34:2A:90:B4:35:CD:83:FB:DA:84
Authority key identifier: 18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B
Certificate issuer: /CN=A91DDCB6/serialNumber=18DC531D44F05962E97F23845736141D3E02681B
Certificate serial: 07BA
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft
Manifest number: 07A6
Signing time: Tue 20 Oct 2026 20:14:47 +0000
Manifest this update: Tue 20 Oct 2026 20:14:47 +0000
Manifest next update: Tue 27 Oct 2026 20:14:47 +0000
Files and hashes: 1: GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl (hash: UU1qdY14Qg5tlhR/ETGqKnSogjHEyN25q1uR16YH7rQ=)
2: 00756F7E63F011EC987F5B19C4F9AE02.roa (hash: JgXv8es/pw1sE0Gc2Hw1RSuBorDwuU0kKpPxiQ9evCo=)
3: 48D65BC2D28F11EB9F83683DC4F9AE02.roa (hash: UHoZmq0paQ48NlRRluqfsVDQh3Q2DcM666YtqeY10Y8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl
rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Oct 2026 20:14:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1978 (0x7ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DDCB6, serialNumber=18DC531D44F05962E97F23845736141D3E02681B
Validity
Not Before: Oct 20 20:14:47 2026 GMT
Not After : Oct 27 20:14:47 2026 GMT
Subject: CN=6ad7cbb7-d522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:18:d3:61:5a:63:d9:e6:26:74:7b:06:f5:f2:
5a:71:3e:28:69:ae:88:28:45:85:7e:d8:d1:d5:60:
3e:de:82:08:4b:8e:33:ea:f5:47:a2:c2:43:b8:fa:
aa:ae:3c:3c:1e:f4:b7:cc:07:c0:1f:a9:88:1d:ad:
88:6b:aa:27:c8:fa:38:49:9a:c2:5a:80:62:b6:30:
ac:5b:f4:37:56:04:48:0e:24:f4:62:f4:8d:5b:4a:
4d:01:27:d2:23:5d:58:42:64:7b:ed:fa:0f:a3:95:
30:a0:64:28:b3:e2:4d:9b:9d:8e:07:64:41:34:88:
f3:db:21:71:82:ea:2a:b1:09:52:57:e9:a3:ac:b1:
02:70:85:ae:2a:82:cf:aa:72:00:8f:44:ee:61:f6:
01:f5:b8:2a:91:4f:3b:c4:8b:8e:cc:b2:c4:62:f2:
7b:d7:15:ce:48:ec:98:a6:cd:67:97:66:8f:a3:3f:
46:a8:4d:69:a3:c8:f2:f5:d3:89:51:75:68:e4:a2:
fa:1c:c6:ba:a9:7e:91:10:9e:47:40:69:cf:ae:0a:
e5:4c:2f:db:32:a5:d1:3a:44:10:ba:d8:d0:fd:63:
43:a3:c0:f3:44:4d:94:09:48:2f:c5:06:46:a0:55:
68:52:bb:e3:1d:2e:cf:53:b8:fb:96:88:78:20:57:
04:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:FB:38:35:67:A0:1F:9C:73:CF:34:2A:90:B4:35:CD:83:FB:DA:84
X509v3 Authority Key Identifier:
keyid:18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:9a:ff:59:f8:00:35:f4:06:cf:59:ab:9f:6f:f9:9c:a4:41:
59:84:78:3e:17:8e:29:33:6d:a5:1a:6b:8c:6e:a2:c3:00:6d:
34:1b:c0:a8:ce:57:39:11:ee:96:d4:c9:4f:04:e9:35:cb:69:
ac:d7:0f:0e:66:e0:4a:28:79:b1:27:72:5c:e7:26:14:c3:59:
ea:9d:79:42:c0:29:6c:a6:10:c3:98:1b:cc:47:44:52:5e:9e:
c5:f7:14:d3:56:6a:71:c1:69:9b:b6:b6:a0:66:3d:5b:a6:c7:
f5:fb:94:29:a1:88:f4:ba:eb:d2:d0:42:86:b1:80:38:69:a0:
05:41:2f:0e:4d:66:e4:61:09:e5:42:c5:a2:48:a8:04:07:c8:
81:56:8c:83:8c:2c:f4:ec:d9:5c:a6:63:d5:c7:54:73:78:68:
4a:ab:cd:75:f4:3d:da:64:39:26:39:f8:98:5c:70:23:19:af:
95:91:46:d5:c8:ab:eb:b6:74:f5:7b:34:c1:14:74:f1:42:38:
e4:bf:35:98:5b:38:a5:d3:80:d7:18:83:09:95:28:da:29:78:
73:42:3a:cb:cb:c4:0b:e3:55:b5:31:e2:c2:cc:de:51:ce:45:
f4:86:25:2d:12:db:ef:3d:6b:9d:f6:8f:99:84:53:82:b3:6e:
f0:04:59:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 16:01:57 2026 by rpki-client