
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.mft
File: gf_yFQBdoa-sXiSrvMA8pw9mS1Y.mft (raw, json)
Hash identifier: DewP524IYdXUx2PgSFR/2RhgukQXU1DGvbK7H+hW0XQ=
Subject key identifier: 4D:CD:D0:02:C6:C0:42:97:D9:E9:98:52:E3:85:9E:B4:78:1B:50:64
Authority key identifier: 81:FF:F2:15:00:5D:A1:AF:AC:5E:24:AB:BC:C0:3C:A7:0F:66:4B:56
Certificate issuer: /CN=A91EEBAD/serialNumber=81FFF215005DA1AFAC5E24ABBCC03CA70F664B56
Certificate serial: 0705
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.mft
Manifest number: 06FA
Signing time: Tue 18 Aug 2026 22:32:15 +0000
Manifest this update: Tue 18 Aug 2026 22:32:14 +0000
Manifest next update: Tue 25 Aug 2026 22:32:14 +0000
Files and hashes: 1: gf_yFQBdoa-sXiSrvMA8pw9mS1Y.crl (hash: rrusQknoqb7FXcmqZb4sXlPWffciHBKuFU9IpI+ej6c=)
2: 9FCD0EE6A34411EB94DFE619C4F9AE02.roa (hash: Xr3+TbIOof9u/LmbNudhZ3Fw1f9PhHkFv4UjhuCI3JM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.crl
rsync://rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 22:32:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1797 (0x705)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EEBAD, serialNumber=81FFF215005DA1AFAC5E24ABBCC03CA70F664B56
Validity
Not Before: Aug 18 22:32:14 2026 GMT
Not After : Aug 25 22:32:14 2026 GMT
Subject: CN=6a84dd6f-48ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f6:35:7b:e5:71:c3:36:2c:56:85:3c:f4:c3:
a1:4b:37:b0:00:89:28:02:83:40:48:3d:74:51:81:
14:a4:3e:7f:d2:ab:6c:ef:2b:9f:06:bc:1d:60:01:
ff:f2:63:9b:bd:fe:71:38:77:af:29:bc:e4:37:ff:
5b:4e:06:69:94:01:8a:d1:f9:34:87:92:d8:a3:14:
cf:4c:6f:1c:12:69:2c:f6:7a:15:a1:c7:4a:02:47:
45:bd:aa:a1:80:ac:65:1a:00:ec:ab:28:a3:e6:ea:
56:27:1c:01:9e:45:ce:2e:a9:5d:f9:1d:f7:c5:75:
73:b8:01:d0:6b:9c:db:ae:b4:bd:0e:d2:4a:08:6d:
6c:cd:ee:d4:33:76:95:60:65:77:eb:f0:24:fe:7c:
b1:06:46:73:f7:c8:1c:4f:67:34:b2:b8:16:ec:5f:
db:92:2b:18:48:3d:ed:1b:79:14:eb:76:28:11:0b:
6e:1e:9e:7b:66:6c:75:af:25:d4:52:b4:d6:0e:4b:
88:04:d0:c1:97:3f:1b:ad:ff:d5:94:5c:c5:24:f5:
32:76:27:5e:ed:0a:2b:a5:66:d2:f6:b8:36:f7:ad:
bc:a2:b5:5f:fb:2e:17:0b:8f:b4:d0:29:4f:57:db:
ca:ce:6f:46:e4:11:06:0c:d5:ba:ec:29:a2:fc:1b:
70:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:CD:D0:02:C6:C0:42:97:D9:E9:98:52:E3:85:9E:B4:78:1B:50:64
X509v3 Authority Key Identifier:
keyid:81:FF:F2:15:00:5D:A1:AF:AC:5E:24:AB:BC:C0:3C:A7:0F:66:4B:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:4c:7d:2d:2a:34:1b:af:52:31:b2:29:e5:8a:5e:d1:b4:fb:
46:f5:d5:92:a3:7e:f2:8a:3b:f8:e4:91:4b:98:12:dd:8a:f9:
1d:ff:fd:77:3b:b6:ea:ae:59:04:a0:7d:d8:c3:cf:d5:17:14:
ee:c4:4c:6b:a3:a3:7e:ca:19:60:cb:41:f6:19:97:f8:09:60:
dd:5f:25:4e:2c:ba:83:3f:73:53:c1:bd:1d:bd:99:be:63:02:
9a:6f:f7:37:99:fc:22:83:88:21:b0:be:7e:f7:18:25:6f:31:
5c:ef:dc:4b:f3:de:c3:aa:5a:ed:df:6a:2f:52:0f:8d:be:3a:
d3:48:50:8c:00:51:01:fd:10:98:a4:87:c0:49:e2:e6:89:0e:
f8:7f:98:63:c3:f7:86:99:67:c5:73:6c:c2:e6:89:59:ca:dc:
a1:da:96:e9:ee:71:67:c0:54:b4:ec:40:25:5e:f8:e7:17:d3:
22:98:e3:b2:bb:4e:47:e4:c8:64:d5:02:34:ba:36:6f:b8:e2:
ad:37:35:a7:fa:9d:0a:df:7c:1f:c5:08:49:35:d5:20:6a:17:
be:ba:b8:6c:c5:0e:a6:c0:d3:3e:85:19:e5:81:e2:1f:20:4c:
0d:e4:f2:e3:93:12:8f:9b:9b:b2:03:dc:c0:25:2b:24:22:06:
49:60:ca:a2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBwUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUVCQUQxMTAvBgNVBAUTKDgxRkZGMjE1MDA1REExQUZBQzVFMjRBQkJDQzAzQ0E3
MEY2NjRCNTYwHhcNMjYwODE4MjIzMjE0WhcNMjYwODI1MjIzMjE0WjAYMRYwFAYD
VQQDEw02YTg0ZGQ2Zi00OGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArfY1e+VxwzYsVoU89MOhSzewAIkoAoNASD10UYEUpD5/0qts7yufBrwdYAH/
8mObvf5xOHevKbzkN/9bTgZplAGK0fk0h5LYoxTPTG8cEmks9noVocdKAkdFvaqh
gKxlGgDsqyij5upWJxwBnkXOLqld+R33xXVzuAHQa5zbrrS9DtJKCG1sze7UM3aV
YGV36/Ak/nyxBkZz98gcT2c0srgW7F/bkisYSD3tG3kU63YoEQtuHp57Zmx1ryXU
UrTWDkuIBNDBlz8brf/VlFzFJPUydide7QorpWbS9rg29628orVf+y4XC4+00ClP
V9vKzm9G5BEGDNW67Cmi/BtwlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE3N0ALG
wEKX2emYUuOFnrR4G1BkMB8GA1UdIwQYMBaAFIH/8hUAXaGvrF4kq7zAPKcPZktW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUJBRC81MEQ5MUU2NkEz
NDMxMUVCOTk3QjMzMTlDNEY5QUUwMi9nZl95RlFCZG9hLXNYaVNydk1BOHB3OW1T
MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dmX3lGUUJkb2Etc1hpU3J2TUE4cHc5bVMxWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RUJBRC81MEQ5MUU2NkEzNDMxMUVCOTk3QjMzMTlDNEY5QUUwMi9nZl95RlFCZG9h
LXNYaVNydk1BOHB3OW1TMVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANUx9LSo0G69SMbIp5Ype0bT7RvXVkqN+8oo7+OSRS5gS3Yr5Hf/9dzu26q5Z
BKB92MPP1RcU7sRMa6OjfsoZYMtB9hmX+Alg3V8lTiy6gz9zU8G9Hb2ZvmMCmm/3
N5n8IoOIIbC+fvcYJW8xXO/cS/Pew6pa7d9qL1IPjb4600hQjABRAf0QmKSHwEni
5okO+H+YY8P3hplnxXNswuaJWcrcodqW6e5xZ8BUtOxAJV745xfTIpjjsrtOR+TI
ZNUCNLo2b7jirTc1p/qdCt98H8UISTXVIGoXvrq4bMUOpsDTPoUZ5YHiHyBMDeTy
45MSj5ubsgPcwCUrJCIGSWDKog==
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:44 2026 by rpki-client