
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8357/1DA5CC56DF8A11EF87472B74C4F9AE02/GAo1IuIFDF8eCHNTmxLW0jEqIBo.mft
File: GAo1IuIFDF8eCHNTmxLW0jEqIBo.mft (raw, json)
Hash identifier: qSiyJDyucR4X1HTnKVSzr2BDxz0jBCW+t0UAlxF/f5w=
Subject key identifier: 64:CF:B0:D2:03:3A:93:1B:72:AA:EB:A9:55:ED:B3:AC:61:7E:1B:96
Authority key identifier: 18:0A:35:22:E2:05:0C:5F:1E:08:73:53:9B:12:D6:D2:31:2A:20:1A
Certificate issuer: /CN=A91F8357/serialNumber=180A3522E2050C5F1E0873539B12D6D2312A201A
Certificate serial: 0122
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAo1IuIFDF8eCHNTmxLW0jEqIBo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8357/1DA5CC56DF8A11EF87472B74C4F9AE02/GAo1IuIFDF8eCHNTmxLW0jEqIBo.mft
Manifest number: 0122
Signing time: Wed 19 Aug 2026 06:25:57 +0000
Manifest this update: Wed 19 Aug 2026 06:25:57 +0000
Manifest next update: Wed 26 Aug 2026 06:25:57 +0000
Files and hashes: 1: GAo1IuIFDF8eCHNTmxLW0jEqIBo.crl (hash: uGvp6KQRebLMA8Dm41WTlstwaoS2zupjzWnsLJ5Msp8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8357/1DA5CC56DF8A11EF87472B74C4F9AE02/GAo1IuIFDF8eCHNTmxLW0jEqIBo.crl
rsync://rpki.apnic.net/member_repository/A91F8357/1DA5CC56DF8A11EF87472B74C4F9AE02/GAo1IuIFDF8eCHNTmxLW0jEqIBo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAo1IuIFDF8eCHNTmxLW0jEqIBo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 06:25:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 290 (0x122)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8357, serialNumber=180A3522E2050C5F1E0873539B12D6D2312A201A
Validity
Not Before: Aug 19 06:25:57 2026 GMT
Not After : Aug 26 06:25:57 2026 GMT
Subject: CN=6a854c75-0591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:58:9f:52:7d:54:c4:bd:5d:15:7a:d6:48:a8:
42:d3:fc:85:5a:68:fe:07:f9:e5:7e:0c:2c:0f:5e:
a7:75:39:58:1f:e4:0b:25:24:a8:9b:8a:27:af:51:
dc:80:b9:f3:81:aa:14:30:a6:c3:54:0b:46:44:97:
61:dd:81:6f:b2:45:52:52:a1:14:a8:c9:0a:64:ef:
a5:57:b7:78:54:5b:da:5b:2c:5c:22:11:a2:4e:99:
f9:b6:80:fe:a0:c9:04:f7:f0:76:e3:05:cf:31:16:
de:da:9c:95:dd:29:9d:0f:8a:27:06:30:dc:e7:c1:
f8:49:90:c4:b4:86:5e:a7:57:f6:63:77:b5:c2:1a:
84:51:2c:02:a9:f4:5a:b9:36:b3:f5:43:d9:47:cb:
27:6c:df:b0:d8:bc:c3:d6:31:b1:48:fc:68:41:2a:
b6:63:f8:bf:0f:c3:37:23:3a:2d:68:1d:4d:30:d3:
6d:e9:60:6d:54:84:49:8b:41:93:cd:24:90:a9:ff:
36:74:af:db:7d:d2:64:f5:09:42:42:bc:8a:d3:03:
6c:92:54:79:6f:c7:70:cc:52:4e:82:a7:e7:0a:37:
51:ad:9a:2e:8f:87:46:47:aa:79:d1:9d:05:cf:91:
31:df:ba:46:e5:4e:74:cc:4d:77:ac:3c:28:10:f9:
cd:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:CF:B0:D2:03:3A:93:1B:72:AA:EB:A9:55:ED:B3:AC:61:7E:1B:96
X509v3 Authority Key Identifier:
keyid:18:0A:35:22:E2:05:0C:5F:1E:08:73:53:9B:12:D6:D2:31:2A:20:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8357/1DA5CC56DF8A11EF87472B74C4F9AE02/GAo1IuIFDF8eCHNTmxLW0jEqIBo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAo1IuIFDF8eCHNTmxLW0jEqIBo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8357/1DA5CC56DF8A11EF87472B74C4F9AE02/GAo1IuIFDF8eCHNTmxLW0jEqIBo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:bd:a1:0e:79:8d:bf:51:68:76:3a:46:9a:a2:a6:bc:7a:94:
5e:9b:cd:ac:7d:6f:ae:13:63:29:9f:20:25:dd:8e:b5:e0:cd:
92:cb:fe:dc:a4:24:dd:e3:df:75:4e:5e:98:7e:f2:74:3d:0d:
d1:27:aa:5b:cd:45:11:fb:ae:2b:7f:d1:8b:db:3b:f0:d7:5d:
96:3e:64:4b:54:10:57:56:58:a4:bc:7f:ec:df:95:ae:a5:2b:
76:6f:a3:5d:bc:99:41:1f:98:13:96:77:34:a8:aa:d0:ee:a5:
5b:27:ac:01:d5:12:24:04:75:a6:bd:8c:3f:3a:ba:ac:0d:7e:
f8:10:4c:02:e8:e3:38:14:19:30:ca:fc:8f:ac:d7:b5:79:dd:
52:5a:1f:e5:d3:b6:6b:b4:4a:cd:5c:51:b3:d8:65:55:c9:b5:
da:d8:a3:3b:e7:b1:53:2a:71:5c:7b:d0:5e:48:77:e6:ed:2b:
e1:6a:c9:ab:0d:2d:b7:d3:ce:67:be:f3:22:9f:d9:50:81:30:
07:7d:0a:d8:dd:27:10:a8:5e:e2:db:e9:55:14:ab:9a:9d:bd:
3c:21:78:e5:75:e0:da:03:8a:1a:08:f4:24:43:34:e8:e2:d3:
17:b4:14:db:99:48:f9:ae:17:40:ff:6a:19:8b:ed:27:b4:42:
e1:d5:26:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:47:22 2026 by rpki-client