
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198A90/57C7E22E7B9311F1A6E76D196FA30FBC/GzrH1RWNTKzSxkYfuudARZrT7CU.mft
File: GzrH1RWNTKzSxkYfuudARZrT7CU.mft (raw, json)
Hash identifier: 9QKV9zNCwdkOxqO4ccetUEKrK3Ms6nc7QACwjIjSRiE=
Subject key identifier: 0A:25:52:A0:06:F6:25:77:30:8B:76:C6:8C:2D:6F:3D:13:21:61:DF
Authority key identifier: 1B:3A:C7:D5:15:8D:4C:AC:D2:C6:46:1F:BA:E7:40:45:9A:D3:EC:25
Certificate issuer: /CN=A9198A90/serialNumber=1B3AC7D5158D4CACD2C6461FBAE740459AD3EC25
Certificate serial: 0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzrH1RWNTKzSxkYfuudARZrT7CU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198A90/57C7E22E7B9311F1A6E76D196FA30FBC/GzrH1RWNTKzSxkYfuudARZrT7CU.mft
Manifest number: 0A
Signing time: Thu 23 Jul 2026 11:16:53 +0000
Manifest this update: Thu 23 Jul 2026 11:16:53 +0000
Manifest next update: Thu 30 Jul 2026 11:16:53 +0000
Files and hashes: 1: GzrH1RWNTKzSxkYfuudARZrT7CU.crl (hash: MgzAY/Q7SyPFO8pzVuV/kwjpfnVFCIjSx/Y5WLAeV7U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9198A90/57C7E22E7B9311F1A6E76D196FA30FBC/GzrH1RWNTKzSxkYfuudARZrT7CU.crl
rsync://rpki.apnic.net/member_repository/A9198A90/57C7E22E7B9311F1A6E76D196FA30FBC/GzrH1RWNTKzSxkYfuudARZrT7CU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzrH1RWNTKzSxkYfuudARZrT7CU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 11:16:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198A90, serialNumber=1B3AC7D5158D4CACD2C6461FBAE740459AD3EC25
Validity
Not Before: Jul 23 11:16:53 2026 GMT
Not After : Jul 30 11:16:53 2026 GMT
Subject: CN=6a61f825-e036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:03:64:c1:95:ec:62:ef:fb:1d:b2:ff:78:c3:
f8:67:c0:63:aa:fe:1a:4b:1e:37:17:e8:9c:93:79:
b8:ed:21:cb:84:87:c5:f5:f3:3c:6b:6a:69:07:c3:
34:bc:25:e8:d7:5f:66:2e:f6:cc:18:c1:67:e2:01:
be:65:5c:85:3d:2d:a9:02:be:90:28:2f:ac:4b:92:
2a:7b:da:fa:c8:6e:db:1b:d2:de:be:b9:8d:ac:32:
e8:13:c2:c6:9a:08:76:37:85:e7:ed:34:4d:e4:99:
d7:a8:44:2d:3b:23:00:fe:f2:71:f2:4b:35:a2:85:
48:a5:67:5b:99:9a:c6:f0:ba:6e:46:31:37:66:2a:
95:7b:34:93:91:cb:42:03:aa:91:50:4a:1b:38:c8:
8a:21:1d:15:eb:bc:e1:16:9f:c1:67:bb:56:66:55:
5e:6d:b2:29:32:4b:c2:96:25:f5:c4:ce:c5:44:a0:
62:22:37:c8:57:8a:e9:be:29:b3:52:d8:58:d4:02:
ba:10:cf:c2:cd:67:6a:cc:0b:a1:96:80:c0:57:54:
29:79:95:af:05:59:c4:a4:57:27:d9:5f:d6:fc:a0:
23:62:cd:20:d1:cd:f4:01:29:d3:67:1d:e6:cc:b8:
76:86:14:f5:60:ce:3e:93:cd:e5:f4:fe:44:46:aa:
39:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:25:52:A0:06:F6:25:77:30:8B:76:C6:8C:2D:6F:3D:13:21:61:DF
X509v3 Authority Key Identifier:
keyid:1B:3A:C7:D5:15:8D:4C:AC:D2:C6:46:1F:BA:E7:40:45:9A:D3:EC:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198A90/57C7E22E7B9311F1A6E76D196FA30FBC/GzrH1RWNTKzSxkYfuudARZrT7CU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzrH1RWNTKzSxkYfuudARZrT7CU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198A90/57C7E22E7B9311F1A6E76D196FA30FBC/GzrH1RWNTKzSxkYfuudARZrT7CU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:c7:ea:cc:5c:bf:90:6b:d1:a9:bf:b5:e5:b4:fe:f6:99:7d:
a1:3f:be:bd:df:d6:86:b6:0a:44:19:91:fc:30:9e:fc:34:91:
80:77:0c:10:b0:aa:c5:f6:5d:25:60:7d:0c:00:4f:97:ac:c4:
ad:2e:7d:a9:43:db:9a:39:c0:6b:8e:c1:05:a4:43:ba:59:45:
8c:77:1d:f5:40:f4:f6:f3:6f:e8:6c:68:de:05:46:d2:f0:c9:
25:68:94:9e:b2:5d:8b:f1:ed:1e:31:a1:f7:aa:1f:d8:7c:6b:
bf:25:b4:0a:4a:1a:a5:98:8d:3d:2f:ad:80:5e:17:2b:3d:7f:
68:a0:31:0a:a0:43:34:45:36:60:ea:21:aa:2c:bc:96:3d:b2:
b5:c8:ad:9b:58:ec:d6:ba:c1:eb:a5:55:dc:67:88:f9:49:d2:
7e:53:0c:4b:f6:c6:fe:4e:73:f6:6f:2c:19:7b:7d:d9:71:f8:
fe:e9:27:11:3f:88:28:94:cb:ec:1e:c0:86:4b:66:ef:c2:a4:
48:41:4e:8e:c3:d7:b0:c7:36:77:6c:cf:6c:84:87:0f:c1:7b:
54:db:4a:87:0d:fc:f2:23:63:b1:f6:d0:ad:cc:d3:64:43:df:
fa:2e:ca:7a:4a:21:3a:52:cb:16:07:ff:5c:c1:ec:e1:e7:4d:
9b:ed:3f:82
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
OEE5MDExMC8GA1UEBRMoMUIzQUM3RDUxNThENENBQ0QyQzY0NjFGQkFFNzQwNDU5
QUQzRUMyNTAeFw0yNjA3MjMxMTE2NTNaFw0yNjA3MzAxMTE2NTNaMBgxFjAUBgNV
BAMTDTZhNjFmODI1LWUwMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCUA2TBlexi7/sdsv94w/hnwGOq/hpLHjcX6JyTebjtIcuEh8X18zxramkHwzS8
JejXX2Yu9swYwWfiAb5lXIU9LakCvpAoL6xLkip72vrIbtsb0t6+uY2sMugTwsaa
CHY3heftNE3kmdeoRC07IwD+8nHySzWihUilZ1uZmsbwum5GMTdmKpV7NJORy0ID
qpFQShs4yIohHRXrvOEWn8Fnu1ZmVV5tsikyS8KWJfXEzsVEoGIiN8hXium+KbNS
2FjUAroQz8LNZ2rMC6GWgMBXVCl5la8FWcSkVyfZX9b8oCNizSDRzfQBKdNnHebM
uHaGFPVgzj6TzeX0/kRGqjlFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUCiVSoAb2
JXcwi3bGjC1vPRMhYd8wHwYDVR0jBBgwFoAUGzrH1RWNTKzSxkYfuudARZrT7CUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4QTkwLzU3QzdFMjJFN0I5
MzExRjFBNkU3NkQxOTZGQTMwRkJDL0d6ckgxUldOVEt6U3hrWWZ1dWRBUlpyVDdD
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvR3pySDFSV05US3pTeGtZZnV1ZEFSWnJUN0NVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4
QTkwLzU3QzdFMjJFN0I5MzExRjFBNkU3NkQxOTZGQTMwRkJDL0d6ckgxUldOVEt6
U3hrWWZ1dWRBUlpyVDdDVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCBx+rMXL+Qa9Gpv7XltP72mX2hP76939aGtgpEGZH8MJ78NJGAdwwQsKrF9l0l
YH0MAE+XrMStLn2pQ9uaOcBrjsEFpEO6WUWMdx31QPT282/obGjeBUbS8MklaJSe
sl2L8e0eMaH3qh/YfGu/JbQKShqlmI09L62AXhcrPX9ooDEKoEM0RTZg6iGqLLyW
PbK1yK2bWOzWusHrpVXcZ4j5SdJ+UwxL9sb+TnP2bywZe33Zcfj+6ScRP4golMvs
HsCGS2bvwqRIQU6Ow9ewxzZ3bM9shIcPwXtU20qHDfzyI2Ox9tCtzNNkQ9/6Lsp6
SiE6UssWB/9cwezh502b7T+C
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:56:33 2026 by rpki-client