
$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft
File: GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft (raw, json)
Hash identifier: 82WdMqVI/o7iE5hvJ9x0bjrFTuEUJoWXQPgcsjR80K0=
Subject key identifier: D8:7F:02:96:50:A3:DB:D4:39:FA:EA:A7:AF:EA:5E:A7:CF:19:F2:B9
Authority key identifier: 19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17
Certificate issuer: /CN=A91991D3/serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17
Certificate serial: 0244
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft
Manifest number: 0214
Signing time: Wed 25 Mar 2026 01:35:59 +0000
Manifest this update: Wed 25 Mar 2026 01:35:59 +0000
Manifest next update: Wed 01 Apr 2026 01:35:59 +0000
Files and hashes: 1: GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl (hash: LOmQgOyqGt5ag9O9/6zPLJeHwROaZexF+tyeeJGnG48=)
2: 3F50C060031811F19D968415183D8C67.roa (hash: ikbWJMeGoQ4NT+iTgattiHwkrEFygkhc4z1JEm/i9+4=)
3: 6E1C49FA031811F1BA97C916183D8C67.roa (hash: W3xz1OlCOY4911IjT7XvKTLZQ/EXJxfvdWuVQx6sAYg=)
4: 12D4E3D41AA411F0A196BA66C4F9AE02.roa (hash: Wb9fqxh/2GhJbzzPZAroheRX0Q4IRD6pGw48st/qKjM=)
5: 926A40AC205E11F0A7552513C4F9AE02.roa (hash: YKiXx5HCj2zwN3jfK9q5GakLYQcoFw4kl98GWbjUs9o=)
6: F250438EF44011F0A1A516A45F6F56BC.roa (hash: 39UXrQgnsrOoQwxWVU9MQlKYuieI5NM5dujARlQugR8=)
7: 1F388278205F11F0A895DE1EC4F9AE02.roa (hash: SPaCgDejvUx7FptJCD5UIANcqzATtL9+9X2RUGgGItI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl
rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:35:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 580 (0x244)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91991D3, serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17
Validity
Not Before: Mar 25 01:35:59 2026 GMT
Not After : Apr 1 01:35:59 2026 GMT
Subject: CN=69c33bff-5364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6e:f3:da:f1:cd:6c:76:06:bc:0e:ae:86:ea:
c9:c2:e8:79:9e:b4:1b:a3:2d:01:74:8f:43:04:f9:
a0:da:56:5d:1f:55:50:e1:07:b3:4d:b6:28:28:27:
7e:bf:b1:11:c2:d4:f4:7d:0e:47:c7:ef:20:06:09:
27:38:15:9d:e0:6b:ff:c7:69:de:15:30:db:a8:7a:
cf:7f:f0:aa:c7:da:96:35:70:67:00:c4:92:25:f1:
e0:10:4c:c3:b9:2c:a2:e0:bb:0b:9f:b9:d1:2c:39:
4f:03:7e:54:d5:29:53:bb:d2:ff:dd:e2:20:c3:36:
62:53:1f:0e:b1:e0:8a:91:59:0c:7c:0f:93:27:c6:
c0:55:cd:69:41:ab:58:5f:3e:08:01:1e:a4:3d:ee:
32:f5:d9:20:e1:7f:f1:65:77:8c:60:09:74:8f:b2:
a3:11:46:c0:ae:9b:05:5d:83:dd:31:71:22:eb:d2:
8f:ad:78:8e:a8:11:33:9e:94:92:d1:0f:9d:bd:52:
cd:3a:66:b7:f0:e5:02:0f:33:7b:43:4f:92:89:24:
cc:1d:72:b9:99:9a:89:1b:30:2f:d1:63:1a:8a:88:
1e:36:38:35:ae:87:c4:1d:ec:b6:eb:1a:8d:51:e8:
16:c0:d4:13:ac:d4:b6:87:21:d0:e6:9a:bd:ad:40:
06:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:7F:02:96:50:A3:DB:D4:39:FA:EA:A7:AF:EA:5E:A7:CF:19:F2:B9
X509v3 Authority Key Identifier:
keyid:19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
da:a0:36:0a:e9:77:e7:af:38:27:83:62:ed:2e:90:58:3b:b7:
2c:ad:75:dd:03:a2:d5:cb:82:ec:e5:96:52:7a:3f:c7:ee:e7:
98:72:12:bf:51:f4:b8:26:38:42:e2:a0:9b:e3:cb:b7:17:97:
0c:20:d5:70:0d:d8:e3:2f:cd:45:6c:9a:22:ea:4a:a7:c9:99:
8f:87:3e:d6:ce:18:04:d2:0e:b0:d2:67:81:f4:51:46:da:c7:
9e:c4:ad:72:21:0b:d2:01:8e:40:2d:b9:ca:55:28:fb:91:dd:
cd:2c:a5:b2:ec:be:a0:ab:43:c9:f5:73:71:8a:33:d7:d3:a9:
98:37:9a:15:8c:84:69:d0:19:e0:e3:06:02:6d:28:91:2b:bc:
3e:25:a2:20:83:fc:a2:75:90:9d:0a:3b:0d:df:70:0a:b9:07:
32:d5:5f:eb:82:33:e7:01:26:01:16:42:08:7f:61:d3:1e:65:
af:84:9d:29:48:57:05:a9:99:a5:01:64:30:f5:6d:96:f5:ab:
df:71:bd:6e:62:22:fc:b2:f3:26:e7:b3:33:f2:7e:5d:4e:e9:
2c:e5:e8:71:99:1c:8c:d7:9a:4c:48:58:2a:40:34:fd:da:93:
28:bd:c2:8f:36:45:5b:ea:d6:b1:35:0a:b1:27:9e:8b:56:b6:
38:0e:0a:cc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTkxRDMxMTAvBgNVBAUTKDE5NTgxMzM4QTlENjNEOTVBOTZEMTcxMTYyM0UyRjY2
MEVCMEZCMTcwHhcNMjYwMzI1MDEzNTU5WhcNMjYwNDAxMDEzNTU5WjAYMRYwFAYD
VQQDEw02OWMzM2JmZi01MzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvW7z2vHNbHYGvA6uhurJwuh5nrQboy0BdI9DBPmg2lZdH1VQ4QezTbYoKCd+
v7ERwtT0fQ5Hx+8gBgknOBWd4Gv/x2neFTDbqHrPf/Cqx9qWNXBnAMSSJfHgEEzD
uSyi4LsLn7nRLDlPA35U1SlTu9L/3eIgwzZiUx8OseCKkVkMfA+TJ8bAVc1pQatY
Xz4IAR6kPe4y9dkg4X/xZXeMYAl0j7KjEUbArpsFXYPdMXEi69KPrXiOqBEznpSS
0Q+dvVLNOma38OUCDzN7Q0+SiSTMHXK5mZqJGzAv0WMaiogeNjg1rofEHey26xqN
UegWwNQTrNS2hyHQ5pq9rUAGHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNh/ApZQ
o9vUOfrqp6/qXqfPGfK5MB8GA1UdIwQYMBaAFBlYEzip1j2VqW0XEWI+L2YOsPsX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTFEMy82MjlFOEIyMDNC
MjMxMUVFQTQzQjAyMTlDNEY5QUUwMi9HVmdUT0tuV1BaV3BiUmNSWWo0dlpnNnct
eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL0dWZ1RPS25XUFpXcGJSY1JZajR2Wmc2dy14Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OTFEMy82MjlFOEIyMDNCMjMxMUVFQTQzQjAyMTlDNEY5QUUwMi9HVmdUT0tuV1Ba
V3BiUmNSWWo0dlpnNncteGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA2qA2Cul35684J4Ni7S6QWDu3LK113QOi1cuC7OWWUno/x+7nmHISv1H0uCY4
QuKgm+PLtxeXDCDVcA3Y4y/NRWyaIupKp8mZj4c+1s4YBNIOsNJngfRRRtrHnsSt
ciEL0gGOQC25ylUo+5HdzSylsuy+oKtDyfVzcYoz19OpmDeaFYyEadAZ4OMGAm0o
kSu8PiWiIIP8onWQnQo7Dd9wCrkHMtVf64Iz5wEmARZCCH9h0x5lr4SdKUhXBamZ
pQFkMPVtlvWr33G9bmIi/LLzJuezM/J+XU7pLOXocZkcjNeaTEhYKkA0/dqTKL3C
jzZFW+rWsTUKsSeei1a2OA4KzA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:37:05 2026 by rpki-client