
$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft
File: GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft (raw, json)
Hash identifier: vU2Wcht+9ZkAGa3jRhpwVi+nfNpgu2E4AVBt9DV0w7Y=
Subject key identifier: 05:4D:E8:0A:EE:43:8F:AE:3D:9C:6C:23:B6:0D:F4:B5:E6:2B:D3:7C
Authority key identifier: 19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17
Certificate issuer: /CN=A91991D3/serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17
Certificate serial: 028A
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft
Manifest number: 0256
Signing time: Thu 23 Jul 2026 02:44:59 +0000
Manifest this update: Thu 23 Jul 2026 02:44:58 +0000
Manifest next update: Thu 30 Jul 2026 02:44:58 +0000
Files and hashes: 1: GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl (hash: ope4y0zaM+n6yBZ9kkc7YD1/Y3d3YuBbYWGQHCSDiKE=)
2: 6E1C49FA031811F1BA97C916183D8C67.roa (hash: lJOk2wev4MkzbOS+niqS+uVfAej8rZrkP6By/CI08sY=)
3: 12D4E3D41AA411F0A196BA66C4F9AE02.roa (hash: Wb9fqxh/2GhJbzzPZAroheRX0Q4IRD6pGw48st/qKjM=)
4: 96FAA6BA2DBF11F1A3BE1D0DAB833773.roa (hash: e8yxWxSmmRPk+ltdy8gP6pzlZlCCw4QZs3be9NGpjEQ=)
5: 926A40AC205E11F0A7552513C4F9AE02.roa (hash: YKiXx5HCj2zwN3jfK9q5GakLYQcoFw4kl98GWbjUs9o=)
6: 1F388278205F11F0A895DE1EC4F9AE02.roa (hash: 3fG2xSQYFFInAFhuIsOyJ8jvQ4PTgeRTg6IF8vTLUVw=)
7: F250438EF44011F0A1A516A45F6F56BC.roa (hash: 39UXrQgnsrOoQwxWVU9MQlKYuieI5NM5dujARlQugR8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl
rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:44:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 650 (0x28a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91991D3, serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17
Validity
Not Before: Jul 23 02:44:58 2026 GMT
Not After : Jul 30 02:44:58 2026 GMT
Subject: CN=6a61802b-addb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:35:43:e0:cc:cf:5c:1b:33:fd:6c:e6:e2:a2:
21:6c:dc:2a:9d:74:a6:54:28:ae:e5:93:ab:fd:d0:
16:ac:d3:5b:33:75:d2:d5:b6:31:40:74:7e:03:ff:
62:33:d3:f8:45:0e:51:db:d2:a3:65:aa:70:9a:2f:
9d:98:31:0e:5a:1e:af:aa:1e:20:b1:bb:6a:c9:f6:
35:28:a0:92:00:3a:d9:b1:57:f4:43:9d:5f:42:29:
b2:4a:ae:69:08:62:6e:45:83:a7:73:bf:a4:90:da:
12:3d:25:a1:a5:91:cd:6e:f4:50:5c:d1:54:0e:9f:
ab:a7:33:2e:f3:09:09:94:ef:aa:94:04:7a:b2:de:
62:aa:be:ca:90:59:3a:8e:c3:0e:37:a2:a4:2c:c7:
1f:e7:0d:e6:f3:e9:59:49:54:63:dd:35:e0:ab:8e:
c1:dc:27:01:b9:be:e0:77:a6:02:ed:fa:9c:69:7c:
82:87:52:06:5d:19:b9:3e:de:da:86:f4:88:b6:e3:
45:5d:82:58:88:ed:53:66:04:36:ee:40:64:70:af:
ee:87:fc:bb:df:54:06:97:9f:5f:54:55:04:c0:c6:
7e:97:35:b7:d2:c5:18:cf:bf:c6:25:06:fe:62:0c:
61:d8:41:48:ce:ba:7c:3a:32:d8:7c:2b:af:d4:15:
57:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:4D:E8:0A:EE:43:8F:AE:3D:9C:6C:23:B6:0D:F4:B5:E6:2B:D3:7C
X509v3 Authority Key Identifier:
keyid:19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:14:ca:9a:50:c9:67:30:ae:1b:47:1a:9b:4e:77:1d:66:e9:
21:20:75:0f:b6:c4:78:65:a4:61:8a:c2:5b:24:bc:72:af:cf:
cc:b7:1b:9b:42:9c:49:7b:af:99:d9:ff:0c:e2:b2:16:99:2f:
e8:ee:04:15:cf:95:54:38:f9:f5:82:28:7e:03:dd:1e:17:05:
b1:71:0b:12:4c:8a:5f:7b:7f:63:7a:56:fe:72:4e:d8:af:53:
fa:de:a2:e0:3c:91:96:63:88:54:35:3a:0c:f5:0e:52:f5:e3:
0d:f6:33:a0:3b:cf:82:1b:bf:10:7d:10:70:08:62:05:53:a4:
7c:97:a8:07:de:76:2e:ef:a9:39:58:7e:8b:38:ce:71:df:ce:
5a:d1:6e:1d:6b:87:67:7e:a8:a8:16:9b:41:d1:6d:89:ba:e6:
46:cb:dc:2c:6b:35:d3:d6:26:7d:77:11:e5:a3:da:a5:73:ca:
d5:bd:8c:3c:e3:44:4b:b9:21:16:8c:4f:a7:37:fe:fd:38:29:
51:e8:8f:a9:c0:23:ee:e7:53:53:5e:c1:62:00:d2:fa:37:48:
ad:7f:ed:c2:aa:00:4f:98:c1:d4:4c:bc:02:dd:a3:98:81:44:
ec:33:4a:36:20:24:37:6c:4d:63:25:ff:b5:13:d3:ff:de:86:
72:9a:d4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:19:47 2026 by rpki-client