
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft
File: GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft (raw, json)
Hash identifier: o50tSJKDxHjoO5jaApLJQHs6B5VK9sh5lvT71V6GOAs=
Subject key identifier: C2:AF:E8:4B:2B:EA:F5:D3:2C:C7:B0:17:9C:95:C6:72:6F:BA:39:EA
Authority key identifier: 18:39:88:FC:0D:EE:9D:BB:81:11:5E:82:BF:DC:95:41:25:61:41:3C
Certificate issuer: /CN=A91A09DE/serialNumber=183988FC0DEE9DBB81115E82BFDC95412561413C
Certificate serial: 0523
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDmI_A3unbuBEV6Cv9yVQSVhQTw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft
Manifest number: 051C
Signing time: Thu 23 Jul 2026 00:24:55 +0000
Manifest this update: Thu 23 Jul 2026 00:24:55 +0000
Manifest next update: Thu 30 Jul 2026 00:24:55 +0000
Files and hashes: 1: GDmI_A3unbuBEV6Cv9yVQSVhQTw.crl (hash: 35kDMba9MkJGs0SwkfeTwytniDnJt7TOkCFekw5dUWc=)
2: C7EAFB5AB62011EC9060CD0FC4F9AE02.roa (hash: P0IxtyxoZ+ByuxHLmgujAknhA1FCwYut3K8P07BZLQY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.crl
rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDmI_A3unbuBEV6Cv9yVQSVhQTw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:24:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1315 (0x523)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A09DE, serialNumber=183988FC0DEE9DBB81115E82BFDC95412561413C
Validity
Not Before: Jul 23 00:24:55 2026 GMT
Not After : Jul 30 00:24:55 2026 GMT
Subject: CN=6a615f57-e0a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:44:c1:79:ea:1d:7a:bd:94:e6:8d:1c:4c:fe:
1a:4a:b8:01:c4:2d:57:3f:1d:2a:6a:1d:b9:5e:54:
9b:57:ab:97:9a:7e:f1:ce:fb:2a:f1:09:e7:16:81:
5e:bc:b0:9d:e4:40:29:3f:b7:1d:3a:d9:2a:e5:54:
0a:f3:31:7f:59:a1:7e:74:1f:23:f5:21:f3:98:9b:
05:e3:58:33:09:fd:3e:b9:ae:e8:2e:3a:9a:53:22:
99:61:8c:c1:61:a1:3d:90:e2:fe:fa:7a:83:a2:84:
9d:1c:4c:04:f1:bf:2d:a4:6b:8d:ef:82:76:10:d6:
06:9c:54:fc:e4:cb:cd:d5:15:87:8b:83:04:0d:a0:
17:7c:e3:f0:1a:be:6a:4d:71:bd:da:ce:75:5b:08:
6c:dc:0b:a3:b1:68:2b:34:66:18:9e:c7:d0:ab:51:
08:77:62:48:7b:87:b1:c8:02:1c:8c:93:f4:ca:36:
da:76:7b:2f:aa:38:66:a2:16:2f:e8:b2:b0:ff:69:
66:3e:e0:15:a1:1e:e9:7c:ff:aa:65:28:d5:d8:ed:
60:be:80:9d:ec:63:7f:5c:fe:1d:bf:56:fa:62:41:
56:ee:d1:61:ef:ca:8e:82:68:d2:77:5a:90:01:ef:
4f:5e:a7:ef:fb:af:fb:d6:56:b1:6e:26:08:b6:10:
ca:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:AF:E8:4B:2B:EA:F5:D3:2C:C7:B0:17:9C:95:C6:72:6F:BA:39:EA
X509v3 Authority Key Identifier:
keyid:18:39:88:FC:0D:EE:9D:BB:81:11:5E:82:BF:DC:95:41:25:61:41:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDmI_A3unbuBEV6Cv9yVQSVhQTw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:1d:bb:a1:7b:7d:68:1f:cb:93:45:5b:fb:64:b5:0b:ff:52:
17:29:9c:d3:9c:65:4f:80:40:d3:d0:2b:16:07:21:99:30:c8:
1b:8d:ca:77:68:85:63:58:06:6a:b2:fe:4e:95:20:83:40:fc:
9f:e6:1b:4c:53:c1:6a:93:dd:5b:31:38:e1:ed:b0:c1:cd:a2:
53:fe:44:83:94:2d:ca:81:9b:72:0c:74:41:09:64:d6:7d:38:
b9:bb:9b:8a:e2:b1:7c:c0:da:b5:71:07:2c:03:3e:f6:64:26:
ab:ae:84:cf:3a:77:ef:7c:23:91:56:3c:7e:01:c9:48:b3:a4:
37:a3:f8:c3:50:9d:70:3e:66:f4:82:7c:71:63:f0:74:e1:09:
f4:db:f5:6b:70:f7:37:fa:f9:ae:70:c5:54:3d:90:c5:f9:f8:
2f:fc:4a:21:cf:84:c2:fa:6d:63:49:d6:fe:21:9a:d0:5b:41:
85:93:8b:65:db:fb:ef:a5:29:0a:a6:b3:73:fd:a8:4d:2e:31:
e2:a0:0a:76:6d:c2:4c:0d:2c:f3:d7:8d:39:fe:bb:19:8a:1d:
71:78:44:5f:42:71:2b:b9:ce:91:6f:be:b1:d2:53:f4:c6:75:
be:13:84:dd:a3:9e:eb:e7:08:87:47:57:61:88:48:b5:46:92:
fc:93:00:0b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBSMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTA5REUxMTAvBgNVBAUTKDE4Mzk4OEZDMERFRTlEQkI4MTExNUU4MkJGREM5NTQx
MjU2MTQxM0MwHhcNMjYwNzIzMDAyNDU1WhcNMjYwNzMwMDAyNDU1WjAYMRYwFAYD
VQQDEw02YTYxNWY1Ny1lMGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA00TBeeoder2U5o0cTP4aSrgBxC1XPx0qah25XlSbV6uXmn7xzvsq8QnnFoFe
vLCd5EApP7cdOtkq5VQK8zF/WaF+dB8j9SHzmJsF41gzCf0+ua7oLjqaUyKZYYzB
YaE9kOL++nqDooSdHEwE8b8tpGuN74J2ENYGnFT85MvN1RWHi4MEDaAXfOPwGr5q
TXG92s51Wwhs3AujsWgrNGYYnsfQq1EId2JIe4exyAIcjJP0yjbadnsvqjhmohYv
6LKw/2lmPuAVoR7pfP+qZSjV2O1gvoCd7GN/XP4dv1b6YkFW7tFh78qOgmjSd1qQ
Ae9PXqfv+6/71laxbiYIthDKnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMKv6Esr
6vXTLMewF5yVxnJvujnqMB8GA1UdIwQYMBaAFBg5iPwN7p27gRFegr/clUElYUE8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDlERS84QjMyMDc1QzU5
N0UxMUVDOUE2NzNEMERDNEY5QUUwMi9HRG1JX0EzdW5idUJFVjZDdjl5VlFTVmhR
VHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dEbUlfQTN1bmJ1QkVWNkN2OXlWUVNWaFFUdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MDlERS84QjMyMDc1QzU5N0UxMUVDOUE2NzNEMERDNEY5QUUwMi9HRG1JX0EzdW5i
dUJFVjZDdjl5VlFTVmhRVHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvx27oXt9aB/Lk0Vb+2S1C/9SFymc05xlT4BA09ArFgchmTDIG43Kd2iFY1gG
arL+TpUgg0D8n+YbTFPBapPdWzE44e2wwc2iU/5Eg5QtyoGbcgx0QQlk1n04ubub
iuKxfMDatXEHLAM+9mQmq66Ezzp373wjkVY8fgHJSLOkN6P4w1CdcD5m9IJ8cWPw
dOEJ9Nv1a3D3N/r5rnDFVD2Qxfn4L/xKIc+EwvptY0nW/iGa0FtBhZOLZdv776Up
Cqazc/2oTS4x4qAKdm3CTA0s89eNOf67GYodcXhEX0JxK7nOkW++sdJT9MZ1vhOE
3aOe6+cIh0dXYYhItUaS/JMACw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:03:59 2026 by rpki-client