
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft
File: GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft (raw, json)
Hash identifier: XBpftXO3f5C7bnbUS5H8yFCmGit0ZaUjLa9ZVxKiXiE=
Subject key identifier: 1B:12:2E:AD:1B:39:A5:9E:BD:A7:96:A6:CD:20:FF:6E:F7:B3:F1:EC
Authority key identifier: 19:9D:4B:E0:60:8A:56:F5:04:80:C0:AD:26:45:DA:D7:B6:90:02:59
Certificate issuer: /CN=A91A470C/serialNumber=199D4BE0608A56F50480C0AD2645DAD7B6900259
Certificate serial: 6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GZ1L4GCKVvUEgMCtJkXa17aQAlk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft
Manifest number: 67
Signing time: Mon 11 May 2026 08:15:56 +0000
Manifest this update: Mon 11 May 2026 08:15:55 +0000
Manifest next update: Mon 18 May 2026 08:15:55 +0000
Files and hashes: 1: GZ1L4GCKVvUEgMCtJkXa17aQAlk.crl (hash: EjGPm8/D66TsxjEswRrkgpd/CjYQV9x42mZy86AydNs=)
2: 7B31D5E4CD0B11F0A1E66D5FC4F9AE02.roa (hash: NnPs85doUGI8wBjuyfyV3CMN9xCSIH8SHzO99MPJ70I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.crl
rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GZ1L4GCKVvUEgMCtJkXa17aQAlk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:15:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108 (0x6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A470C, serialNumber=199D4BE0608A56F50480C0AD2645DAD7B6900259
Validity
Not Before: May 11 08:15:55 2026 GMT
Not After : May 18 08:15:55 2026 GMT
Subject: CN=6a01903c-131b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:76:88:62:de:d0:da:5f:af:c3:dd:d8:35:2f:
0d:33:90:18:b0:10:37:54:cd:a9:9e:1a:db:3a:44:
01:6d:db:99:aa:b6:e3:3f:83:98:96:4b:c3:9c:c0:
82:52:f3:43:55:41:9b:92:f4:6a:6e:03:96:c2:59:
9b:96:38:9b:0b:34:80:a1:dc:f2:cf:b9:3c:f2:cf:
d6:f1:a4:78:6a:21:ef:14:5e:60:4b:97:8c:10:31:
fb:2a:99:96:84:bc:29:ee:00:87:16:ff:33:36:ee:
23:ca:7b:4f:dc:f5:fc:60:88:73:32:df:b0:4b:f5:
c7:e8:bd:d0:2d:1c:25:1e:91:80:78:38:0a:ca:a2:
6c:17:2b:db:75:e7:06:02:31:f5:a3:ec:d4:ca:5d:
3b:ec:ff:1a:64:1f:b9:c3:5b:97:ad:c5:55:fc:44:
7d:53:9d:94:ca:87:b3:2f:c6:b1:ad:8e:fe:d9:6a:
6a:39:3a:f4:e9:76:6d:5d:d7:a3:a8:12:58:78:fe:
c9:bd:17:d6:8d:d5:9a:4b:91:18:7d:d1:c6:42:06:
5b:68:e7:54:8a:43:8e:5b:d1:9f:af:4a:82:20:59:
b3:5f:cb:7b:a3:ae:f2:5c:0a:26:0f:fc:96:cb:fd:
91:c6:5b:a5:80:1a:5b:12:35:87:38:61:2f:27:28:
6a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:12:2E:AD:1B:39:A5:9E:BD:A7:96:A6:CD:20:FF:6E:F7:B3:F1:EC
X509v3 Authority Key Identifier:
keyid:19:9D:4B:E0:60:8A:56:F5:04:80:C0:AD:26:45:DA:D7:B6:90:02:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GZ1L4GCKVvUEgMCtJkXa17aQAlk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:6c:32:8c:96:ee:cf:82:ed:18:39:0d:ea:f5:b0:08:58:ec:
3e:dd:1f:86:68:9e:46:ae:98:31:d4:c9:a8:d9:8e:73:6a:ec:
2d:8d:f9:83:e6:81:a9:e3:7a:2b:f1:69:e0:4f:e9:0d:aa:4c:
93:68:bc:e7:8c:24:d3:bf:47:e9:b8:67:46:e6:97:c2:1f:1f:
f1:14:b8:30:fd:8b:97:e0:a5:e2:3f:9b:02:cf:dd:9a:df:55:
c2:6d:a2:1e:92:8a:a2:36:9b:62:ed:5d:bc:dc:c7:96:9c:b4:
c3:b2:82:c4:86:e5:4a:4f:34:71:63:82:0e:6c:70:30:da:88:
ad:f9:c2:15:d0:94:4b:39:d1:2a:fb:75:cb:0c:4f:e9:6a:2c:
87:64:e7:d8:bb:79:35:ab:29:c6:3c:27:6a:9b:ee:13:cb:24:
86:c8:48:1f:82:e6:47:c4:82:83:79:0b:86:08:58:57:e3:5d:
94:bd:d1:32:1c:eb:81:f4:28:97:f2:78:b9:a9:4a:70:80:eb:
69:db:4b:ea:5c:76:36:bc:64:22:5d:a7:c3:d0:71:22:d3:a9:
63:77:25:ed:28:e3:13:d8:2d:ca:39:ab:97:29:6a:16:69:70:
43:d7:2d:72:f8:65:6c:44:8a:a3:5a:4d:7f:a8:de:0a:69:7c:
46:7e:3c:97
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
NDcwQzExMC8GA1UEBRMoMTk5RDRCRTA2MDhBNTZGNTA0ODBDMEFEMjY0NURBRDdC
NjkwMDI1OTAeFw0yNjA1MTEwODE1NTVaFw0yNjA1MTgwODE1NTVaMBgxFjAUBgNV
BAMTDTZhMDE5MDNjLTEzMWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCgdohi3tDaX6/D3dg1Lw0zkBiwEDdUzameGts6RAFt25mqtuM/g5iWS8OcwIJS
80NVQZuS9GpuA5bCWZuWOJsLNICh3PLPuTzyz9bxpHhqIe8UXmBLl4wQMfsqmZaE
vCnuAIcW/zM27iPKe0/c9fxgiHMy37BL9cfovdAtHCUekYB4OArKomwXK9t15wYC
MfWj7NTKXTvs/xpkH7nDW5etxVX8RH1TnZTKh7MvxrGtjv7Zamo5OvTpdm1d16Oo
Elh4/sm9F9aN1ZpLkRh90cZCBlto51SKQ45b0Z+vSoIgWbNfy3ujrvJcCiYP/JbL
/ZHGW6WAGlsSNYc4YS8nKGplAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUGxIurRs5
pZ69p5amzSD/bvez8ewwHwYDVR0jBBgwFoAUGZ1L4GCKVvUEgMCtJkXa17aQAlkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0NzBDL0FDNEQwQUI0QzY4
OTExRjA4RDJCRkUwQUM0RjlBRTAyL0daMUw0R0NLVnZVRWdNQ3RKa1hhMTdhUUFs
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvR1oxTDRHQ0tWdlVFZ01DdEprWGExN2FRQWxrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0
NzBDL0FDNEQwQUI0QzY4OTExRjA4RDJCRkUwQUM0RjlBRTAyL0daMUw0R0NLVnZV
RWdNQ3RKa1hhMTdhUUFsay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCGbDKMlu7Pgu0YOQ3q9bAIWOw+3R+GaJ5Grpgx1Mmo2Y5zauwtjfmD5oGp43or
8WngT+kNqkyTaLznjCTTv0fpuGdG5pfCHx/xFLgw/YuX4KXiP5sCz92a31XCbaIe
koqiNpti7V283MeWnLTDsoLEhuVKTzRxY4IObHAw2oit+cIV0JRLOdEq+3XLDE/p
aiyHZOfYu3k1qynGPCdqm+4TyySGyEgfguZHxIKDeQuGCFhX412UvdEyHOuB9CiX
8ni5qUpwgOtp20vqXHY2vGQiXafD0HEi06ljdyXtKOMT2C3KOauXKWoWaXBD1y1y
+GVsRIqjWk1/qN4KaXxGfjyX
-----END CERTIFICATE-----
Generated at Wed May 13 01:40:10 2026 by rpki-client