
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft
File: GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft (raw, json)
Hash identifier: Pg967vjK3gUAVENRWAVOHf3DZtH1P0LzDaFAx6TLbvw=
Subject key identifier: C1:93:65:8B:78:81:2B:09:6A:00:E4:56:42:07:C7:3A:1C:84:32:65
Authority key identifier: 18:61:53:CB:98:88:38:A3:A6:D4:8C:F0:42:3C:5B:46:23:00:59:E8
Certificate issuer: /CN=A91AE69C/serialNumber=186153CB988838A3A6D48CF0423C5B46230059E8
Certificate serial: 0327
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft
Manifest number: 0320
Signing time: Wed 13 May 2026 01:16:27 +0000
Manifest this update: Wed 13 May 2026 01:16:26 +0000
Manifest next update: Wed 20 May 2026 01:16:26 +0000
Files and hashes: 1: GGFTy5iIOKOm1IzwQjxbRiMAWeg.crl (hash: 7dUPYaMxWkup/wpDJjcfvTCGjO38ryuBue0hCfkPf50=)
2: DD1FEE48C77311EEA5076E2CC4F9AE02.roa (hash: /c+Xc/pq6gS3lH+dpF5Op6yyoSbbMrofTbdHTbTMtyY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.crl
rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 807 (0x327)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE69C, serialNumber=186153CB988838A3A6D48CF0423C5B46230059E8
Validity
Not Before: May 13 01:16:26 2026 GMT
Not After : May 20 01:16:26 2026 GMT
Subject: CN=6a03d0eb-f572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:91:eb:a6:a2:3a:6b:20:0d:a3:ce:b3:36:af:
85:b1:b4:cd:e8:b6:f0:62:f3:41:d3:78:0b:c1:0b:
89:fd:ae:d3:33:f8:49:d3:e6:ba:ae:fd:73:da:85:
f3:9a:67:d0:76:71:48:48:fd:3e:0d:6f:2c:a5:95:
3d:03:c3:33:06:96:2f:da:4c:a9:59:2d:a5:c0:3d:
b3:2f:a2:f9:5e:da:36:cc:59:50:de:86:b9:ff:87:
b4:56:18:f7:21:1f:81:fc:52:01:93:17:b2:9e:b0:
86:9d:65:08:0f:34:5a:11:52:40:81:49:2a:c2:d0:
be:9f:b4:b0:70:aa:6a:da:a3:ef:f4:bc:df:ae:b7:
ca:5d:1d:68:48:06:a6:d4:b0:00:89:f7:f4:69:af:
e3:5d:b2:86:56:c7:65:a3:9b:a2:c3:01:3f:bb:5e:
fd:80:66:08:f6:93:06:0b:7f:e2:00:f3:3f:82:e6:
21:2b:20:cf:3d:e5:96:b6:de:ef:d6:e4:ff:b1:04:
25:33:2d:55:3a:34:e0:68:ae:7a:45:3f:5c:a7:43:
27:9c:90:aa:64:d3:dc:36:68:17:54:e9:f7:65:68:
eb:51:7a:fb:d3:d3:02:7d:85:53:19:3b:7c:af:65:
a6:28:2a:2a:20:d3:06:10:ea:63:4d:4d:17:b0:f2:
15:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:93:65:8B:78:81:2B:09:6A:00:E4:56:42:07:C7:3A:1C:84:32:65
X509v3 Authority Key Identifier:
keyid:18:61:53:CB:98:88:38:A3:A6:D4:8C:F0:42:3C:5B:46:23:00:59:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:09:a4:1a:bf:ba:89:de:2e:96:ad:0c:40:cb:6e:d3:5d:27:
eb:fe:c3:9e:10:65:8f:f4:f3:5b:f5:cd:a3:61:e7:a2:21:46:
9e:4e:58:e8:76:32:be:a8:8c:68:8d:af:e7:d0:7c:fe:37:0f:
2c:0e:52:64:76:a5:c9:14:54:76:b9:20:82:13:09:4f:1d:ee:
0e:60:fa:a1:c6:fc:f6:fb:76:e1:51:45:a7:5e:cc:eb:23:21:
26:a7:0b:dc:49:17:81:cd:97:f2:26:68:de:bf:3e:21:bd:33:
d2:2a:b1:20:39:52:f9:96:8a:a1:84:d2:65:dc:a8:70:13:74:
13:c3:a3:fb:08:6c:e3:85:82:cf:87:0c:be:f4:fc:f7:d1:89:
11:36:36:5c:86:e0:ec:fb:bb:59:3f:16:51:49:16:75:80:59:
a6:43:47:bb:24:f6:e5:9b:ea:56:3d:d8:3e:d6:fb:9f:04:53:
72:59:a9:d4:7c:a7:8e:88:cd:2b:52:ae:e6:8f:ed:48:53:4d:
cf:d9:c3:40:c1:ce:89:c2:3f:6a:84:e3:6d:de:08:2c:c4:18:
ad:54:dd:9f:3d:75:f4:3d:b9:4a:ee:26:41:07:1c:be:c6:62:
6c:c7:65:b4:7c:e0:34:16:ee:09:0f:89:3b:49:65:8a:85:78:
cf:3c:4a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:21:50 2026 by rpki-client