
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft
File: GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft (raw, json)
Hash identifier: dKNO3QJwsHbK9ggdGFRNCRreCr1c4RvBqpgjzuH7FRc=
Subject key identifier: 4B:B6:13:59:C5:20:66:2D:BD:8E:07:21:A5:7A:C3:74:D6:30:CC:CE
Authority key identifier: 18:61:53:CB:98:88:38:A3:A6:D4:8C:F0:42:3C:5B:46:23:00:59:E8
Certificate issuer: /CN=A91AE69C/serialNumber=186153CB988838A3A6D48CF0423C5B46230059E8
Certificate serial: 030E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft
Manifest number: 0307
Signing time: Wed 25 Mar 2026 00:52:19 +0000
Manifest this update: Wed 25 Mar 2026 00:52:18 +0000
Manifest next update: Wed 01 Apr 2026 00:52:18 +0000
Files and hashes: 1: GGFTy5iIOKOm1IzwQjxbRiMAWeg.crl (hash: wFAT/6ZpEgOtg/5ATQ7+bauIgWM9wD9QIon8D87+BVg=)
2: DD1FEE48C77311EEA5076E2CC4F9AE02.roa (hash: /c+Xc/pq6gS3lH+dpF5Op6yyoSbbMrofTbdHTbTMtyY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.crl
rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:52:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 782 (0x30e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE69C, serialNumber=186153CB988838A3A6D48CF0423C5B46230059E8
Validity
Not Before: Mar 25 00:52:18 2026 GMT
Not After : Apr 1 00:52:18 2026 GMT
Subject: CN=69c331c3-8265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b2:d2:ad:2b:5e:d7:ca:3d:93:e3:27:6c:17:
84:45:bb:ba:a2:b7:73:23:17:70:99:50:74:85:67:
15:dc:9f:6c:f4:9a:e0:c8:64:df:90:df:55:ec:20:
c6:d3:27:f9:d0:40:38:81:69:90:f5:20:15:25:89:
d4:a9:87:51:e3:45:ee:bb:dd:f5:c9:cf:2a:45:5b:
5d:f9:77:18:20:41:2e:1a:9d:07:f9:cb:b5:82:9d:
88:e4:77:e1:8c:97:35:f8:aa:c1:d4:26:72:4f:04:
fb:66:05:01:34:49:1a:07:85:2d:c3:0a:f7:25:58:
06:b6:75:0f:a5:63:24:91:03:8e:45:d9:3a:f2:8c:
b2:d1:11:6c:22:20:ed:4f:58:fa:d1:49:0b:d0:56:
7a:44:ba:d3:d5:50:e6:a5:33:d0:e7:5b:78:93:d7:
56:3d:88:05:aa:b1:38:0c:93:e0:60:ac:93:fa:df:
8d:a3:16:ec:29:08:7c:90:87:34:40:b8:b5:32:e1:
57:fd:ed:42:44:06:60:3b:d8:07:ed:69:21:14:f1:
fd:ae:af:ec:38:26:b1:a2:d2:7f:9c:73:bc:ed:25:
bf:67:b1:94:7f:ac:b5:5d:09:fb:06:1e:c8:66:16:
5e:57:2b:2e:9a:d0:2d:0e:64:6b:18:ee:c9:2c:41:
64:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B6:13:59:C5:20:66:2D:BD:8E:07:21:A5:7A:C3:74:D6:30:CC:CE
X509v3 Authority Key Identifier:
keyid:18:61:53:CB:98:88:38:A3:A6:D4:8C:F0:42:3C:5B:46:23:00:59:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:13:ff:26:30:a9:1d:53:5f:3f:fb:e4:ae:32:fe:dd:e4:77:
b9:98:61:66:12:9b:51:60:d1:53:8d:87:a9:63:f8:ff:c1:86:
68:8b:46:72:39:0a:cb:06:8b:7d:3b:7e:e2:ce:aa:d1:12:c4:
4c:86:5e:de:4a:55:2f:e5:3f:30:b2:c5:5e:7f:30:eb:44:5b:
fc:f5:e3:99:24:8b:bb:5a:34:dc:4c:b0:dc:ab:f0:30:93:91:
48:11:a7:63:54:47:47:eb:75:62:07:fc:7b:e6:91:af:32:54:
10:ef:06:9d:8a:f6:c2:3b:a6:8d:e1:d0:a1:22:d2:69:c7:20:
fc:c9:83:37:86:c5:94:83:03:ff:3e:44:56:e3:e2:a9:10:1a:
1f:5e:cb:17:ae:54:30:0f:e9:58:00:c3:6d:41:e4:a1:c4:61:
85:df:eb:8f:b2:7b:c8:7e:49:82:25:0e:f7:90:70:52:6f:71:
95:4e:6d:f2:90:f2:a8:63:55:d2:6f:70:93:42:04:67:f4:80:
9f:87:62:75:3e:46:03:16:4f:6a:31:c7:78:11:90:7f:e1:33:
06:3c:6a:c0:6f:41:69:41:df:f8:19:ae:a5:e1:19:35:85:60:
2f:b1:5e:5d:96:e6:66:7a:59:ad:20:f0:01:6d:7f:2a:83:98:
d5:33:49:5a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAw4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUU2OUMxMTAvBgNVBAUTKDE4NjE1M0NCOTg4ODM4QTNBNkQ0OENGMDQyM0M1QjQ2
MjMwMDU5RTgwHhcNMjYwMzI1MDA1MjE4WhcNMjYwNDAxMDA1MjE4WjAYMRYwFAYD
VQQDEw02OWMzMzFjMy04MjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz7LSrSte18o9k+MnbBeERbu6ordzIxdwmVB0hWcV3J9s9JrgyGTfkN9V7CDG
0yf50EA4gWmQ9SAVJYnUqYdR40Xuu931yc8qRVtd+XcYIEEuGp0H+cu1gp2I5Hfh
jJc1+KrB1CZyTwT7ZgUBNEkaB4Utwwr3JVgGtnUPpWMkkQOORdk68oyy0RFsIiDt
T1j60UkL0FZ6RLrT1VDmpTPQ51t4k9dWPYgFqrE4DJPgYKyT+t+NoxbsKQh8kIc0
QLi1MuFX/e1CRAZgO9gH7WkhFPH9rq/sOCaxotJ/nHO87SW/Z7GUf6y1XQn7Bh7I
ZhZeVysumtAtDmRrGO7JLEFkWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEu2E1nF
IGYtvY4HIaV6w3TWMMzOMB8GA1UdIwQYMBaAFBhhU8uYiDijptSM8EI8W0YjAFno
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTY5Qy85RUIwNzk5ODEy
N0ExMUVEOTAyREZFMjdDNEY5QUUwMi9HR0ZUeTVpSU9LT20xSXp3UWp4YlJpTUFX
ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dHRlR5NWlJT0tPbTFJendRanhiUmlNQVdlZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RTY5Qy85RUIwNzk5ODEyN0ExMUVEOTAyREZFMjdDNEY5QUUwMi9HR0ZUeTVpSU9L
T20xSXp3UWp4YlJpTUFXZWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALhP/JjCpHVNfP/vkrjL+3eR3uZhhZhKbUWDRU42HqWP4/8GGaItGcjkKywaL
fTt+4s6q0RLETIZe3kpVL+U/MLLFXn8w60Rb/PXjmSSLu1o03Eyw3KvwMJORSBGn
Y1RHR+t1Ygf8e+aRrzJUEO8GnYr2wjumjeHQoSLSaccg/MmDN4bFlIMD/z5EVuPi
qRAaH17LF65UMA/pWADDbUHkocRhhd/rj7J7yH5JgiUO95BwUm9xlU5t8pDyqGNV
0m9wk0IEZ/SAn4didT5GAxZPajHHeBGQf+EzBjxqwG9BaUHf+BmupeEZNYVgL7Fe
XZbmZnpZrSDwAW1/KoOY1TNJWg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:32:51 2026 by rpki-client