
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft
File: GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft (raw, json)
Hash identifier: CNPFO6+ucubpEpX66jg/J0VJG2l8h6/g9AfL9wSJ6jc=
Subject key identifier: 32:D6:DB:31:E6:11:B6:53:51:DD:BD:7C:0D:64:09:3A:57:7A:62:5A
Authority key identifier: 18:61:53:CB:98:88:38:A3:A6:D4:8C:F0:42:3C:5B:46:23:00:59:E8
Certificate issuer: /CN=A91AE69C/serialNumber=186153CB988838A3A6D48CF0423C5B46230059E8
Certificate serial: 0370
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft
Manifest number: 0368
Signing time: Sun 27 Sep 2026 00:55:42 +0000
Manifest this update: Sun 27 Sep 2026 00:55:42 +0000
Manifest next update: Sun 04 Oct 2026 00:55:42 +0000
Files and hashes: 1: GGFTy5iIOKOm1IzwQjxbRiMAWeg.crl (hash: ehdjWLnjPz9+HU2V9YdYrfphdbhNjOCmx6R60f1hV18=)
2: DD1FEE48C77311EEA5076E2CC4F9AE02.roa (hash: A1R3Y4X7LUU1B6vjhdMdznAPyuhYgB7EU9CPG7tpvR4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.crl
rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 00:55:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 880 (0x370)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE69C, serialNumber=186153CB988838A3A6D48CF0423C5B46230059E8
Validity
Not Before: Sep 27 00:55:42 2026 GMT
Not After : Oct 4 00:55:42 2026 GMT
Subject: CN=6ab8698e-7956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:4b:7a:34:02:95:a3:54:e4:a7:93:00:40:8c:
6e:13:ff:9f:3d:97:f6:60:ff:2d:60:1a:24:bb:61:
a3:3a:56:1f:45:a1:30:f6:2b:1d:d4:90:5e:44:f3:
8d:85:41:e1:88:21:37:9f:36:48:35:b7:ed:d3:a6:
a7:09:70:61:1a:48:32:72:3d:7f:8f:ae:06:07:f3:
a3:7d:be:cb:24:f0:48:16:e2:43:f2:e7:55:10:27:
b3:71:08:89:0c:c1:b2:c0:b2:3a:01:a6:3a:a6:4e:
35:89:6b:11:f5:38:01:8e:f5:60:1a:6c:f5:c3:cf:
45:ab:c5:31:fa:cb:c7:b4:ef:15:9d:c8:51:12:1c:
34:70:b4:f3:cd:18:93:d9:09:ed:2f:cf:7c:79:5f:
59:29:d1:fb:b3:b2:26:c1:5a:43:8c:36:ca:63:71:
46:da:43:46:d9:25:0a:33:ea:52:2d:be:ef:ec:b8:
71:eb:a9:28:70:ab:4b:e5:c3:3b:ad:b9:4e:8d:d8:
3e:27:e8:95:42:1f:5d:20:8a:55:94:21:dd:7e:b8:
e9:fc:94:bd:5f:16:bf:79:56:96:47:5d:fc:30:4c:
6f:c3:57:e7:13:c7:33:ab:eb:bf:d2:86:15:0f:4a:
74:b1:b1:55:fa:9e:e4:05:59:43:2f:15:00:f4:36:
4b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D6:DB:31:E6:11:B6:53:51:DD:BD:7C:0D:64:09:3A:57:7A:62:5A
X509v3 Authority Key Identifier:
keyid:18:61:53:CB:98:88:38:A3:A6:D4:8C:F0:42:3C:5B:46:23:00:59:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:2e:88:86:1a:65:19:f2:19:52:38:96:0b:6f:da:c1:8d:4b:
10:d7:5c:c8:d6:6d:6b:f3:fc:be:2a:3e:ca:e3:5a:56:52:c0:
c3:28:04:bd:e5:b0:a3:81:03:33:4a:3b:29:65:91:7d:cb:b2:
dd:8b:f9:3c:83:fc:ad:de:ac:b4:54:0e:63:6c:07:14:5e:96:
15:e6:a7:fb:6e:e2:87:08:be:9f:27:48:3f:56:5b:21:d3:3b:
05:4f:08:63:cf:7c:ef:4d:3a:26:fa:47:5f:5f:ca:51:5b:13:
31:7d:1a:df:46:c1:85:d5:cc:a1:07:8f:c0:35:12:61:8d:87:
6e:a7:d5:a6:95:28:5b:f3:af:5b:02:67:7a:fc:be:99:32:2d:
dd:6f:a5:11:b4:4e:d7:22:97:66:a2:fc:b8:20:91:e0:1e:73:
f4:a6:8e:d7:0a:b0:75:51:91:85:d9:4c:42:22:16:11:d2:87:
d0:55:4a:a1:a3:8e:f3:15:96:63:f1:47:64:59:b7:08:3a:93:
82:60:b3:d5:a9:3d:61:b1:33:4c:1d:e3:d7:7e:9f:35:8b:80:
d1:9c:5e:3e:86:77:9f:fe:60:61:ae:d9:85:72:ed:99:91:ca:
26:d7:e3:2a:03:17:a8:99:f5:b8:d4:e9:99:25:95:96:25:80:
4c:22:d5:c6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA3AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUU2OUMxMTAvBgNVBAUTKDE4NjE1M0NCOTg4ODM4QTNBNkQ0OENGMDQyM0M1QjQ2
MjMwMDU5RTgwHhcNMjYwOTI3MDA1NTQyWhcNMjYxMDA0MDA1NTQyWjAYMRYwFAYD
VQQDEw02YWI4Njk4ZS03OTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAg0t6NAKVo1Tkp5MAQIxuE/+fPZf2YP8tYBoku2GjOlYfRaEw9isd1JBeRPON
hUHhiCE3nzZINbft06anCXBhGkgycj1/j64GB/Ojfb7LJPBIFuJD8udVECezcQiJ
DMGywLI6AaY6pk41iWsR9TgBjvVgGmz1w89Fq8Ux+svHtO8VnchREhw0cLTzzRiT
2QntL898eV9ZKdH7s7ImwVpDjDbKY3FG2kNG2SUKM+pSLb7v7Lhx66kocKtL5cM7
rblOjdg+J+iVQh9dIIpVlCHdfrjp/JS9Xxa/eVaWR138MExvw1fnE8czq+u/0oYV
D0p0sbFV+p7kBVlDLxUA9DZLGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDLW2zHm
EbZTUd29fA1kCTpXemJaMB8GA1UdIwQYMBaAFBhhU8uYiDijptSM8EI8W0YjAFno
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTY5Qy85RUIwNzk5ODEy
N0ExMUVEOTAyREZFMjdDNEY5QUUwMi9HR0ZUeTVpSU9LT20xSXp3UWp4YlJpTUFX
ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dHRlR5NWlJT0tPbTFJendRanhiUmlNQVdlZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RTY5Qy85RUIwNzk5ODEyN0ExMUVEOTAyREZFMjdDNEY5QUUwMi9HR0ZUeTVpSU9L
T20xSXp3UWp4YlJpTUFXZWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfS6IhhplGfIZUjiWC2/awY1LENdcyNZta/P8vio+yuNaVlLAwygEveWwo4ED
M0o7KWWRfcuy3Yv5PIP8rd6stFQOY2wHFF6WFean+27ihwi+nydIP1ZbIdM7BU8I
Y8987006JvpHX1/KUVsTMX0a30bBhdXMoQePwDUSYY2HbqfVppUoW/OvWwJnevy+
mTIt3W+lEbRO1yKXZqL8uCCR4B5z9KaO1wqwdVGRhdlMQiIWEdKH0FVKoaOO8xWW
Y/FHZFm3CDqTgmCz1ak9YbEzTB3j136fNYuA0ZxePoZ3n/5gYa7ZhXLtmZHKJtfj
KgMXqJn1uNTpmSWVliWATCLVxg==
-----END CERTIFICATE-----
Generated at Sun Sep 27 12:18:40 2026 by rpki-client