
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft
File: GpfC9HEfe8gC4misZvEQhivleIg.mft (raw, json)
Hash identifier: 3HR6p70DEoU5vhWp2DfVbPdD6UpGGetmKrXXWhMnpII=
Subject key identifier: 71:E0:8A:4B:9C:5A:AC:F1:7E:3B:5B:21:75:2A:A9:21:14:8D:88:EA
Authority key identifier: 1A:97:C2:F4:71:1F:7B:C8:02:E2:68:AC:66:F1:10:86:2B:E5:78:88
Certificate issuer: /CN=A91C2663/serialNumber=1A97C2F4711F7BC802E268AC66F110862BE57888
Certificate serial: 23ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft
Manifest number: 238C
Signing time: Wed 22 Jul 2026 15:53:49 +0000
Manifest this update: Wed 22 Jul 2026 15:53:49 +0000
Manifest next update: Wed 29 Jul 2026 15:53:49 +0000
Files and hashes: 1: GpfC9HEfe8gC4misZvEQhivleIg.crl (hash: dLoGShWm0QvkuBbNfDcECmbGaTQyuR/9jURsUpVfmYY=)
2: 07412A002D3111F1B77CD687BC833773.roa (hash: m3KakV6D8uqf1vPRe2G0m6SVTDUuzIzt+KLbrHZc+PI=)
3: 13DD1B662D3111F180CCA088BC833773.roa (hash: R7dTMiB8fLcK528K7ntTaoxEftrwMiKxX3YP8FhMfmA=)
4: 05596FAEBA1811F080138957C4F9AE02.roa (hash: tyGMd+HN3XNyreUh3joDHlUhGigz8P1uPZWOL8YggfQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.crl
rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:53:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9197 (0x23ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2663, serialNumber=1A97C2F4711F7BC802E268AC66F110862BE57888
Validity
Not Before: Jul 22 15:53:49 2026 GMT
Not After : Jul 29 15:53:49 2026 GMT
Subject: CN=6a60e78d-e9b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:bc:ed:15:91:ed:b9:64:0a:40:af:b2:8c:d8:
75:a4:ba:1f:a0:91:f2:d4:67:8e:78:b7:8f:04:43:
07:b5:c3:cc:ca:1a:92:ad:86:a5:50:b1:93:a7:54:
d2:b0:58:1a:e5:99:46:d2:43:ac:64:00:80:54:00:
c8:2b:52:0e:7b:00:8c:4a:22:9a:d2:82:85:df:69:
5d:a6:18:3a:3d:17:08:67:f3:36:0e:c4:6b:91:c8:
c1:db:c0:f7:29:48:9d:bb:1f:98:42:46:98:37:79:
13:2c:20:fa:54:9c:1b:80:47:c5:26:f0:1c:e8:8f:
77:01:1d:13:2d:74:f2:e8:13:fa:de:1e:58:39:40:
16:ab:86:b8:a9:4a:41:75:22:5f:6e:f8:f7:52:7e:
e4:d5:e3:7f:ab:38:b4:54:79:f4:84:49:4b:1e:ea:
51:72:ed:53:0f:a4:92:cd:0a:d2:23:8d:e9:c1:62:
79:82:5f:ea:d4:7b:26:ac:d6:98:64:4e:47:03:f4:
38:d1:42:a4:a6:4b:2c:cf:61:9d:d6:74:0b:c0:e7:
b5:c8:a7:27:f9:db:b3:75:5c:78:e4:04:8a:ae:53:
4a:8e:bd:f9:76:61:ce:4b:55:7b:cb:dc:6e:3f:ff:
db:88:aa:8d:6a:f0:a8:b6:8e:7a:b1:51:95:55:a1:
a4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E0:8A:4B:9C:5A:AC:F1:7E:3B:5B:21:75:2A:A9:21:14:8D:88:EA
X509v3 Authority Key Identifier:
keyid:1A:97:C2:F4:71:1F:7B:C8:02:E2:68:AC:66:F1:10:86:2B:E5:78:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:60:ec:e4:c3:bd:d8:aa:81:16:c0:51:22:71:a4:af:c1:5b:
0e:e2:2e:81:ea:c2:d4:1a:f9:95:2b:76:61:10:6b:32:36:08:
61:ad:18:a5:81:52:11:a5:57:bd:46:0b:9c:bb:61:0a:05:e0:
a4:50:97:4c:2d:b1:1f:31:98:5d:43:08:9d:2d:4a:0c:c9:8d:
49:4b:48:4c:89:2a:87:43:33:8d:2f:48:76:40:36:f6:61:51:
2f:13:e8:60:10:7b:d1:d1:3c:5c:1f:7a:5f:07:0d:3e:c9:80:
10:7b:f9:36:e0:94:fd:3c:da:dc:d9:18:66:fd:8c:84:58:aa:
a3:2e:62:d4:e7:31:4b:f4:57:fe:97:74:74:ff:b9:98:81:7b:
0c:2d:52:46:ab:ad:aa:22:d6:ea:36:11:52:dd:04:b2:15:49:
8b:67:46:7a:fc:e6:a7:8c:c6:52:5f:af:65:aa:8c:38:b7:94:
2f:0c:2e:02:8b:4f:b0:85:9f:03:06:cc:fa:44:9f:fa:59:60:
d4:fb:10:62:b0:dd:29:d1:2d:1a:e3:47:2f:1f:e0:23:f9:23:
d1:4b:7d:fa:d6:1e:60:00:93:ec:27:a1:3d:40:2b:a5:ae:74:
a5:7d:ca:99:92:9c:60:37:f0:53:49:c4:b0:96:61:73:f8:a8:
d4:2a:b3:60
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICI+0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzI2NjMxMTAvBgNVBAUTKDFBOTdDMkY0NzExRjdCQzgwMkUyNjhBQzY2RjExMDg2
MkJFNTc4ODgwHhcNMjYwNzIyMTU1MzQ5WhcNMjYwNzI5MTU1MzQ5WjAYMRYwFAYD
VQQDEw02YTYwZTc4ZC1lOWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkLztFZHtuWQKQK+yjNh1pLofoJHy1GeOeLePBEMHtcPMyhqSrYalULGTp1TS
sFga5ZlG0kOsZACAVADIK1IOewCMSiKa0oKF32ldphg6PRcIZ/M2DsRrkcjB28D3
KUidux+YQkaYN3kTLCD6VJwbgEfFJvAc6I93AR0TLXTy6BP63h5YOUAWq4a4qUpB
dSJfbvj3Un7k1eN/qzi0VHn0hElLHupRcu1TD6SSzQrSI43pwWJ5gl/q1HsmrNaY
ZE5HA/Q40UKkpkssz2Gd1nQLwOe1yKcn+duzdVx45ASKrlNKjr35dmHOS1V7y9xu
P//biKqNavCoto56sVGVVaGkSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHHgikuc
WqzxfjtbIXUqqSEUjYjqMB8GA1UdIwQYMBaAFBqXwvRxH3vIAuJorGbxEIYr5XiI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjY2My9COEFFRjEzOEE5
NEMxMUU1ODI5MUNBNjdDNEY5QUUwMi9HcGZDOUhFZmU4Z0M0bWlzWnZFUWhpdmxl
SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dwZkM5SEVmZThnQzRtaXNadkVRaGl2bGVJZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MjY2My9COEFFRjEzOEE5NEMxMUU1ODI5MUNBNjdDNEY5QUUwMi9HcGZDOUhFZmU4
Z0M0bWlzWnZFUWhpdmxlSWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZWDs5MO92KqBFsBRInGkr8FbDuIugerC1Br5lSt2YRBrMjYIYa0YpYFSEaVX
vUYLnLthCgXgpFCXTC2xHzGYXUMInS1KDMmNSUtITIkqh0MzjS9IdkA29mFRLxPo
YBB70dE8XB96XwcNPsmAEHv5NuCU/Tza3NkYZv2MhFiqoy5i1OcxS/RX/pd0dP+5
mIF7DC1SRqutqiLW6jYRUt0EshVJi2dGevzmp4zGUl+vZaqMOLeULwwuAotPsIWf
AwbM+kSf+llg1PsQYrDdKdEtGuNHLx/gI/kj0Ut9+tYeYACT7CehPUArpa50pX3K
mZKcYDfwU0nEsJZhc/io1CqzYA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:07:49 2026 by rpki-client