
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.mft
File: gFLXiRiFOIg0vD1ozrIclvdiXmc.mft (raw, json)
Hash identifier: Sl30lLjtEkTNHvo4oY9jJwpVKZjwnSQkqVFVPfzSLco=
Subject key identifier: 16:C5:A0:DE:D4:11:09:CE:B7:E9:5C:AA:67:D6:AA:02:6C:F0:D0:E4
Authority key identifier: 80:52:D7:89:18:85:38:88:34:BC:3D:68:CE:B2:1C:96:F7:62:5E:67
Certificate issuer: /CN=A91CBE89/serialNumber=8052D7891885388834BC3D68CEB21C96F7625E67
Certificate serial: 1F0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFLXiRiFOIg0vD1ozrIclvdiXmc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.mft
Manifest number: 1F0D
Signing time: Tue 12 May 2026 16:01:41 +0000
Manifest this update: Tue 12 May 2026 16:01:40 +0000
Manifest next update: Tue 19 May 2026 16:01:40 +0000
Files and hashes: 1: gFLXiRiFOIg0vD1ozrIclvdiXmc.crl (hash: +1yowBmkzuGqOTsEZV+jOZRlBeKpfAbtYTlpKdNwN5w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.crl
rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFLXiRiFOIg0vD1ozrIclvdiXmc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7950 (0x1f0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CBE89, serialNumber=8052D7891885388834BC3D68CEB21C96F7625E67
Validity
Not Before: May 12 16:01:40 2026 GMT
Not After : May 19 16:01:40 2026 GMT
Subject: CN=6a034ee4-eece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:19:77:f7:f5:25:80:c8:76:5b:6f:19:1c:89:
b9:d5:ae:99:86:cd:77:b1:50:0c:c3:ba:ec:69:88:
a6:05:e7:eb:7a:ce:d9:5b:82:b9:c0:15:04:b1:11:
fc:dc:88:6e:f2:53:2d:f3:22:f1:b2:cc:96:be:b8:
e3:15:06:df:f8:32:7f:d6:a0:68:26:81:e9:2b:3a:
aa:21:0e:78:ee:98:06:93:d0:ce:1c:ef:bb:71:6b:
c3:e1:20:98:7b:69:10:9e:4e:09:b9:05:27:1e:53:
20:3d:cb:90:6f:0c:2c:1c:32:ff:da:e9:96:7b:fb:
13:50:4a:53:92:b0:ca:80:68:3e:18:b3:a7:2d:d0:
2d:87:11:bb:ea:ca:1e:16:bb:cc:18:58:4d:5f:53:
c1:cf:3a:ce:3c:90:f0:92:ba:39:e5:8b:a2:12:31:
1a:d0:f3:e9:b4:56:36:5a:e1:21:ae:1d:16:9b:50:
d0:65:b5:11:5f:21:40:01:3a:6c:f6:f0:a8:66:97:
30:95:1e:3f:1d:60:b2:67:8d:10:2b:f6:5b:c6:00:
fa:0e:cf:e6:83:19:50:5a:b8:cb:80:d5:99:e2:aa:
2f:41:c5:86:3f:2c:c8:08:1e:28:d4:f3:13:19:31:
82:9f:81:81:37:49:5e:f8:5a:95:43:31:e9:07:dc:
45:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C5:A0:DE:D4:11:09:CE:B7:E9:5C:AA:67:D6:AA:02:6C:F0:D0:E4
X509v3 Authority Key Identifier:
keyid:80:52:D7:89:18:85:38:88:34:BC:3D:68:CE:B2:1C:96:F7:62:5E:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFLXiRiFOIg0vD1ozrIclvdiXmc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:cb:4b:67:bc:d6:09:36:cf:e6:99:05:a2:c4:c9:d6:41:c7:
89:3a:00:2a:fa:d8:31:31:44:3f:c9:ad:a5:1b:47:1c:ed:96:
bf:df:91:39:33:b5:9b:ea:be:88:93:89:dd:4f:c8:da:37:70:
72:01:fa:59:6c:cb:41:30:0a:95:04:da:b3:ab:73:d8:a8:9c:
f9:b0:5e:1e:33:eb:91:08:0e:dd:67:28:92:b3:a4:79:e9:bc:
01:71:9b:0b:e1:67:1e:30:45:19:48:b6:a6:46:11:b9:d1:cd:
fa:fd:ca:0a:cf:e4:3a:b5:7a:1a:e9:00:1e:7d:8e:28:80:d8:
e1:45:e6:17:5b:f2:ab:18:69:32:00:6b:39:32:01:ea:17:56:
c1:25:58:5c:84:9c:bb:4d:e2:e8:7c:ad:fa:5a:91:54:f5:b2:
af:09:c9:28:5e:e7:a2:19:39:46:71:3c:3c:cd:c4:17:71:38:
03:c0:f1:e4:eb:3b:4e:dd:41:88:df:12:86:cc:82:89:9a:15:
f4:fa:03:cc:f9:fa:1c:39:d5:3a:4a:ac:69:fe:41:98:8e:69:
37:38:ae:af:40:62:cd:d8:8d:6a:66:b6:7f:c0:7f:98:00:de:
a4:1e:0c:17:47:a6:c6:61:9c:dc:ce:25:5b:39:33:98:f8:fd:
04:ed:3a:68
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHw4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0JFODkxMTAvBgNVBAUTKDgwNTJENzg5MTg4NTM4ODgzNEJDM0Q2OENFQjIxQzk2
Rjc2MjVFNjcwHhcNMjYwNTEyMTYwMTQwWhcNMjYwNTE5MTYwMTQwWjAYMRYwFAYD
VQQDEw02YTAzNGVlNC1lZWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyhl39/UlgMh2W28ZHIm51a6Zhs13sVAMw7rsaYimBefres7ZW4K5wBUEsRH8
3Ihu8lMt8yLxssyWvrjjFQbf+DJ/1qBoJoHpKzqqIQ547pgGk9DOHO+7cWvD4SCY
e2kQnk4JuQUnHlMgPcuQbwwsHDL/2umWe/sTUEpTkrDKgGg+GLOnLdAthxG76soe
FrvMGFhNX1PBzzrOPJDwkro55YuiEjEa0PPptFY2WuEhrh0Wm1DQZbURXyFAATps
9vCoZpcwlR4/HWCyZ40QK/ZbxgD6Ds/mgxlQWrjLgNWZ4qovQcWGPyzICB4o1PMT
GTGCn4GBN0le+FqVQzHpB9xFzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBbFoN7U
EQnOt+lcqmfWqgJs8NDkMB8GA1UdIwQYMBaAFIBS14kYhTiINLw9aM6yHJb3Yl5n
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkU4OS9GMjcyNkExODc2
M0MxMUU2QjAxRTA4NTlDNEY5QUUwMi9nRkxYaVJpRk9JZzB2RDFvenJJY2x2ZGlY
bWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dGTFhpUmlGT0lnMHZEMW96ckljbHZkaVhtYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QkU4OS9GMjcyNkExODc2M0MxMUU2QjAxRTA4NTlDNEY5QUUwMi9nRkxYaVJpRk9J
ZzB2RDFvenJJY2x2ZGlYbWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJMtLZ7zWCTbP5pkFosTJ1kHHiToAKvrYMTFEP8mtpRtHHO2Wv9+ROTO1m+q+
iJOJ3U/I2jdwcgH6WWzLQTAKlQTas6tz2Kic+bBeHjPrkQgO3WcokrOkeem8AXGb
C+FnHjBFGUi2pkYRudHN+v3KCs/kOrV6GukAHn2OKIDY4UXmF1vyqxhpMgBrOTIB
6hdWwSVYXIScu03i6Hyt+lqRVPWyrwnJKF7nohk5RnE8PM3EF3E4A8Dx5Os7Tt1B
iN8ShsyCiZoV9PoDzPn6HDnVOkqsaf5BmI5pNziur0BizdiNama2f8B/mADepB4M
F0emxmGc3M4lWzkzmPj9BO06aA==
-----END CERTIFICATE-----
Generated at Wed May 13 19:06:58 2026 by rpki-client