
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft
File: GJZ9zbckqEpxcR5niqsdLnIhXWw.mft (raw, json)
Hash identifier: Sh7LYlz+pwK5m7MQZV2Vrr0i9EB7OSXlo8guruPCoRM=
Subject key identifier: 36:B9:AD:6E:06:76:24:F7:11:2D:BD:57:7D:71:58:D1:14:7B:6D:54
Authority key identifier: 18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C
Certificate issuer: /CN=A91D243F/serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C
Certificate serial: 0133
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft
Manifest number: FD
Signing time: Thu 23 Jul 2026 08:08:37 +0000
Manifest this update: Thu 23 Jul 2026 08:08:36 +0000
Manifest next update: Thu 30 Jul 2026 08:08:36 +0000
Files and hashes: 1: GJZ9zbckqEpxcR5niqsdLnIhXWw.crl (hash: Hv8Z4EjfLGDw5GLlAoXyeTkKqdl6ravUGWcrWGP/yWg=)
2: 3408F1BA450811F09650FF5FC4F9AE02.roa (hash: v4VAeTRhLetshvqbEadOdfyl/dOEP9N+4RKLhZ4e7qE=)
3: 37B448241F7811F0AC4FFF82C4F9AE02.roa (hash: mFeODnTqqCYAbyyDP1f7ewIXqtu+6WN+eZxifMY5OQQ=)
4: 6896A446318411F0BBC4F91DC4F9AE02.roa (hash: 4FovTEqwPM1DYoWEf0hfar9xlGLMGj5cisGTHLJPYsI=)
5: 1879BE8A318411F0BC1DD041C4F9AE02.roa (hash: j2Keh6m8tIx7/TCOD6hIJ0OBGZazoatVXlizWriG7AA=)
6: 349ACBB2450811F09650FF5FC4F9AE02.roa (hash: ElTWkHinF5kZlSpWnOacvfk821L7f3zWiiILDU+FV5g=)
7: 372E72941F7811F0AC4FFF82C4F9AE02.roa (hash: lc4x/4krlU7IrBNm9yndeIsd6X4Oi1wYGPdwnSnT+2s=)
8: 1808A790318411F0BC1DD041C4F9AE02.roa (hash: ySHv/z2aBIpi4ZmJwdGMW7JXmKAnxSrgO8kpo1pxZzc=)
9: 5E6EBAF64D0611F09396603CC4F9AE02.roa (hash: WwIDIxcJSfVf47feTm39rcx36NVF4Zg4PvbNM1OFevw=)
10: 17894A68318411F0BC1DD041C4F9AE02.roa (hash: 8ix/WnrdPiWa322J3erRaZZ4qyQ1QZ0UIEQCCV8f4LA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl
rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 307 (0x133)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D243F, serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C
Validity
Not Before: Jul 23 08:08:36 2026 GMT
Not After : Jul 30 08:08:36 2026 GMT
Subject: CN=6a61cc04-8d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:06:56:b2:3a:99:9e:6f:30:29:7c:8a:5b:00:
2e:f7:be:fd:2d:e1:de:1d:04:ed:10:fc:92:0c:98:
2a:d6:af:d9:f7:0e:b4:79:15:41:49:a9:ef:80:57:
a8:a6:9b:a0:17:bd:40:6d:66:33:61:07:3c:44:89:
31:69:1c:1b:4d:c0:4c:43:f1:28:38:50:4d:2e:6c:
4f:1a:f9:eb:94:51:f7:81:82:c0:ba:2c:e7:c9:3d:
8f:db:c7:ff:b7:20:43:91:fd:bc:4e:48:be:b1:2f:
74:60:8a:47:15:e5:3a:ca:74:11:6f:f3:df:5b:55:
a0:fe:9d:ea:c6:b0:d6:57:75:99:f8:84:a0:9b:d5:
dc:0d:be:a6:a8:57:61:84:68:b8:70:01:8c:be:93:
3f:71:21:3a:43:bf:5e:84:db:e9:53:e3:05:f1:b0:
ad:5e:2a:a9:99:54:2f:05:b5:8f:1a:17:f1:9f:9b:
14:7f:94:05:56:6a:e6:68:e2:e9:9f:09:79:dc:a4:
b2:64:a0:45:cc:64:d4:1f:89:7d:c5:5a:d0:bc:ed:
fa:82:df:9a:59:78:a5:24:9b:d4:14:2d:f2:a1:26:
f7:3e:38:50:a1:94:c9:26:61:3f:2c:5e:0f:d9:55:
fc:98:e1:b7:e2:9c:ed:6c:28:0f:a5:20:ae:9e:19:
71:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B9:AD:6E:06:76:24:F7:11:2D:BD:57:7D:71:58:D1:14:7B:6D:54
X509v3 Authority Key Identifier:
keyid:18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d2:36:0d:6f:7d:df:ad:ce:23:3c:94:23:06:04:67:c4:fe:04:
4c:da:28:a7:85:66:f1:4d:e9:d9:7f:5c:13:b1:07:f6:cf:d8:
4d:a5:65:e0:c6:1b:f5:03:2a:f8:3b:c9:2e:19:3d:16:a0:d3:
98:5e:e1:c4:7f:aa:26:08:4f:c9:eb:35:4d:c2:54:54:90:36:
d2:e5:f0:51:ac:c5:45:58:a8:b1:3f:f3:ed:2f:ca:a7:7f:03:
07:a7:3b:0a:fb:ba:85:2d:74:f1:a7:6d:88:6c:1f:19:f1:0d:
0b:3c:06:e7:bc:49:4b:5c:83:17:16:5f:e7:44:b8:bd:52:cd:
a0:69:dd:87:06:06:ba:4c:66:75:f7:c4:32:27:49:40:e1:f7:
4c:07:c4:07:3d:e8:6a:b9:aa:d9:4f:f0:93:e7:54:02:73:dd:
ac:2e:52:51:04:e5:50:0b:82:b5:01:18:28:c0:aa:b5:29:7c:
d5:f2:94:bd:e6:23:1c:57:2c:66:6c:04:d0:a3:0d:86:a8:aa:
64:67:d0:89:91:fe:d4:10:62:72:c5:b5:38:82:0b:26:e2:7d:
d8:3b:04:bd:60:9a:4a:9c:93:6c:b6:47:ad:e7:19:39:35:f7:
ec:f9:2e:57:6a:e9:1d:47:4a:a8:56:23:d9:4c:28:e2:60:c1:
24:8e:91:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:07:08 2026 by rpki-client