
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft
File: GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft (raw, json)
Hash identifier: Da2MIER+WjMvyMlK7J6lXo06a/4vd+rCEVCoNUmUPW0=
Subject key identifier: 6F:C5:DC:11:BB:D9:03:88:17:35:07:A8:BF:34:73:8C:91:6E:B3:C5
Authority key identifier: 18:F9:7D:09:8E:4E:BD:06:10:D5:4F:48:D5:B3:E1:AA:74:3A:20:29
Certificate issuer: /CN=A91DCD09/serialNumber=18F97D098E4EBD0610D54F48D5B3E1AA743A2029
Certificate serial: 1AE1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft
Manifest number: 1AB6
Signing time: Tue 12 May 2026 16:19:43 +0000
Manifest this update: Tue 12 May 2026 16:19:43 +0000
Manifest next update: Tue 19 May 2026 16:19:43 +0000
Files and hashes: 1: GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl (hash: Gkyv3Wzu+SJOFx9gZ5STTNJQRqVN01ZFaR/IMppnIBc=)
2: 64A7FFE2F74811E8A07B9609C4F9AE02.roa (hash: M9XcsGu+O0Zk52IzM7Z06ElXp8zYwD2w5zBvqMmkl5E=)
3: 234205EA327A11E8A1143B79C4F9AE02.roa (hash: +gU0wUPJzdPGvi0Ro7xFlOsQHmLKis/hh0dBME4aong=)
4: 9DF7DA5C557C11E7B34BCE81C4F9AE02.roa (hash: QYJCGTrhNobc9om3BoJ26lPH+BId3l/MUNDCYqKgq0Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl
rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:19:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6881 (0x1ae1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DCD09, serialNumber=18F97D098E4EBD0610D54F48D5B3E1AA743A2029
Validity
Not Before: May 12 16:19:43 2026 GMT
Not After : May 19 16:19:43 2026 GMT
Subject: CN=6a03531f-13f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0c:4c:ac:af:04:f7:d6:87:c0:f4:cf:07:0d:
c1:af:7a:6b:07:2a:86:ec:2e:eb:18:f5:96:c5:e8:
2d:fd:2b:1c:56:e6:b4:75:02:ca:2a:ab:cf:04:8b:
e3:69:af:c9:fc:1e:e0:a9:10:e5:2b:b3:f1:30:fb:
ec:74:3b:e6:77:e8:f0:2b:20:2e:de:e7:7d:81:26:
36:b3:36:8b:f1:d4:b7:14:56:7c:be:fc:2a:4d:fc:
3b:e1:80:d0:0d:08:c1:8d:37:9f:0f:37:d7:ff:73:
83:d1:45:a0:0e:e8:6f:99:49:47:35:9c:12:ad:7e:
f7:12:10:31:32:3d:26:0c:6b:79:eb:90:61:39:2d:
d0:f9:9a:7e:48:1d:dd:e5:e0:16:59:70:0f:8d:99:
d9:a1:f3:f6:f4:5b:3e:3a:ec:d0:4f:bb:47:10:0d:
2c:d3:42:05:7f:1c:ca:70:21:11:4e:3e:30:ed:c7:
30:17:b5:da:96:65:58:c4:a0:06:1f:19:7f:87:fb:
82:7e:e9:b2:b7:11:4b:08:cc:68:f3:7a:fe:36:35:
9d:0e:b7:bc:7a:67:69:78:69:da:96:9c:3e:82:d4:
9a:d3:1c:4e:12:21:d3:cb:50:25:de:32:36:3d:ff:
56:a3:b7:23:f8:9c:9b:99:c2:27:2d:06:96:bb:48:
99:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C5:DC:11:BB:D9:03:88:17:35:07:A8:BF:34:73:8C:91:6E:B3:C5
X509v3 Authority Key Identifier:
keyid:18:F9:7D:09:8E:4E:BD:06:10:D5:4F:48:D5:B3:E1:AA:74:3A:20:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:cc:48:8d:6d:64:76:4a:f6:b7:18:57:36:52:eb:ca:9c:31:
86:c5:6f:f4:4e:c2:06:6e:62:83:9f:a9:27:fb:3c:e8:a2:93:
cf:72:a4:19:4d:ef:6a:13:6a:b1:ee:bb:2b:82:81:7a:30:3b:
63:a4:84:23:9a:cf:6c:c6:a1:1f:d4:a0:12:c7:0e:1a:70:67:
98:ae:19:12:66:b5:3e:de:a4:22:54:f2:68:ef:33:29:ef:fc:
c4:ac:cb:c4:e6:f4:3c:6e:aa:ce:48:4a:69:a8:94:b6:f8:13:
3b:49:b3:53:52:6e:2e:d3:02:f5:16:c8:82:3a:e2:4d:bd:7f:
7d:68:bf:a7:c3:67:cb:28:35:43:6c:6b:b6:a6:12:0c:8c:55:
65:68:68:22:c6:b0:b0:e2:2b:a8:a3:4f:f2:d6:74:6c:5f:07:
20:66:a1:40:7d:49:70:d8:6b:c2:a0:a6:20:20:de:2d:5c:ea:
fd:d1:62:5d:ca:51:ea:87:f6:1e:a9:c6:f9:56:7b:69:b2:e5:
4d:7b:d5:af:4c:c9:e6:bd:ce:10:31:7a:27:57:41:3f:76:7c:
1f:44:e2:7d:0b:10:98:97:b4:06:09:3b:be:77:f6:82:48:31:
3a:80:04:4e:49:2d:17:b3:94:f8:b4:f6:6f:1e:ab:d3:ea:1b:
c1:49:46:22
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RENEMDkxMTAvBgNVBAUTKDE4Rjk3RDA5OEU0RUJEMDYxMEQ1NEY0OEQ1QjNFMUFB
NzQzQTIwMjkwHhcNMjYwNTEyMTYxOTQzWhcNMjYwNTE5MTYxOTQzWjAYMRYwFAYD
VQQDEw02YTAzNTMxZi0xM2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArwxMrK8E99aHwPTPBw3Br3prByqG7C7rGPWWxegt/SscVua0dQLKKqvPBIvj
aa/J/B7gqRDlK7PxMPvsdDvmd+jwKyAu3ud9gSY2szaL8dS3FFZ8vvwqTfw74YDQ
DQjBjTefDzfX/3OD0UWgDuhvmUlHNZwSrX73EhAxMj0mDGt565BhOS3Q+Zp+SB3d
5eAWWXAPjZnZofP29Fs+OuzQT7tHEA0s00IFfxzKcCERTj4w7ccwF7XalmVYxKAG
Hxl/h/uCfumytxFLCMxo83r+NjWdDre8emdpeGnalpw+gtSa0xxOEiHTy1Al3jI2
Pf9Wo7cj+JybmcInLQaWu0iZMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG/F3BG7
2QOIFzUHqL80c4yRbrPFMB8GA1UdIwQYMBaAFBj5fQmOTr0GENVPSNWz4ap0OiAp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS8yRjhCODU1MjU0
ODUxMUU3QjFEODQ3MTNDNEY5QUUwMi9HUGw5Q1k1T3ZRWVExVTlJMWJQaHFuUTZJ
Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dQbDlDWTVPdlFZUTFVOUkxYlBocW5RNklDay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
Q0QwOS8yRjhCODU1MjU0ODUxMUU3QjFEODQ3MTNDNEY5QUUwMi9HUGw5Q1k1T3ZR
WVExVTlJMWJQaHFuUTZJQ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQ8xIjW1kdkr2txhXNlLrypwxhsVv9E7CBm5ig5+pJ/s86KKTz3KkGU3vahNq
se67K4KBejA7Y6SEI5rPbMahH9SgEscOGnBnmK4ZEma1Pt6kIlTyaO8zKe/8xKzL
xOb0PG6qzkhKaaiUtvgTO0mzU1JuLtMC9RbIgjriTb1/fWi/p8Nnyyg1Q2xrtqYS
DIxVZWhoIsawsOIrqKNP8tZ0bF8HIGahQH1JcNhrwqCmICDeLVzq/dFiXcpR6of2
HqnG+VZ7abLlTXvVr0zJ5r3OEDF6J1dBP3Z8H0TifQsQmJe0Bgk7vnf2gkgxOoAE
TkktF7OU+LT2bx6r0+obwUlGIg==
-----END CERTIFICATE-----
Generated at Wed May 13 13:19:53 2026 by rpki-client