
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft
File: GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft (raw, json)
Hash identifier: HzF+U6599AmV7gy76y6AEMypl9lVTwoJXhjcATE0zAM=
Subject key identifier: F8:22:06:DD:79:49:66:2F:96:D4:38:EC:F6:39:77:7C:EC:3C:A8:01
Authority key identifier: 18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B
Certificate issuer: /CN=A91DDCB6/serialNumber=18DC531D44F05962E97F23845736141D3E02681B
Certificate serial: 0788
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft
Manifest number: 0776
Signing time: Wed 22 Jul 2026 20:42:19 +0000
Manifest this update: Wed 22 Jul 2026 20:42:19 +0000
Manifest next update: Wed 29 Jul 2026 20:42:19 +0000
Files and hashes: 1: GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl (hash: hioBycey+1HqAod/LVh/LaMgfq52BX7EiP8PSy0zRxI=)
2: 00756F7E63F011EC987F5B19C4F9AE02.roa (hash: NJ2yttVg/1tKklwG0b4mf3B8YWLlDm4GZ+hgK2zNvsU=)
3: 48D65BC2D28F11EB9F83683DC4F9AE02.roa (hash: PKuAHlg7IDQmqtBcmxC313Us4ZuOMAlQSrtZq4f+5Bg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl
rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:42:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1928 (0x788)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DDCB6, serialNumber=18DC531D44F05962E97F23845736141D3E02681B
Validity
Not Before: Jul 22 20:42:19 2026 GMT
Not After : Jul 29 20:42:19 2026 GMT
Subject: CN=6a612b2b-26df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1e:65:4b:5c:ef:a6:72:09:fb:c5:35:6f:d2:
a2:36:78:f2:7c:c4:64:d3:4b:46:7a:7e:93:6c:d6:
48:69:e2:65:e9:f9:0d:ef:0a:14:8e:ca:3d:20:3b:
58:86:01:e2:77:82:5e:ca:4d:8f:e3:42:4a:66:b5:
08:82:d7:bf:2d:8e:30:ea:db:c3:63:e8:16:f4:19:
1c:db:fa:12:ee:af:e7:32:ac:80:ce:0e:13:ae:f8:
a4:58:cd:40:22:42:52:d4:06:80:56:17:c1:b6:a0:
06:25:9a:65:0d:95:10:f1:52:15:e5:7b:8f:67:9c:
36:c9:29:a6:ab:23:12:23:7d:af:4d:05:04:df:24:
77:2a:2d:48:5a:d3:23:a2:c0:6c:42:17:08:fc:2b:
33:1b:24:8f:a0:3f:95:eb:cb:13:9a:aa:fe:5b:d1:
b2:44:1b:7b:f8:4e:22:55:d1:79:2e:35:49:59:69:
06:93:f3:84:6e:29:81:74:09:e7:fc:08:fc:24:09:
bb:42:e0:a5:f5:8b:69:71:33:8d:45:fc:a8:9a:74:
bd:c0:fd:70:a5:b8:59:ee:7f:68:44:37:c3:26:2a:
82:f1:22:02:ac:56:88:dc:8a:99:6a:bc:0f:2c:07:
0d:13:78:1f:a8:23:61:e0:e3:56:39:58:b1:44:1a:
3e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:22:06:DD:79:49:66:2F:96:D4:38:EC:F6:39:77:7C:EC:3C:A8:01
X509v3 Authority Key Identifier:
keyid:18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:d9:1c:87:cd:c9:f7:d8:31:fb:49:9a:73:58:bd:50:3d:3d:
e6:b8:d4:1d:07:91:d7:fb:32:ea:dc:f1:e1:9d:03:57:f7:da:
00:e3:4c:20:b3:e5:40:98:be:0f:e4:18:08:f6:c3:19:c7:ab:
a4:d5:2c:0a:a7:63:e7:59:29:d5:5b:ca:30:27:81:2e:50:71:
2e:c4:2f:a3:83:7d:bd:cd:08:6e:a6:c6:46:d5:e8:ef:04:8a:
c6:e8:2f:cb:c8:b8:e4:fc:46:9c:50:58:0b:b5:61:8d:84:3c:
e5:dc:e7:1b:db:62:32:9e:36:e2:42:47:42:5b:f8:63:71:98:
01:3b:80:f1:9c:dd:5d:be:a3:3b:11:1b:b5:63:3e:1d:e6:95:
37:40:06:e9:fd:08:5b:19:38:f8:ba:b0:a8:55:a8:b4:79:d3:
ea:54:48:92:8f:a8:fc:39:db:27:50:63:a9:fa:d4:cd:ec:fa:
f7:27:0a:78:cc:2b:a0:d6:02:a1:d6:ee:54:0e:86:d2:f3:22:
2c:95:de:a6:1e:a4:e3:e5:69:74:a4:fe:5b:18:b8:ee:16:d5:
25:01:e7:f4:28:d2:14:2e:ba:86:c2:81:50:93:c1:1a:49:8e:
f9:f6:ad:a4:2e:76:f1:67:83:ef:fc:6d:c9:be:71:8f:2e:34:
6e:57:27:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:36:53 2026 by rpki-client