
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft
File: GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft (raw, json)
Hash identifier: vi73Zv+OLSQ3rWEsIKJwoZMYGQOsL8GuZGN2uZi3yf0=
Subject key identifier: C4:64:02:4A:91:C7:CA:C8:26:73:C6:3A:E6:1E:DF:95:65:16:D4:E0
Authority key identifier: 18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B
Certificate issuer: /CN=A91DDCB6/serialNumber=18DC531D44F05962E97F23845736141D3E02681B
Certificate serial: 07A9
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft
Manifest number: 0797
Signing time: Thu 24 Sep 2026 20:06:42 +0000
Manifest this update: Thu 24 Sep 2026 20:06:42 +0000
Manifest next update: Thu 01 Oct 2026 20:06:42 +0000
Files and hashes: 1: GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl (hash: ovWYomLkJ1rzjKOH38wXPjQKRGy3T3wSz2YS63ZjbHc=)
2: 48D65BC2D28F11EB9F83683DC4F9AE02.roa (hash: PKuAHlg7IDQmqtBcmxC313Us4ZuOMAlQSrtZq4f+5Bg=)
3: 00756F7E63F011EC987F5B19C4F9AE02.roa (hash: NJ2yttVg/1tKklwG0b4mf3B8YWLlDm4GZ+hgK2zNvsU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl
rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 14:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1961 (0x7a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DDCB6, serialNumber=18DC531D44F05962E97F23845736141D3E02681B
Validity
Not Before: Sep 24 20:06:42 2026 GMT
Not After : Oct 1 20:06:42 2026 GMT
Subject: CN=6ab582d2-1e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:78:0e:1e:e5:6f:2d:2f:60:fa:cd:fa:e3:83:
15:a2:b1:cc:3b:69:49:1a:ea:04:82:4f:ea:b8:c8:
d2:11:ef:fe:9e:19:7e:0a:d2:b7:42:4a:b4:fa:a1:
b8:0c:e0:32:57:95:2b:07:09:ee:3f:2e:8f:ca:e8:
c9:9f:d3:72:e4:31:fb:8a:5a:60:ed:ef:c1:f0:4d:
05:0b:01:de:74:2f:35:c2:d8:de:58:6f:c8:94:58:
9e:7c:43:cc:b4:e1:24:d6:fa:95:34:40:0c:b0:a6:
6d:34:a6:0d:26:c7:8a:cb:8c:54:f5:e3:d7:33:fd:
e6:f8:1f:13:71:c4:80:d7:09:60:b4:b3:d3:16:65:
7a:08:f8:1e:84:d8:80:3e:43:6f:8c:a7:46:94:f6:
85:f1:6d:f6:64:17:26:85:71:bb:03:62:66:8e:ef:
bc:be:88:ab:d3:4f:16:ef:a5:fe:65:bf:f3:25:d9:
7f:b7:fa:ce:c0:9b:f5:60:4e:27:85:3c:5a:5d:c6:
32:bd:b1:fa:e7:59:99:64:4f:26:b9:7a:99:e4:24:
87:26:39:21:77:aa:93:f3:cb:11:73:7d:f7:01:b7:
73:53:c5:a0:ac:b6:3b:c6:9a:15:1c:76:a4:b5:79:
dd:b4:67:af:75:17:2f:20:50:fe:c6:de:79:64:43:
2b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:64:02:4A:91:C7:CA:C8:26:73:C6:3A:E6:1E:DF:95:65:16:D4:E0
X509v3 Authority Key Identifier:
keyid:18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:94:2c:3e:98:02:83:f9:9e:29:95:94:9a:13:2f:64:2d:d3:
f5:ce:b8:a1:c8:55:92:bd:5e:84:a2:29:f8:96:29:15:03:8d:
fc:d1:de:a9:fb:5c:59:01:75:aa:e3:26:8d:e4:6b:67:c7:f0:
11:68:d7:d1:9a:ec:96:43:3f:88:df:b3:3d:e5:54:a7:4c:df:
51:8f:5d:72:24:19:3e:63:69:1d:ea:18:22:61:de:fe:5b:02:
47:d9:15:92:b0:99:62:d5:6d:a8:bf:9d:b7:3b:ae:0a:a0:4c:
29:85:ef:22:6d:bf:4a:ec:21:88:38:79:da:22:56:0b:ec:d8:
70:18:11:b9:83:95:7b:ca:99:17:e3:9f:c5:e9:3b:46:80:99:
38:5d:be:be:56:f0:fe:22:f6:5d:63:65:05:55:dc:8f:b7:22:
ee:84:04:21:01:7f:d8:f8:1e:6b:4b:5e:2f:81:91:7a:7d:39:
22:d4:31:17:cb:6d:df:3c:da:27:55:95:17:af:da:7b:7c:c2:
39:c6:b6:b3:f4:62:7a:53:bc:97:50:0f:ec:d8:6e:d6:71:45:
bc:35:23:50:7f:49:fc:0a:85:47:71:da:94:44:90:7e:5d:c1:
61:30:e0:8e:e2:6f:7f:c6:7f:2f:66:f5:7b:0a:3e:22:b7:5b:
dc:a0:83:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:33:31 2026 by rpki-client