
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft
File: GAee5DmNZxvWR_yoKieU5QowR70.mft (raw, json)
Hash identifier: qDPaO6yGuUjwNVl4lKn5lZ1zMeyorbp9VpipsrHsm1U=
Subject key identifier: 88:29:4B:B6:9A:CE:C6:35:B8:B1:4D:E4:91:94:3E:C8:89:AB:D5:D0
Authority key identifier: 18:07:9E:E4:39:8D:67:1B:D6:47:FC:A8:2A:27:94:E5:0A:30:47:BD
Certificate issuer: /CN=A91DFBE1/serialNumber=18079EE4398D671BD647FCA82A2794E50A3047BD
Certificate serial: 0B35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft
Manifest number: 0B29
Signing time: Tue 22 Sep 2026 19:08:37 +0000
Manifest this update: Tue 22 Sep 2026 19:08:37 +0000
Manifest next update: Tue 29 Sep 2026 19:08:37 +0000
Files and hashes: 1: GAee5DmNZxvWR_yoKieU5QowR70.crl (hash: Sq7o+XviLOp8cD0NKNGfTjuszFBjwFUsiarWJkV+x18=)
2: F23D65727CAF11ED87752A6BC4F9AE02.roa (hash: QfaWCwe/qZDBNL7SvK9BdlJZP0tZLuQpHfGjUMElff4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.crl
rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 19:08:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2869 (0xb35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFBE1, serialNumber=18079EE4398D671BD647FCA82A2794E50A3047BD
Validity
Not Before: Sep 22 19:08:37 2026 GMT
Not After : Sep 29 19:08:37 2026 GMT
Subject: CN=6ab2d235-af0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:43:23:91:2c:63:b1:bf:6d:c6:70:ac:7d:f3:
11:93:d5:2c:ba:52:03:f2:22:af:09:ca:c7:1f:bb:
71:f3:70:0b:99:30:75:93:05:cd:ae:15:85:3d:db:
88:91:d2:90:19:a0:2b:63:23:a2:03:77:33:2f:7e:
72:6c:d7:86:27:e0:6e:88:52:c6:29:0c:f3:c3:aa:
c0:0f:fe:f6:54:ad:83:ff:83:b1:ba:aa:87:0a:77:
87:91:6d:59:54:66:7f:cf:d3:91:ac:d2:dd:b8:41:
96:ec:2c:3d:0a:dc:79:d6:d0:d7:48:33:70:0b:07:
0b:23:a5:ae:04:bf:91:a8:a7:d3:17:39:8f:b9:d5:
28:2b:a1:d0:fc:43:f3:c7:2b:52:4b:48:da:0a:09:
cb:4c:c1:93:2b:19:e5:19:70:1a:35:dc:96:c3:e1:
2c:86:9b:87:8b:de:a4:90:39:ec:74:26:d3:bc:83:
f9:c5:99:8f:31:5b:bc:64:2f:35:ce:fc:be:01:5f:
9d:9c:8f:8d:31:99:d0:6c:29:02:01:ec:78:e9:06:
ad:bb:98:79:a2:54:0c:20:7a:92:9b:de:8f:db:bf:
ed:42:f5:de:08:76:f0:66:50:44:6a:ab:0c:07:f0:
6b:a3:c4:0f:bc:01:0e:55:cf:ef:b8:ab:b7:55:91:
76:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:29:4B:B6:9A:CE:C6:35:B8:B1:4D:E4:91:94:3E:C8:89:AB:D5:D0
X509v3 Authority Key Identifier:
keyid:18:07:9E:E4:39:8D:67:1B:D6:47:FC:A8:2A:27:94:E5:0A:30:47:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:9c:ec:a8:16:01:e9:7e:9b:db:a1:57:dd:c4:cd:46:41:dd:
1c:2e:8f:69:cd:4e:71:07:8a:39:45:e0:4c:12:35:0a:11:c5:
96:2a:ea:2c:08:89:05:9f:80:a2:b4:45:95:47:d9:ab:1a:e0:
c4:08:eb:66:b0:77:b0:a7:ae:6b:8c:90:0c:c4:e8:a5:87:46:
e7:f3:74:d5:03:5d:d5:ed:02:db:a1:dd:58:16:73:f8:f0:08:
47:a4:2a:cf:a5:af:ec:03:56:47:0c:42:1c:61:58:25:83:55:
2e:8c:e8:db:10:2b:ed:73:42:a4:74:8f:11:23:86:62:6d:af:
51:e5:42:59:25:68:a1:a7:91:07:53:cb:50:05:44:34:2e:59:
cc:37:37:07:23:70:5a:8d:76:5e:ea:85:87:db:61:65:22:76:
2d:11:59:f9:8a:f0:48:7d:5b:13:40:7f:59:86:ec:77:e1:b6:
fb:02:9d:e6:b8:f3:3f:62:8b:b4:5d:7e:bd:6c:d5:89:b4:a6:
da:5e:87:45:df:eb:5a:d9:ba:10:eb:04:87:f2:cc:12:a6:39:
9c:93:35:61:ef:af:e6:e4:1c:2f:5f:22:3e:90:04:37:bd:5b:
0a:4b:1b:7e:11:60:1a:ab:a5:65:7a:a1:40:b3:15:40:9f:42:
a9:6a:97:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:20:20 2026 by rpki-client