
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.mft
File: gf_yFQBdoa-sXiSrvMA8pw9mS1Y.mft (raw, json)
Hash identifier: qlo8QrTtUd/Ho9E1k+FPeyUXjXsZ3Tv1xgiL4yAQEv4=
Subject key identifier: A6:28:30:CA:5B:A7:15:B1:79:31:C9:7B:51:DC:68:82:F1:D4:66:1C
Authority key identifier: 81:FF:F2:15:00:5D:A1:AF:AC:5E:24:AB:BC:C0:3C:A7:0F:66:4B:56
Certificate issuer: /CN=A91EEBAD/serialNumber=81FFF215005DA1AFAC5E24ABBCC03CA70F664B56
Certificate serial: 0717
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.mft
Manifest number: 070C
Signing time: Tue 22 Sep 2026 21:51:27 +0000
Manifest this update: Tue 22 Sep 2026 21:51:26 +0000
Manifest next update: Tue 29 Sep 2026 21:51:26 +0000
Files and hashes: 1: gf_yFQBdoa-sXiSrvMA8pw9mS1Y.crl (hash: JK9wY7rhkaGrdNZ4ZDf9lqMye5miSgsjBstb3G7JjGM=)
2: 9FCD0EE6A34411EB94DFE619C4F9AE02.roa (hash: Xr3+TbIOof9u/LmbNudhZ3Fw1f9PhHkFv4UjhuCI3JM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.crl
rsync://rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 21:51:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1815 (0x717)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EEBAD, serialNumber=81FFF215005DA1AFAC5E24ABBCC03CA70F664B56
Validity
Not Before: Sep 22 21:51:26 2026 GMT
Not After : Sep 29 21:51:26 2026 GMT
Subject: CN=6ab2f85f-b563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c1:90:65:9a:53:1d:6a:02:b3:df:51:b2:ee:
f4:b1:70:7e:d3:fc:0f:29:72:8a:d1:e2:87:52:63:
84:c9:a8:df:02:11:6d:56:7a:43:4c:40:ad:d0:95:
5b:e2:26:17:75:84:3f:b3:64:36:de:d9:22:0d:12:
e5:9c:ce:b7:c5:14:b5:a5:57:12:16:cb:20:ff:16:
19:59:af:8c:46:f6:73:e1:44:04:03:67:7e:4d:9a:
06:29:a8:63:8a:8a:d8:28:df:55:16:92:34:6f:5b:
02:1a:19:50:68:cf:55:a6:fe:7e:bd:9a:52:3d:1d:
b3:fa:6b:84:59:1d:92:92:c2:4b:0b:66:b7:97:a4:
60:82:c5:5a:78:84:ed:92:24:a7:3c:ba:71:91:31:
01:37:8d:de:ac:d6:4b:96:72:fe:fb:1c:da:02:fd:
f7:6f:cc:44:94:62:7a:b1:a3:af:df:b3:6f:08:da:
06:c6:fb:f9:65:a1:aa:9e:dc:a5:bd:36:a9:8a:1d:
8a:0c:2f:d7:2b:25:e4:35:c8:a1:42:df:3e:b3:f8:
a5:58:8f:8e:1c:97:15:c5:bd:3f:8e:11:e9:90:87:
b1:03:6e:2c:40:15:d3:d7:1f:ab:02:8e:2d:b1:a3:
b0:e1:87:5f:d7:3a:59:00:76:69:76:f5:5b:b2:2e:
3f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:28:30:CA:5B:A7:15:B1:79:31:C9:7B:51:DC:68:82:F1:D4:66:1C
X509v3 Authority Key Identifier:
keyid:81:FF:F2:15:00:5D:A1:AF:AC:5E:24:AB:BC:C0:3C:A7:0F:66:4B:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:8b:d7:93:0c:58:bb:86:58:60:75:ab:b1:31:11:bb:3b:44:
a6:e7:b0:60:89:59:81:49:76:40:94:0a:66:14:47:ba:7c:c6:
1d:78:05:cb:4c:e9:a7:b5:0e:f2:fe:30:00:df:fa:3f:f2:58:
8e:e2:21:0f:2c:a8:dc:e1:7b:33:6f:24:d8:e4:f8:bf:bb:c3:
e8:b5:97:6e:f7:06:da:c3:3c:77:ab:dc:ae:34:df:fa:66:42:
49:43:c4:b1:f1:0b:2b:57:fe:62:e7:53:37:65:36:36:dc:7c:
54:3d:e6:e7:a3:2d:3d:2e:b9:ba:fd:52:cb:54:e6:f1:71:8c:
d9:c9:52:5b:a4:fe:b3:78:08:09:9f:8f:d0:29:c7:76:19:57:
52:f2:52:4c:54:ec:12:00:0c:14:cb:e0:33:71:cf:2d:09:34:
cf:6f:08:9d:51:ff:99:dc:ce:50:7f:ba:d6:cc:d6:d3:a5:84:
fe:a8:0f:7c:a1:51:9c:85:34:a5:88:b1:df:e8:af:8b:7c:6c:
06:ca:27:a4:71:45:2b:2b:b3:98:5a:b8:02:98:45:6d:8e:05:
ac:63:95:2c:79:b9:20:c9:77:99:5d:45:72:02:81:e1:b7:6a:
09:e3:c9:f8:db:d8:16:b1:f1:c1:fa:2a:79:ea:83:af:cb:2d:
64:3c:fd:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:04:02 2026 by rpki-client