
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.mft
File: gf_yFQBdoa-sXiSrvMA8pw9mS1Y.mft (raw, json)
Hash identifier: jnKbbie6jlg/NVfBDx4Xpu2e2I7nA3fSCMnOlibpKDc=
Subject key identifier: 9E:CD:DE:88:86:7C:A7:4C:0D:0A:8C:63:01:64:AD:28:1E:8C:C7:67
Authority key identifier: 81:FF:F2:15:00:5D:A1:AF:AC:5E:24:AB:BC:C0:3C:A7:0F:66:4B:56
Certificate issuer: /CN=A91EEBAD/serialNumber=81FFF215005DA1AFAC5E24ABBCC03CA70F664B56
Certificate serial: 06B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.mft
Manifest number: 06AE
Signing time: Thu 26 Mar 2026 22:14:55 +0000
Manifest this update: Thu 26 Mar 2026 22:14:54 +0000
Manifest next update: Thu 02 Apr 2026 22:14:54 +0000
Files and hashes: 1: gf_yFQBdoa-sXiSrvMA8pw9mS1Y.crl (hash: Jo2pZJZw2ImyamK+dIJ/a4Ud3VqjG457ZCbYlQ7LIrs=)
2: 9FCD0EE6A34411EB94DFE619C4F9AE02.roa (hash: 6vZ51c5X8w1NomOKj2tJmBJDGJgJ9c9HYa4N392akLM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.crl
rsync://rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 22:14:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1720 (0x6b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EEBAD, serialNumber=81FFF215005DA1AFAC5E24ABBCC03CA70F664B56
Validity
Not Before: Mar 26 22:14:54 2026 GMT
Not After : Apr 2 22:14:54 2026 GMT
Subject: CN=69c5afde-83c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7a:a1:ed:b3:41:ea:0b:08:2a:82:1a:20:78:
fe:af:e2:41:d4:f3:da:eb:f5:1a:74:1f:54:76:1a:
e1:5a:01:fc:c1:8e:0d:3f:8f:80:cf:ca:45:26:80:
e6:f4:d0:31:c9:75:f2:9a:65:64:fc:f0:1c:0d:c1:
c6:fa:ec:ab:a1:10:d4:6b:79:34:78:2c:75:0a:af:
6a:9d:4c:46:62:a2:e5:c6:3f:d4:2f:fc:83:d3:c3:
c2:92:8b:62:9c:2f:bf:b2:15:e7:d9:bf:7b:3d:0a:
0e:51:26:5f:da:cc:d9:0c:15:af:45:a8:2e:a9:a2:
80:22:7d:03:70:b6:b5:a8:ea:aa:0e:0d:fa:49:63:
26:78:5e:31:49:b1:b1:2c:e6:f2:31:3c:f0:6e:9c:
02:64:c3:30:34:4b:d9:c1:91:0d:f3:59:eb:c9:e6:
a2:30:ee:73:e3:f8:d8:cb:05:d9:39:b0:c6:a8:3a:
3b:24:5d:6f:f4:98:5e:38:25:47:e1:86:eb:57:56:
d1:5b:85:50:b3:24:3f:30:e2:d7:94:2a:a7:35:ef:
f2:75:8e:f1:a5:b2:48:3a:ff:cb:f4:31:bb:cf:df:
0b:0f:e0:a5:4c:5f:5c:1f:7d:c8:43:03:0a:21:23:
62:3f:f3:3f:ae:a7:d3:7d:e0:f1:1e:b3:5f:91:f6:
9c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:CD:DE:88:86:7C:A7:4C:0D:0A:8C:63:01:64:AD:28:1E:8C:C7:67
X509v3 Authority Key Identifier:
keyid:81:FF:F2:15:00:5D:A1:AF:AC:5E:24:AB:BC:C0:3C:A7:0F:66:4B:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:73:84:c3:f8:03:f0:24:e7:5a:ee:96:61:80:a8:81:c7:d8:
65:bc:8a:e2:60:17:7c:31:11:a6:b9:28:b6:87:03:d4:11:4b:
76:c1:c5:fd:5b:f6:a8:5f:59:4f:8b:1e:3e:39:ef:c1:ae:4f:
98:6a:46:84:34:c3:2d:6b:f6:b5:1e:c7:d7:1c:a1:32:03:90:
9f:1b:aa:17:b9:d4:c4:50:06:c9:70:90:a9:b4:5b:dc:41:42:
33:25:71:db:9a:5b:30:d4:c3:8c:22:d3:8c:fc:63:a5:ad:a4:
27:48:49:0d:8e:98:e0:39:78:86:00:36:f8:b7:ea:cf:2a:d5:
01:96:a9:66:3c:7c:bf:f5:a4:3b:0a:26:f6:a2:7f:c9:46:7b:
99:9b:26:ed:01:0e:51:34:22:d0:c8:09:4d:68:3a:19:bb:ad:
de:5e:57:9d:ed:0b:38:54:d3:b0:ec:e1:81:9f:ea:7e:76:6c:
fc:44:9a:b2:2f:a0:2f:c6:c8:44:28:74:cd:bf:67:93:1a:10:
5d:00:db:b9:34:4a:b8:04:43:06:44:92:82:7a:c3:ae:3b:3e:
07:22:ea:9c:72:b0:df:cd:ef:e9:1d:52:97:81:d9:37:7e:ec:
83:73:6b:27:4b:71:12:d8:c3:a3:9e:7e:4f:b3:f8:46:6b:ff:
89:d4:f7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:17:42 2026 by rpki-client