
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft
File: GfKkbixJA4dTXpRfaxSGcABoV2E.mft (raw, json)
Hash identifier: yP1NbB4hkLN7f60y+Zhz3osNDQK4jL/63SxLG00KLuk=
Subject key identifier: 03:11:4A:EF:ED:04:C5:72:C4:2A:68:0B:DA:23:14:44:3B:58:19:8B
Authority key identifier: 19:F2:A4:6E:2C:49:03:87:53:5E:94:5F:6B:14:86:70:00:68:57:61
Certificate issuer: /CN=A91F0BDE/serialNumber=19F2A46E2C490387535E945F6B14867000685761
Certificate serial: B4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft
Manifest number: B2
Signing time: Thu 23 Jul 2026 08:56:41 +0000
Manifest this update: Thu 23 Jul 2026 08:56:40 +0000
Manifest next update: Thu 30 Jul 2026 08:56:40 +0000
Files and hashes: 1: GfKkbixJA4dTXpRfaxSGcABoV2E.crl (hash: FGi422iS8qrKVzBoAPllzOUSjhA/cWw1dJ+1MVpHs8I=)
2: 7DF6251A74B311F0A365281CC4F9AE02.roa (hash: zAfzIwWbsqduKym8Tq6NvhU1YHpokkZy+Zh0KEGQ0oM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.crl
rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:56:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180 (0xb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0BDE, serialNumber=19F2A46E2C490387535E945F6B14867000685761
Validity
Not Before: Jul 23 08:56:40 2026 GMT
Not After : Jul 30 08:56:40 2026 GMT
Subject: CN=6a61d748-9588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:57:da:9b:5d:38:c7:e5:f1:c6:1b:ef:00:55:
7c:ae:bd:fe:65:b4:10:4e:5a:54:0c:7d:ba:c7:40:
d5:3c:c2:e9:71:8b:2b:c4:c9:32:f4:9b:dd:e5:da:
7a:16:de:cc:76:a2:89:1b:4c:54:2a:90:b9:36:81:
d5:e8:b7:b4:2c:f4:1c:94:cb:66:4d:24:ad:df:ab:
66:4b:ed:0e:d4:c5:b0:26:34:07:50:f4:eb:22:12:
d7:d3:5f:5f:d2:ed:85:31:3d:e6:de:b9:ee:b7:39:
0b:33:29:5c:c4:9c:0a:3a:15:51:47:fe:3d:70:e4:
19:01:2c:fb:66:5a:03:4a:08:b8:e4:6f:5f:fc:f1:
4a:57:e3:25:b9:4d:af:68:c3:bd:96:4b:ec:df:b7:
2b:f1:3c:a2:10:7b:1f:52:8c:b4:f4:53:04:65:ed:
7e:57:53:2d:c6:26:c4:1c:de:2c:9e:da:88:7a:81:
16:64:0b:e1:b7:79:18:e1:30:d3:86:50:e9:8b:df:
29:e1:3e:f0:67:d3:94:0a:e7:50:13:b2:51:2b:a1:
6a:76:3d:cd:50:68:b4:5b:37:a2:53:fb:74:6a:5d:
d2:2a:e9:75:19:69:ba:cf:a6:cd:3c:41:3e:56:06:
28:58:8a:18:c6:5b:3a:ca:c6:25:77:4e:68:41:8c:
71:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:11:4A:EF:ED:04:C5:72:C4:2A:68:0B:DA:23:14:44:3B:58:19:8B
X509v3 Authority Key Identifier:
keyid:19:F2:A4:6E:2C:49:03:87:53:5E:94:5F:6B:14:86:70:00:68:57:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:7b:4f:fa:d8:be:c0:62:7f:33:75:0c:53:14:2f:1e:72:43:
a9:12:b1:24:27:95:0b:d6:aa:00:d3:bb:38:22:f4:c5:8c:90:
d8:40:c0:32:b7:ca:b1:02:bd:4e:10:54:82:45:38:fa:fe:89:
d8:c8:a3:f0:fe:92:70:58:7d:6c:ce:c2:46:14:f6:86:45:a8:
9e:1e:1a:24:d4:50:95:d7:c4:c8:45:9f:9a:26:05:e2:4d:31:
a8:54:4e:57:e1:26:7c:b3:79:1c:ff:29:0f:5d:72:0e:1e:46:
08:80:e2:30:02:c9:cb:de:f5:2c:42:06:9c:12:a5:b7:98:5b:
1f:8e:3e:38:10:f5:23:a8:be:df:e1:af:89:1d:80:5f:b3:c5:
61:02:fe:34:26:b6:5b:32:88:18:31:cd:78:c4:d1:79:51:ba:
66:70:64:c4:03:c4:95:16:ee:86:ea:4f:fa:a6:52:7e:e6:01:
61:f4:fa:55:22:8b:ba:2a:a0:82:c6:b2:ed:e3:b5:95:e3:e5:
06:c8:ac:3a:e2:26:10:4f:9d:e2:67:11:8f:b9:57:ef:f5:39:
c9:ee:47:d7:b5:67:6b:72:2a:4a:74:1c:e3:18:b6:a2:f5:ed:
f6:b1:ca:46:0e:30:fa:04:47:53:a5:87:fe:8d:4c:cd:8c:32:
d3:7c:b3:d7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjBCREUxMTAvBgNVBAUTKDE5RjJBNDZFMkM0OTAzODc1MzVFOTQ1RjZCMTQ4Njcw
MDA2ODU3NjEwHhcNMjYwNzIzMDg1NjQwWhcNMjYwNzMwMDg1NjQwWjAYMRYwFAYD
VQQDEw02YTYxZDc0OC05NTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAk1fam104x+XxxhvvAFV8rr3+ZbQQTlpUDH26x0DVPMLpcYsrxMky9Jvd5dp6
Ft7MdqKJG0xUKpC5NoHV6Le0LPQclMtmTSSt36tmS+0O1MWwJjQHUPTrIhLX019f
0u2FMT3m3rnutzkLMylcxJwKOhVRR/49cOQZASz7ZloDSgi45G9f/PFKV+MluU2v
aMO9lkvs37cr8TyiEHsfUoy09FMEZe1+V1MtxibEHN4sntqIeoEWZAvht3kY4TDT
hlDpi98p4T7wZ9OUCudQE7JRK6Fqdj3NUGi0WzeiU/t0al3SKul1GWm6z6bNPEE+
VgYoWIoYxls6ysYld05oQYxx6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAMRSu/t
BMVyxCpoC9ojFEQ7WBmLMB8GA1UdIwQYMBaAFBnypG4sSQOHU16UX2sUhnAAaFdh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEJERS8yOUQxRTc2Qzc0
QjMxMUYwQUUyOTUyMUJDNEY5QUUwMi9HZktrYml4SkE0ZFRYcFJmYXhTR2NBQm9W
MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0dmS2tiaXhKQTRkVFhwUmZheFNHY0FCb1YyRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MEJERS8yOUQxRTc2Qzc0QjMxMUYwQUUyOTUyMUJDNEY5QUUwMi9HZktrYml4SkE0
ZFRYcFJmYXhTR2NBQm9WMkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJHtP+ti+wGJ/M3UMUxQvHnJDqRKxJCeVC9aqANO7OCL0xYyQ2EDAMrfKsQK9
ThBUgkU4+v6J2Mij8P6ScFh9bM7CRhT2hkWonh4aJNRQldfEyEWfmiYF4k0xqFRO
V+EmfLN5HP8pD11yDh5GCIDiMALJy971LEIGnBKlt5hbH44+OBD1I6i+3+GviR2A
X7PFYQL+NCa2WzKIGDHNeMTReVG6ZnBkxAPElRbuhupP+qZSfuYBYfT6VSKLuiqg
gsay7eO1lePlBsisOuImEE+d4mcRj7lX7/U5ye5H17Vna3IqSnQc4xi2ovXt9rHK
Rg4w+gRHU6WH/o1MzYwy03yz1w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:19:46 2026 by rpki-client