
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8357/1DA5CC56DF8A11EF87472B74C4F9AE02/GAo1IuIFDF8eCHNTmxLW0jEqIBo.mft
File: GAo1IuIFDF8eCHNTmxLW0jEqIBo.mft (raw, json)
Hash identifier: HLHrd4OZS/GLPluE6AoCqjjNESq4RGGJTsA+8GniyWE=
Subject key identifier: ED:E4:F7:B7:FC:92:C7:60:A8:E6:9B:4F:4C:D0:33:19:DD:56:5C:CC
Authority key identifier: 18:0A:35:22:E2:05:0C:5F:1E:08:73:53:9B:12:D6:D2:31:2A:20:1A
Certificate issuer: /CN=A91F8357/serialNumber=180A3522E2050C5F1E0873539B12D6D2312A201A
Certificate serial: 0134
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAo1IuIFDF8eCHNTmxLW0jEqIBo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8357/1DA5CC56DF8A11EF87472B74C4F9AE02/GAo1IuIFDF8eCHNTmxLW0jEqIBo.mft
Manifest number: 0134
Signing time: Wed 23 Sep 2026 05:22:49 +0000
Manifest this update: Wed 23 Sep 2026 05:22:49 +0000
Manifest next update: Wed 30 Sep 2026 05:22:49 +0000
Files and hashes: 1: GAo1IuIFDF8eCHNTmxLW0jEqIBo.crl (hash: qPZ4LQSFJVdoEIrSMO9cmsmMbhqOY2a1WGCgN6Zi5J8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8357/1DA5CC56DF8A11EF87472B74C4F9AE02/GAo1IuIFDF8eCHNTmxLW0jEqIBo.crl
rsync://rpki.apnic.net/member_repository/A91F8357/1DA5CC56DF8A11EF87472B74C4F9AE02/GAo1IuIFDF8eCHNTmxLW0jEqIBo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAo1IuIFDF8eCHNTmxLW0jEqIBo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 05:22:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 308 (0x134)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8357, serialNumber=180A3522E2050C5F1E0873539B12D6D2312A201A
Validity
Not Before: Sep 23 05:22:49 2026 GMT
Not After : Sep 30 05:22:49 2026 GMT
Subject: CN=6ab36229-dc32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bc:73:d7:64:17:3d:08:33:7b:7e:eb:82:84:
8c:4a:e0:23:64:a4:f1:fd:1e:ed:c4:09:f3:1d:15:
c9:9e:5f:ad:74:04:4b:fb:dc:37:05:a5:9b:3a:b8:
f8:49:ef:e7:64:fb:c7:2d:00:33:23:fa:07:5d:52:
09:5a:cc:33:4c:f3:e2:cc:d3:49:31:ab:72:b3:58:
6a:bb:80:86:11:6f:25:66:12:da:a8:96:ea:d3:8a:
3a:9e:b7:99:6d:39:af:2f:6b:d9:6e:7b:96:79:27:
bd:b1:86:35:fd:ba:d2:c6:64:a5:70:58:5a:9a:2d:
3f:42:73:41:b6:8d:9c:52:a8:d3:44:c5:f8:dd:d3:
b9:fa:fa:ae:d8:b1:da:49:91:28:1b:d9:e9:d4:09:
cf:27:ca:f3:d1:7e:f3:2f:d4:ef:9e:83:57:ae:05:
87:fc:a5:b3:b4:1b:53:31:6f:38:13:44:4d:f4:3e:
20:b0:3f:22:20:d9:56:bc:38:05:39:22:8c:30:6a:
4e:b7:13:93:92:78:74:68:a0:d8:da:ff:96:20:2a:
49:c2:5e:81:79:c2:60:1f:81:84:d9:eb:94:5b:a4:
9f:ad:ff:76:68:c1:eb:cf:ad:b0:57:50:54:94:36:
84:80:96:84:22:74:82:f0:80:af:88:ee:f3:79:7d:
7b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E4:F7:B7:FC:92:C7:60:A8:E6:9B:4F:4C:D0:33:19:DD:56:5C:CC
X509v3 Authority Key Identifier:
keyid:18:0A:35:22:E2:05:0C:5F:1E:08:73:53:9B:12:D6:D2:31:2A:20:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8357/1DA5CC56DF8A11EF87472B74C4F9AE02/GAo1IuIFDF8eCHNTmxLW0jEqIBo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAo1IuIFDF8eCHNTmxLW0jEqIBo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8357/1DA5CC56DF8A11EF87472B74C4F9AE02/GAo1IuIFDF8eCHNTmxLW0jEqIBo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:b2:dc:38:b2:d2:42:0f:7f:e6:0d:fd:5c:a3:ab:75:e4:1f:
19:9d:14:bb:fb:ee:e1:20:7d:1f:56:c4:66:84:70:f8:28:02:
70:dd:26:63:73:40:09:6a:a1:37:ad:7d:1f:79:39:b3:16:bd:
27:32:94:8d:88:2d:7f:52:f8:32:18:12:af:96:3c:54:a2:58:
69:b8:af:28:f7:c6:e7:31:90:08:ec:0e:4d:fc:1e:63:9b:fa:
f5:f5:46:5a:df:7a:69:0b:c9:16:2d:1c:67:bc:1f:15:6e:38:
1e:27:85:1e:a3:4e:44:2e:01:20:b8:08:80:60:0a:df:1f:33:
8a:10:04:7a:e5:58:8a:2f:fd:b9:25:5a:79:eb:77:e0:80:2d:
bd:2b:4f:3e:0f:73:70:f7:83:46:9c:ac:70:c7:90:21:f5:a0:
75:89:66:c6:50:28:25:fc:18:98:fb:56:8b:41:68:a0:dc:bf:
c6:68:42:d2:ef:54:6a:44:9a:f5:67:82:57:f8:33:f3:c9:90:
6d:15:a2:82:5b:64:b8:22:c0:95:13:af:6c:5c:56:b9:1a:fa:
1f:54:70:ed:e6:e2:45:49:fb:89:c9:d3:90:33:05:64:6b:46:
46:3b:b1:de:9e:d3:7c:e7:4d:e1:af:a7:2d:fd:fa:a4:1b:1a:
9b:fe:eb:58
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjgzNTcxMTAvBgNVBAUTKDE4MEEzNTIyRTIwNTBDNUYxRTA4NzM1MzlCMTJENkQy
MzEyQTIwMUEwHhcNMjYwOTIzMDUyMjQ5WhcNMjYwOTMwMDUyMjQ5WjAYMRYwFAYD
VQQDEw02YWIzNjIyOS1kYzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAurxz12QXPQgze37rgoSMSuAjZKTx/R7txAnzHRXJnl+tdARL+9w3BaWbOrj4
Se/nZPvHLQAzI/oHXVIJWswzTPPizNNJMatys1hqu4CGEW8lZhLaqJbq04o6nreZ
bTmvL2vZbnuWeSe9sYY1/brSxmSlcFhami0/QnNBto2cUqjTRMX43dO5+vqu2LHa
SZEoG9np1AnPJ8rz0X7zL9TvnoNXrgWH/KWztBtTMW84E0RN9D4gsD8iINlWvDgF
OSKMMGpOtxOTknh0aKDY2v+WICpJwl6BecJgH4GE2euUW6Sfrf92aMHrz62wV1BU
lDaEgJaEInSC8ICviO7zeX17PQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO3k97f8
ksdgqOabT0zQMxndVlzMMB8GA1UdIwQYMBaAFBgKNSLiBQxfHghzU5sS1tIxKiAa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODM1Ny8xREE1Q0M1NkRG
OEExMUVGODc0NzJCNzRDNEY5QUUwMi9HQW8xSXVJRkRGOGVDSE5UbXhMVzBqRXFJ
Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dBbzFJdUlGREY4ZUNITlRteExXMGpFcUlCby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
ODM1Ny8xREE1Q0M1NkRGOEExMUVGODc0NzJCNzRDNEY5QUUwMi9HQW8xSXVJRkRG
OGVDSE5UbXhMVzBqRXFJQm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAO7LcOLLSQg9/5g39XKOrdeQfGZ0Uu/vu4SB9H1bEZoRw+CgCcN0mY3NACWqh
N619H3k5sxa9JzKUjYgtf1L4MhgSr5Y8VKJYabivKPfG5zGQCOwOTfweY5v69fVG
Wt96aQvJFi0cZ7wfFW44HieFHqNORC4BILgIgGAK3x8zihAEeuVYii/9uSVaeet3
4IAtvStPPg9zcPeDRpyscMeQIfWgdYlmxlAoJfwYmPtWi0FooNy/xmhC0u9UakSa
9WeCV/gz88mQbRWigltkuCLAlROvbFxWuRr6H1Rw7ebiRUn7icnTkDMFZGtGRjux
3p7TfOdN4a+nLf36pBsam/7rWA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:21:17 2026 by rpki-client