
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft
File: Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft (raw, json)
Hash identifier: hbyYNB6VmzXMxvHqNlhJ3s74GyFv07Drk55etYbIb0s=
Subject key identifier: CE:A4:41:81:FA:33:C9:09:90:51:CA:16:49:FC:42:EE:57:85:99:FE
Authority key identifier: 1A:69:34:CA:B5:21:3D:8B:43:FD:54:35:89:38:DD:1F:31:A1:69:0A
Certificate issuer: /CN=A91518AF/serialNumber=1A6934CAB5213D8B43FD54358938DD1F31A1690A
Certificate serial: 07E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft
Manifest number: 07DC
Signing time: Thu 08 Oct 2026 21:32:18 +0000
Manifest this update: Thu 08 Oct 2026 21:32:18 +0000
Manifest next update: Thu 15 Oct 2026 21:32:18 +0000
Files and hashes: 1: Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.crl (hash: ggGKgxCgB/MphHs/3uDOQYeXIAV5lN50BOtKkIO4n7c=)
2: C1C296F45A7111EBB1700884C4F9AE02.roa (hash: lzR6pyvl0y5+kPNyylXFhv+PwYmB2saEThM6foq0LbY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.crl
rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 21:32:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2021 (0x7e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91518AF, serialNumber=1A6934CAB5213D8B43FD54358938DD1F31A1690A
Validity
Not Before: Oct 8 21:32:18 2026 GMT
Not After : Oct 15 21:32:18 2026 GMT
Subject: CN=6ac80be2-ef4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d8:ab:03:77:69:10:0f:fc:07:cc:d1:be:57:
17:30:62:b3:89:45:02:96:f5:18:38:bb:7d:ba:94:
c8:51:8a:1a:31:ea:68:e5:d0:f7:6c:6a:fc:93:ab:
0d:dd:7a:3b:c3:61:2d:fd:41:92:68:7f:41:0d:5a:
6d:83:fc:1b:ef:14:b7:d3:43:6b:54:5b:21:c8:54:
69:11:82:0e:21:54:f1:4d:44:b7:26:28:34:a2:1c:
07:73:d2:e8:1b:20:82:b0:80:6e:21:e2:0d:c4:4a:
9d:ca:da:fc:53:b2:63:89:c3:36:29:4c:6d:5e:35:
8c:48:9a:dd:1f:d8:74:1a:11:9a:4e:7e:6e:0b:93:
8e:07:67:aa:3a:b0:fb:4d:48:56:6d:42:1a:14:d1:
f9:61:43:24:a3:2d:5e:b9:e5:e3:fb:e8:f1:38:e7:
e2:85:c8:f7:be:12:7f:b5:4f:d1:b6:b4:ec:7a:3b:
c5:23:a5:a4:02:fa:bb:bc:57:97:b7:80:0f:cf:c2:
5a:32:0c:e4:ea:ad:50:35:5a:e3:1b:d0:00:ca:ba:
06:0c:0e:2c:29:e1:ee:6e:d8:b6:84:fb:45:fe:23:
8e:64:d8:e0:4c:c5:cf:80:e2:85:11:de:3e:14:a6:
8a:8f:7e:70:7a:46:2d:13:72:2a:8b:37:b5:d7:d8:
89:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A4:41:81:FA:33:C9:09:90:51:CA:16:49:FC:42:EE:57:85:99:FE
X509v3 Authority Key Identifier:
keyid:1A:69:34:CA:B5:21:3D:8B:43:FD:54:35:89:38:DD:1F:31:A1:69:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:3c:99:b7:be:b4:43:ff:83:03:b1:91:0b:d3:f8:e2:2b:23:
2c:1a:40:8c:1b:d7:b9:ce:cf:59:7e:6e:e9:c1:74:df:d0:fb:
62:4f:2b:45:a6:29:8d:95:fc:d1:49:08:c9:84:df:0e:1c:0b:
07:26:04:3a:e1:50:cc:19:66:14:d0:55:9f:da:e2:d2:3a:79:
eb:8e:3e:f4:65:2a:2c:58:bd:12:d0:de:d4:68:71:a2:36:7d:
bf:bc:af:fb:8d:08:78:75:23:f0:35:24:12:63:b4:12:9c:ee:
30:dd:be:ab:a7:72:f1:ad:13:18:34:44:4c:7a:bd:75:1f:c2:
4b:10:15:98:3d:0d:80:76:4c:6f:d9:74:3b:c3:c4:a4:a6:ed:
5c:58:09:55:3a:59:8d:df:c2:29:8b:e7:34:1c:1d:63:30:be:
b2:ec:1f:c5:1c:ac:e1:83:78:de:06:03:10:b5:0a:b9:dc:91:
68:71:31:ed:0f:c7:6f:29:65:41:65:d8:70:25:2a:c0:35:24:
81:bc:98:12:9c:ba:82:5a:5c:81:32:36:74:94:e8:02:2e:b2:
e1:8f:0c:3f:34:e1:5f:55:40:44:79:de:7e:32:bb:b0:54:ec:
0d:24:03:60:8d:c2:a9:9a:f5:38:67:99:eb:b2:55:4a:49:f5:
c9:d4:15:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 17:46:27 2026 by rpki-client