
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.mft
File: gjEAt15d1BoefDKBw1cT9EvobJg.mft (raw, json)
Hash identifier: OXWm0pT5e6LLo34wkO45TBk99CYZUZIWU0N0qfCgzG4=
Subject key identifier: 7A:EA:2D:76:43:FD:C8:75:CE:D6:BF:C6:C1:A3:9B:9D:4E:7D:A1:C8
Authority key identifier: 82:31:00:B7:5E:5D:D4:1A:1E:7C:32:81:C3:57:13:F4:4B:E8:6C:98
Certificate issuer: /CN=A91A2E6A/serialNumber=823100B75E5DD41A1E7C3281C35713F44BE86C98
Certificate serial: 01BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gjEAt15d1BoefDKBw1cT9EvobJg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.mft
Manifest number: 01B2
Signing time: Sat 03 Oct 2026 04:42:56 +0000
Manifest this update: Sat 03 Oct 2026 04:42:55 +0000
Manifest next update: Sat 10 Oct 2026 04:42:55 +0000
Files and hashes: 1: gjEAt15d1BoefDKBw1cT9EvobJg.crl (hash: iJvFpp1wc5TRBLWhzpiXeHnXlrVjPrZm6MWrPxrZeXI=)
2: 244163CEB0EC11F1AFA282DA3411F970.roa (hash: mwxRCX7GTTQeUZLgo1HqFaM/YTgBRZfZ8t3zl3kpj1E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.crl
rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gjEAt15d1BoefDKBw1cT9EvobJg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 04:42:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 445 (0x1bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2E6A, serialNumber=823100B75E5DD41A1E7C3281C35713F44BE86C98
Validity
Not Before: Oct 3 04:42:55 2026 GMT
Not After : Oct 10 04:42:55 2026 GMT
Subject: CN=6ac087d0-5510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a3:66:ec:28:13:b8:ff:f3:75:59:93:54:9e:
f6:12:6a:7f:03:c7:9c:06:de:d0:77:a5:87:aa:a2:
cd:b0:2d:1d:8c:ae:99:7f:06:83:92:13:f1:26:57:
1f:8a:4c:d4:41:10:b7:7d:13:42:36:c5:3a:a0:b1:
68:b2:b4:6f:9a:d8:08:dc:49:bf:e2:52:27:f5:0b:
79:05:6e:f8:f6:01:c4:48:25:83:b0:e7:e7:c5:12:
a7:d1:b9:dd:70:ee:cb:14:71:5b:1d:34:3c:74:31:
bb:c8:99:5e:06:16:01:c3:6b:6a:a6:2d:b7:e6:1b:
4c:a0:fc:b8:2c:a6:08:89:75:8e:5a:d8:02:e8:71:
ae:a1:ff:53:f6:07:12:21:53:fe:10:0c:4f:06:48:
fc:19:45:5e:79:17:08:39:8b:da:4b:4a:29:df:55:
57:3d:67:8d:b0:08:48:cd:c0:16:12:a6:eb:f2:64:
5a:25:53:e5:57:72:ee:13:78:ca:6d:76:d7:ec:0b:
14:fd:3b:29:4e:bd:bf:ab:08:d6:42:8b:6c:b4:01:
4d:a1:77:a8:a7:1e:57:1e:a7:16:63:65:58:9f:81:
2a:aa:0c:8e:c5:0c:68:49:4a:ab:bc:f9:58:1b:4c:
b7:93:49:7d:84:7b:90:22:da:a6:85:4a:f2:ee:a4:
1d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:EA:2D:76:43:FD:C8:75:CE:D6:BF:C6:C1:A3:9B:9D:4E:7D:A1:C8
X509v3 Authority Key Identifier:
keyid:82:31:00:B7:5E:5D:D4:1A:1E:7C:32:81:C3:57:13:F4:4B:E8:6C:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gjEAt15d1BoefDKBw1cT9EvobJg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:b5:b2:e7:24:e9:a1:26:ab:c1:f3:90:80:f2:c7:88:85:8e:
10:66:30:0d:a7:5d:97:5a:38:fd:5a:7f:92:1c:91:8c:f7:40:
12:aa:55:1f:ed:c4:f3:96:1b:4f:33:bb:ab:eb:bd:d7:86:a0:
04:1e:4d:df:8f:ab:35:ac:c0:27:ba:84:c4:bb:3f:e5:ff:57:
94:9e:39:b5:bc:d3:5e:1e:69:4d:9c:09:d7:f0:d2:91:30:5c:
1a:7b:36:c4:4e:86:c8:74:a4:73:c3:24:f2:9d:42:7b:ef:f5:
7f:36:21:81:87:28:95:39:45:ad:54:63:c7:44:0c:d8:bd:53:
99:28:80:ba:55:9b:f0:45:6e:4b:89:a4:5b:0a:e9:c8:ce:bc:
3d:3d:8a:d8:82:7e:33:15:fb:7f:2a:77:38:df:f9:a3:32:db:
1a:5d:dd:7b:cc:54:15:a7:78:ee:cf:9d:f8:87:f8:48:55:0a:
f2:a5:df:64:47:19:8d:52:ac:e3:18:18:4a:79:bb:27:de:11:
c1:28:b5:eb:53:47:43:ba:62:38:7a:6f:12:25:84:c3:90:90:
c3:01:31:86:19:42:c0:4c:2e:d5:9e:85:56:be:aa:b5:e8:15:
a0:bf:f4:20:ee:ab:35:13:c6:95:75:2f:b0:92:31:a9:a6:b4:
77:60:dd:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 16:24:57 2026 by rpki-client