
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft
File: gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft (raw, json)
Hash identifier: tkZ72/jleQnZj8AVqkcUvES2jA5sqDaeL5UTGGUNalQ=
Subject key identifier: C5:03:61:2B:96:29:F4:CE:64:CC:2E:8F:CF:C5:E5:2E:70:A8:1E:08
Authority key identifier: 80:FB:52:63:6A:9E:50:C0:88:68:E6:27:52:0A:1A:0D:8A:87:F0:46
Certificate issuer: /CN=A91B3EDE/serialNumber=80FB52636A9E50C08868E627520A1A0D8A87F046
Certificate serial: 0130
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gPtSY2qeUMCIaOYnUgoaDYqH8EY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft
Manifest number: 012B
Signing time: Wed 07 Oct 2026 06:12:58 +0000
Manifest this update: Wed 07 Oct 2026 06:12:57 +0000
Manifest next update: Wed 14 Oct 2026 06:12:57 +0000
Files and hashes: 1: gPtSY2qeUMCIaOYnUgoaDYqH8EY.crl (hash: NYIdxSdBVyLBBD3DJpfxfUfS0zh8JqBIpZ5mekXugNc=)
2: BC66C474FB5C11EFB5FF765EC4F9AE02.roa (hash: pX32CYqIuCC9WIBfrCctEx/uwPxu80qncBmM35DD0HE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.crl
rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gPtSY2qeUMCIaOYnUgoaDYqH8EY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 06:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 304 (0x130)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3EDE, serialNumber=80FB52636A9E50C08868E627520A1A0D8A87F046
Validity
Not Before: Oct 7 06:12:57 2026 GMT
Not After : Oct 14 06:12:57 2026 GMT
Subject: CN=6ac5e2ea-9935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9a:8d:cb:06:54:90:c4:47:a7:cf:a0:a3:ff:
42:c3:0d:20:b3:28:21:9a:0f:dc:e6:21:18:d6:e5:
0f:4e:1d:96:17:a4:85:2f:a2:87:5d:14:50:df:22:
ce:74:43:07:03:1a:19:c0:52:9c:1e:c8:4c:25:c2:
0b:fd:59:25:4b:58:69:fe:8f:7b:3d:77:f9:05:03:
f4:81:3e:7d:6e:b1:3a:d9:26:37:2a:0a:63:a5:86:
a4:32:2c:91:2c:3f:d0:9f:01:a7:42:2e:e9:d2:82:
3d:44:a6:26:bc:46:02:1c:32:4a:a6:af:3a:c6:61:
07:31:c8:ea:20:f8:f9:2c:59:c1:aa:7e:b4:40:20:
4a:c7:9f:44:2f:1d:07:44:6a:68:23:6b:cc:89:9b:
8b:52:1e:e4:8c:62:7d:f8:79:ed:3e:44:9e:1f:f3:
5d:f7:1c:33:82:2d:31:ff:12:8c:af:31:37:59:a1:
e4:a7:0c:0d:94:2d:57:28:db:b0:81:13:ec:0f:35:
70:83:e0:71:41:9c:e4:1e:51:db:9d:f4:76:93:94:
6e:1b:a2:30:b5:a9:98:1a:15:d2:6a:7b:c0:85:17:
75:5e:87:e0:be:c3:b1:9a:b2:88:8a:06:9a:cb:5d:
bd:44:22:c9:88:43:0e:d4:7c:f5:91:68:a8:92:67:
4b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:03:61:2B:96:29:F4:CE:64:CC:2E:8F:CF:C5:E5:2E:70:A8:1E:08
X509v3 Authority Key Identifier:
keyid:80:FB:52:63:6A:9E:50:C0:88:68:E6:27:52:0A:1A:0D:8A:87:F0:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gPtSY2qeUMCIaOYnUgoaDYqH8EY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:e0:d5:0a:63:4f:e0:c6:ad:2d:a4:15:08:4f:23:5e:3a:b5:
2e:02:59:f5:42:57:42:73:bb:52:db:3e:84:cf:f2:17:8e:e7:
92:48:60:89:eb:0c:c2:66:7e:bf:17:c9:30:48:ca:e4:a1:36:
b4:9c:b6:35:50:d8:af:48:0d:c3:2a:a4:ec:e6:cc:6e:dd:41:
80:32:c9:45:03:b0:59:d7:8f:7f:c8:87:ba:21:c6:40:e9:07:
3c:58:7e:32:f3:07:3c:fc:41:6d:24:10:3d:46:9d:f3:4e:3f:
4c:ce:e2:4d:cd:ef:67:91:c1:47:98:f3:1c:fc:14:ab:a7:83:
21:76:1c:35:2c:08:81:b1:b3:47:4a:15:e6:ab:0a:7b:24:20:
cc:6b:51:ec:b8:3b:f0:b2:84:47:92:29:23:d1:1e:72:5e:47:
b7:2c:fa:97:78:e5:4f:a2:ed:60:73:eb:39:19:92:84:2b:3a:
80:b2:46:f8:a9:a6:97:4b:58:b0:b2:d6:cf:b2:68:6f:4f:3a:
55:3b:cb:03:48:79:77:ac:d8:9b:80:4b:19:bb:e5:72:ae:99:
83:85:c8:0c:51:45:8f:75:78:db:41:83:4f:9a:54:4f:6a:33:
7e:46:f7:86:0e:56:d4:ee:8a:ca:9c:28:c9:2a:9d:4e:76:d6:
e1:cf:7b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 11:25:36 2026 by rpki-client