
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.mft
File: gHwED6kB5dhpWmU03mbD1qC_vMU.mft (raw, json)
Hash identifier: /5cHn6KVDm2/gm8GQkRIGZM+tUcqNlqLhwDoxmEZnHU=
Subject key identifier: D6:4F:1E:D6:1C:28:B5:D0:42:AC:79:3C:AF:40:5C:E4:3A:05:C5:F6
Authority key identifier: 80:7C:04:0F:A9:01:E5:D8:69:5A:65:34:DE:66:C3:D6:A0:BF:BC:C5
Certificate issuer: /CN=A91BC3F1/serialNumber=807C040FA901E5D8695A6534DE66C3D6A0BFBCC5
Certificate serial: 01EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gHwED6kB5dhpWmU03mbD1qC_vMU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.mft
Manifest number: 01D4
Signing time: Tue 27 Oct 2026 03:56:36 +0000
Manifest this update: Tue 27 Oct 2026 03:56:36 +0000
Manifest next update: Tue 03 Nov 2026 03:56:36 +0000
Files and hashes: 1: gHwED6kB5dhpWmU03mbD1qC_vMU.crl (hash: ATxUmcgyjqAqWTQfc+IKvedZhsAF6/eA9alTLVxxoeA=)
2: A697738410FA11EF9A068536C4F9AE02.roa (hash: lzeeMDb5p2SWBBeQKxNMB3dDJPfZPBC3dVUcHVXCC0U=)
3: 7D9F83FE10FA11EFADBBC431C4F9AE02.roa (hash: KbP7kVzHWAr0cCL8qb5P7XMSVn4UE0itefeoDnYZT/Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.crl
rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gHwED6kB5dhpWmU03mbD1qC_vMU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 03:56:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 490 (0x1ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC3F1, serialNumber=807C040FA901E5D8695A6534DE66C3D6A0BFBCC5
Validity
Not Before: Oct 27 03:56:36 2026 GMT
Not After : Nov 3 03:56:36 2026 GMT
Subject: CN=6ae020f4-aa18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e3:71:09:4d:e5:54:4a:e1:71:63:2d:90:2c:
e8:b2:ff:9b:33:02:e8:22:37:e0:14:4f:4a:12:9b:
bd:5c:17:25:8d:db:6f:03:09:b4:82:76:76:83:77:
32:6b:65:40:73:1c:29:6e:16:4d:14:84:83:02:25:
da:ae:f1:70:37:eb:78:07:57:7b:bb:a7:6c:6c:e7:
4e:13:eb:65:de:7e:56:ed:ad:0f:1a:be:2a:5f:d2:
cf:06:46:93:c9:23:55:92:55:97:86:5f:37:82:91:
2c:7b:c1:b0:78:4d:43:0b:37:db:ae:98:4f:e2:4c:
f0:9f:27:24:f4:47:9a:bb:e9:51:93:c6:e9:39:a0:
0d:78:8b:0b:69:dc:a5:05:2c:b2:5c:18:e1:43:04:
d1:04:15:65:1a:a8:b0:fb:b7:0b:30:38:c2:77:52:
0b:f9:fb:99:a9:46:89:24:9a:2b:8e:2f:2f:63:82:
54:e9:e1:52:23:7a:b7:8f:ee:d6:97:19:35:27:f1:
40:2f:42:91:7b:70:a0:7f:ee:8d:64:5c:25:57:2a:
75:e8:b7:70:7c:41:da:fc:68:93:28:0c:0e:e5:fc:
7c:4e:0f:29:49:22:5a:b8:25:53:c8:75:a9:e0:df:
65:b2:a0:ae:cb:98:16:b7:22:04:29:b7:4b:51:dd:
ea:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:4F:1E:D6:1C:28:B5:D0:42:AC:79:3C:AF:40:5C:E4:3A:05:C5:F6
X509v3 Authority Key Identifier:
keyid:80:7C:04:0F:A9:01:E5:D8:69:5A:65:34:DE:66:C3:D6:A0:BF:BC:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gHwED6kB5dhpWmU03mbD1qC_vMU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:02:f9:65:1f:02:fc:77:3c:65:bf:01:b2:a0:82:7c:0d:ad:
11:73:e9:dc:0c:f8:1e:9f:15:a7:84:c7:97:60:57:b3:00:ab:
31:94:67:ee:c2:f6:f3:32:ef:80:95:ec:fc:b1:28:db:12:1d:
d0:18:f4:d0:af:16:7b:d1:7e:00:44:74:e7:10:ef:c0:e8:aa:
11:c5:52:17:bc:50:51:28:d9:67:4e:62:c6:88:59:ec:25:f0:
97:1d:91:ad:65:8c:95:7c:1e:d7:78:b4:1c:55:e1:c7:e1:7b:
7d:a0:4f:7c:be:40:64:c0:71:4f:67:83:c7:ad:3c:5f:c9:70:
4c:5c:79:cd:d1:47:78:39:d9:1b:66:b8:01:c8:d1:43:5b:f5:
8d:1f:cf:c5:9c:65:84:8c:a2:63:20:85:5d:59:6d:fe:81:0e:
5d:8a:a0:e1:c5:bf:c9:9d:46:f6:ce:74:85:e3:d4:86:22:5f:
84:2b:da:7f:fa:c0:d4:d7:5d:2c:47:8f:05:e4:32:85:70:54:
1e:8c:1c:f6:9a:fa:df:0a:17:6f:79:7c:13:34:fd:8e:35:b9:
40:a1:13:0d:09:44:c1:ac:65:00:13:cb:7f:6d:82:b8:af:3a:
b7:24:40:1e:b8:3b:7c:da:aa:94:41:cc:02:4b:64:9b:9e:54:
e0:1a:59:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:36:30 2026 by rpki-client