
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.mft
File: gHwED6kB5dhpWmU03mbD1qC_vMU.mft (raw, json)
Hash identifier: zC1xn0+XbIfl1AD0MWFfT8a6E9Js9yuoBzeXoiCWgNU=
Subject key identifier: 38:45:C9:63:07:F5:B6:6A:8F:6F:33:BB:79:46:12:A2:73:AD:09:B8
Authority key identifier: 80:7C:04:0F:A9:01:E5:D8:69:5A:65:34:DE:66:C3:D6:A0:BF:BC:C5
Certificate issuer: /CN=A91BC3F1/serialNumber=807C040FA901E5D8695A6534DE66C3D6A0BFBCC5
Certificate serial: 01EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gHwED6kB5dhpWmU03mbD1qC_vMU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.mft
Manifest number: 01D5
Signing time: Thu 29 Oct 2026 04:20:19 +0000
Manifest this update: Thu 29 Oct 2026 04:20:18 +0000
Manifest next update: Thu 05 Nov 2026 04:20:18 +0000
Files and hashes: 1: gHwED6kB5dhpWmU03mbD1qC_vMU.crl (hash: YZVIzftJE9zQKlIxFeOS/CmgG9vmQpkOXgPcUKjjqT0=)
2: 7D9F83FE10FA11EFADBBC431C4F9AE02.roa (hash: KbP7kVzHWAr0cCL8qb5P7XMSVn4UE0itefeoDnYZT/Q=)
3: A697738410FA11EF9A068536C4F9AE02.roa (hash: lzeeMDb5p2SWBBeQKxNMB3dDJPfZPBC3dVUcHVXCC0U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.crl
rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gHwED6kB5dhpWmU03mbD1qC_vMU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 04:20:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 491 (0x1eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC3F1, serialNumber=807C040FA901E5D8695A6534DE66C3D6A0BFBCC5
Validity
Not Before: Oct 29 04:20:18 2026 GMT
Not After : Nov 5 04:20:18 2026 GMT
Subject: CN=6ae2c983-9ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c3:85:35:ac:c2:a3:38:8a:8e:e2:03:7d:4d:
2a:52:39:ec:8f:73:d2:1a:23:08:bb:9e:8d:29:e2:
1e:d7:3b:9e:c2:e2:d5:df:af:09:2b:c6:b9:64:70:
c8:c1:bb:b0:d3:be:f5:26:97:3b:c3:76:6d:1b:d7:
ab:f0:3b:06:c4:b4:6e:88:be:37:de:15:ab:19:ea:
e3:0c:5f:cd:50:4b:ab:40:df:ad:80:68:cd:5d:10:
f5:07:6c:48:22:61:50:d3:99:7d:35:7f:45:98:fd:
e0:02:f2:fe:9d:f0:cc:11:65:3c:38:0f:89:48:11:
06:dd:3c:68:26:49:74:13:f7:3b:d2:24:b6:7d:9b:
a6:ce:d7:35:0f:87:42:1c:4d:e3:ea:7e:f3:d4:9e:
08:e5:57:f6:bf:74:02:45:52:21:da:b6:27:bb:38:
9e:f2:c8:5c:84:54:0e:68:0b:e0:32:c4:26:a0:61:
af:ee:9f:ee:32:18:37:bb:d5:b3:6d:9f:d4:5b:40:
3b:ff:5c:d8:b8:ae:3e:a8:e3:62:c6:f1:84:92:8a:
f3:77:ea:f4:3c:43:7f:42:89:27:a3:76:64:fa:08:
20:32:55:68:6c:a1:28:fb:e6:c9:e4:91:56:3e:0a:
41:87:c2:4b:5e:c4:a1:29:9c:94:a6:f8:ce:7f:2c:
87:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:45:C9:63:07:F5:B6:6A:8F:6F:33:BB:79:46:12:A2:73:AD:09:B8
X509v3 Authority Key Identifier:
keyid:80:7C:04:0F:A9:01:E5:D8:69:5A:65:34:DE:66:C3:D6:A0:BF:BC:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gHwED6kB5dhpWmU03mbD1qC_vMU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:9a:4f:79:ed:df:06:73:1b:7b:bf:c3:14:8e:6d:67:83:05:
0f:ad:b0:aa:9d:52:e8:ac:a8:4b:3b:4a:58:47:d8:71:e9:98:
b0:9b:2c:42:29:7d:ff:27:ff:02:15:bd:17:22:0c:97:78:29:
aa:e0:52:99:ff:50:2d:ae:f1:71:24:43:99:0c:de:3b:87:ac:
f0:e8:04:69:11:75:c4:c0:a7:24:ba:2a:d2:25:47:9a:fd:7f:
36:0a:4e:80:7f:fb:cd:cd:76:ea:f5:43:fa:14:ac:da:98:36:
fe:e6:80:4d:57:03:67:88:d1:bc:ab:99:2b:93:f8:d5:ba:ab:
70:6c:f7:76:41:73:44:7d:43:db:d7:f5:f9:35:b6:be:44:f5:
b5:3b:26:fb:6f:1a:d6:ac:cd:ae:fb:79:ea:96:8e:82:8f:9f:
f1:60:9f:f8:d9:05:41:98:12:af:52:a5:ed:7d:e0:fd:7b:c2:
e6:fb:27:de:ae:51:4d:53:9f:9f:32:02:13:fe:32:70:31:fc:
66:ed:74:4f:9d:fb:90:f5:fe:d9:8e:18:26:b5:14:8e:da:a7:
b4:bc:0b:05:5d:60:87:50:37:57:b1:fc:1e:96:5b:b1:35:2b:
66:e0:ad:8c:38:72:bc:c3:89:d7:6b:84:88:ae:b9:8c:f3:19:
0c:85:da:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 16:03:31 2026 by rpki-client