
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.mft
File: Gv1CZeY9DL91I27ZaGrk8AFV_34.mft (raw, json)
Hash identifier: FJcM/xrlcJEa4TstAHdmCeMAeMTOx1bLQbvvCi2ukxQ=
Subject key identifier: 18:92:9C:C8:DC:FF:23:10:53:91:8A:C5:0C:3D:54:09:4D:40:74:C5
Authority key identifier: 1A:FD:42:65:E6:3D:0C:BF:75:23:6E:D9:68:6A:E4:F0:01:55:FF:7E
Certificate issuer: /CN=A91CBA26/serialNumber=1AFD4265E63D0CBF75236ED9686AE4F00155FF7E
Certificate serial: 1A3E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.mft
Manifest number: 1A27
Signing time: Thu 22 Oct 2026 16:22:35 +0000
Manifest this update: Thu 22 Oct 2026 16:22:34 +0000
Manifest next update: Thu 29 Oct 2026 16:22:34 +0000
Files and hashes: 1: Gv1CZeY9DL91I27ZaGrk8AFV_34.crl (hash: UpNqpsOf/O7icbdueZKQOEYr9S3+BIk91bQd7seE5wM=)
2: FFE0F998101511EDA7D8F271C4F9AE02.roa (hash: ZQpN4eFzD7d15/pql3WL2/ZjZDYkswUqki4AmBgOAPo=)
3: EFD9938E2FAF11EDBE0A8C10C4F9AE02.roa (hash: 7rH2iv1QGdm3csS4MeZCYlgwaz57wBm4i8OcDaisDdc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.crl
rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 29 Oct 2026 16:22:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6718 (0x1a3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CBA26, serialNumber=1AFD4265E63D0CBF75236ED9686AE4F00155FF7E
Validity
Not Before: Oct 22 16:22:34 2026 GMT
Not After : Oct 29 16:22:34 2026 GMT
Subject: CN=6ada384b-1ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:69:d8:b9:2b:6e:30:1f:11:fb:40:f4:7f:e8:
18:fd:fc:3e:a8:1a:f8:dc:aa:c9:c1:c2:e4:58:61:
27:35:a8:97:c7:7d:29:e2:89:6d:21:a2:66:70:85:
4c:52:31:eb:b8:93:74:9c:5a:f0:4a:b5:eb:98:32:
1d:b2:a9:35:d0:f7:d7:ed:0d:d7:65:8c:1a:2d:36:
e0:da:1e:3b:0f:23:49:3a:f9:51:55:33:62:11:1c:
77:a6:28:27:07:cb:17:1e:dd:75:e9:32:4b:42:9b:
67:22:42:16:c6:70:70:bf:8f:29:83:34:2a:37:f7:
1b:1a:b7:6f:aa:0b:44:a5:94:a1:de:c6:e7:f5:db:
75:bd:3d:fc:9b:98:1d:36:61:44:ac:3a:a3:38:ec:
f2:47:8a:df:0d:b9:45:39:67:b7:23:2d:17:b6:31:
ae:b3:88:5b:a3:cc:df:1c:24:70:94:cf:e4:20:5d:
fe:a7:f8:a5:d3:35:7c:16:76:e8:fb:5e:b5:ea:74:
84:7c:98:4f:2f:dd:aa:4b:fe:c4:ed:71:cc:e3:84:
c7:38:85:e3:38:93:74:e4:d4:03:6a:e9:db:f0:05:
6a:77:e8:e4:1f:92:9f:75:8a:0c:4b:71:f3:80:05:
8b:2e:a1:fb:8c:39:a3:c6:5b:19:70:d2:5e:83:d5:
50:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:92:9C:C8:DC:FF:23:10:53:91:8A:C5:0C:3D:54:09:4D:40:74:C5
X509v3 Authority Key Identifier:
keyid:1A:FD:42:65:E6:3D:0C:BF:75:23:6E:D9:68:6A:E4:F0:01:55:FF:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:f9:fa:fd:a7:9e:e7:49:d8:1f:6b:91:a9:a0:7d:f5:1a:2b:
3b:fb:d0:4b:a6:69:96:09:75:de:bd:50:2b:19:a4:a6:0f:34:
94:c9:83:8f:8a:69:d4:9f:4f:ed:f8:75:19:70:f7:e8:6a:42:
74:39:dc:04:ff:ac:a7:d0:d6:87:8f:07:b1:03:b0:f6:d6:22:
03:e8:fa:c0:d3:ae:e7:f8:c1:25:06:0a:ed:09:ec:ac:e9:5a:
c3:63:ec:25:cf:71:d7:f0:43:86:53:7f:9a:d3:02:2b:60:0c:
19:6f:63:6a:03:8f:d8:27:ff:c1:31:ea:7e:b8:fc:ba:44:fc:
ce:cb:51:c9:1d:cd:da:17:9f:cc:1a:a6:da:02:df:02:12:89:
4e:f7:93:ce:76:8c:0e:30:1a:71:cc:e3:74:22:e0:ab:3c:45:
fd:9d:8e:dd:4a:f0:9e:94:73:fb:0f:f4:13:7b:e6:9b:d7:e9:
af:ea:d5:65:3a:36:57:c2:c4:22:bc:d1:96:e9:2d:a2:eb:e3:
6c:c0:c5:96:58:8e:57:ab:71:5c:1f:4e:90:33:a7:63:1d:b7:
e8:bf:ac:09:4d:0b:25:e1:1e:c8:6c:70:90:bc:21:d2:03:5c:
02:a6:ea:79:86:c3:ba:0f:19:a1:d1:32:24:84:e8:10:76:27:
39:57:91:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 06:56:58 2026 by rpki-client