
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.mft
File: gOknW25uvGrXWF12r7akALUULD8.mft (raw, json)
Hash identifier: dXPe7u3sLDD/bgGKE4vGVh5ts43WoBuuc6Y/emH0j2g=
Subject key identifier: B0:C5:B5:34:BA:1C:85:C1:64:88:E6:BD:4C:3E:09:09:7D:0C:56:15
Authority key identifier: 80:E9:27:5B:6E:6E:BC:6A:D7:58:5D:76:AF:B6:A4:00:B5:14:2C:3F
Certificate issuer: /CN=A91D313B/serialNumber=80E9275B6E6EBC6AD7585D76AFB6A400B5142C3F
Certificate serial: 01AC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gOknW25uvGrXWF12r7akALUULD8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.mft
Manifest number: 01A7
Signing time: Mon 19 Oct 2026 04:47:25 +0000
Manifest this update: Mon 19 Oct 2026 04:47:24 +0000
Manifest next update: Mon 26 Oct 2026 04:47:24 +0000
Files and hashes: 1: gOknW25uvGrXWF12r7akALUULD8.crl (hash: Nu+z+PsA/mjvDdNLZK9+9cd8wFLTad3pFg+CnzzyJ/g=)
2: 3446813047DC11EFA05E932EC4F9AE02.roa (hash: K4s4bQ+AZEMbINRSOhh8kAqaJQUKtCHKATxaJcI+fSc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.crl
rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gOknW25uvGrXWF12r7akALUULD8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 04:47:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 428 (0x1ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D313B, serialNumber=80E9275B6E6EBC6AD7585D76AFB6A400B5142C3F
Validity
Not Before: Oct 19 04:47:24 2026 GMT
Not After : Oct 26 04:47:24 2026 GMT
Subject: CN=6ad5a0dd-8e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2f:e9:0d:ad:cd:3a:d6:ac:79:65:b9:7b:07:
af:4f:48:81:c3:ed:9a:39:d3:9f:94:3d:82:97:27:
ee:de:a7:b1:cf:34:e9:f9:2f:8b:dc:52:da:da:a8:
38:be:e2:23:81:07:78:3d:54:47:be:a9:0b:60:34:
64:57:b2:73:1a:cc:c9:bc:a4:84:b9:87:8b:2b:f5:
27:89:b9:2c:d5:0d:c8:a1:e9:af:12:50:0c:f5:f3:
cd:fa:31:11:e6:bb:0a:46:85:fc:67:ec:64:aa:4f:
8a:08:c0:d3:67:35:f9:97:2e:71:8b:69:c0:72:b9:
02:e3:01:1f:47:89:85:4b:77:3c:f1:fb:e3:ae:e8:
36:19:1a:78:1a:3a:ba:e7:ba:06:cd:74:11:ba:71:
fc:8d:90:e1:40:61:90:ed:fe:f0:cd:0b:9e:93:e3:
20:de:7d:05:a7:c4:9e:de:ec:10:e3:51:49:03:78:
25:05:71:f8:8c:0a:48:35:2f:55:f2:65:8b:10:ef:
8b:e9:4c:ed:68:f5:b5:2b:ed:ce:e9:28:41:3e:53:
1a:ea:8f:33:6a:97:5c:35:a7:ac:fc:39:c2:5e:80:
9f:80:a6:a3:5b:42:3b:b8:0c:83:73:0e:91:4d:d6:
c4:60:49:9a:51:16:6c:7b:40:f1:43:56:16:58:3c:
9c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C5:B5:34:BA:1C:85:C1:64:88:E6:BD:4C:3E:09:09:7D:0C:56:15
X509v3 Authority Key Identifier:
keyid:80:E9:27:5B:6E:6E:BC:6A:D7:58:5D:76:AF:B6:A4:00:B5:14:2C:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gOknW25uvGrXWF12r7akALUULD8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:58:53:7c:c9:4b:c0:f2:42:fb:88:ba:25:7e:e2:88:2d:b5:
4b:ac:5e:53:eb:d8:49:9f:50:06:46:2d:52:56:b3:02:82:65:
fa:ca:52:c7:1b:ea:0b:1e:71:54:71:0b:73:75:20:6c:b4:d7:
23:16:4f:a3:63:82:33:53:b1:da:2b:2f:cc:94:d0:03:0a:8d:
07:3f:6a:55:02:0c:bc:60:d8:0c:dd:80:ba:d9:13:eb:93:a7:
7c:a7:f2:ec:8b:e1:12:f2:bb:2d:7c:f9:be:5b:bb:4b:61:19:
eb:96:9b:2b:74:8b:0b:2e:db:f2:79:2f:6e:60:72:5f:23:d3:
84:24:39:32:53:d0:9f:87:1a:d8:71:10:79:c7:1c:16:62:72:
65:5e:4b:45:60:e7:dd:a7:f8:4b:07:ae:36:14:00:68:b5:39:
45:44:08:a6:fb:70:6b:fc:5c:a6:35:fa:84:19:bc:70:6e:1b:
59:b9:19:d4:c9:77:03:cb:f4:4d:d7:15:21:32:e8:5e:28:3c:
03:f1:b9:7a:02:de:4d:23:af:39:ea:e8:2d:05:8c:90:b6:66:
ce:f7:17:23:55:75:61:4c:b9:c1:73:2b:d2:3b:43:aa:a1:16:
53:08:3a:54:0a:ed:b1:97:df:8f:57:62:f1:74:34:83:db:05:
13:70:5a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 19:34:33 2026 by rpki-client