
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5988/A316C65E662C11F1B0BAC73CA147A888/gvYVW7anmmgrwbbkztF-7HtUXjE.mft
File: gvYVW7anmmgrwbbkztF-7HtUXjE.mft (raw, json)
Hash identifier: QIJ4kdyv4RdSi33BX538XvUMPiq/oit/jb+Szkopn9k=
Subject key identifier: 48:A2:88:ED:79:2D:A8:A1:88:73:5D:4F:34:CA:28:67:44:61:78:66
Authority key identifier: 82:F6:15:5B:B6:A7:9A:68:2B:C1:B6:E4:CE:D1:7E:EC:7B:54:5E:31
Certificate issuer: /CN=A91E5988/serialNumber=82F6155BB6A79A682BC1B6E4CED17EEC7B545E31
Certificate serial: 25
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gvYVW7anmmgrwbbkztF-7HtUXjE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5988/A316C65E662C11F1B0BAC73CA147A888/gvYVW7anmmgrwbbkztF-7HtUXjE.mft
Manifest number: 24
Signing time: Wed 19 Aug 2026 09:35:08 +0000
Manifest this update: Wed 19 Aug 2026 09:35:08 +0000
Manifest next update: Wed 26 Aug 2026 09:35:07 +0000
Files and hashes: 1: gvYVW7anmmgrwbbkztF-7HtUXjE.crl (hash: xXA1odotr1kMUN2Gkm+hwyfO6QfQV/Ddmwlj7jiKQLE=)
2: 62C23538662D11F1A5BC4310A247A888.roa (hash: o2DwrfThWmBts2qM7FHUBBrRqwsSlJYkQtksSisltek=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5988/A316C65E662C11F1B0BAC73CA147A888/gvYVW7anmmgrwbbkztF-7HtUXjE.crl
rsync://rpki.apnic.net/member_repository/A91E5988/A316C65E662C11F1B0BAC73CA147A888/gvYVW7anmmgrwbbkztF-7HtUXjE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gvYVW7anmmgrwbbkztF-7HtUXjE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:35:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5988, serialNumber=82F6155BB6A79A682BC1B6E4CED17EEC7B545E31
Validity
Not Before: Aug 19 09:35:08 2026 GMT
Not After : Aug 26 09:35:07 2026 GMT
Subject: CN=6a8578cc-53e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3c:01:49:29:06:0d:74:fa:56:21:c1:93:c4:
d5:35:bd:ca:04:4f:50:52:eb:06:80:f1:5b:1d:70:
c5:6b:6a:eb:b6:08:84:01:10:2e:19:78:84:cf:b2:
dd:30:ef:fc:b4:ca:91:03:50:24:b5:fc:2d:09:20:
69:1f:d4:6b:4e:7d:de:76:89:4d:45:27:32:4a:0f:
83:0a:a9:35:0a:9b:36:05:a0:2f:d7:b3:a8:f7:dd:
cc:03:37:5f:f6:91:b8:80:d4:7e:c3:4a:a4:ae:77:
a6:19:c3:52:d8:4a:6c:c1:36:aa:92:c6:aa:97:a0:
4f:4c:4a:8f:ce:b0:6d:18:43:bd:b9:7a:c4:41:87:
c1:c8:2b:0b:97:09:ea:9d:6e:54:4e:9b:16:fc:21:
6e:20:8e:9e:25:0e:4c:45:6f:c1:82:8b:82:09:a1:
88:1c:f7:50:a8:d9:b5:60:dd:c7:ab:eb:f2:c8:17:
84:d9:2d:e4:8c:09:cc:ba:2d:30:fa:dd:73:6c:1e:
9a:e3:3d:96:fa:ab:34:83:d0:4c:44:75:9c:34:ae:
26:47:3f:a8:2b:98:13:06:5e:ad:3f:c5:10:fc:c6:
bc:3e:39:6f:ff:fb:3d:0c:50:e1:2c:a8:b9:f8:cb:
90:1c:d1:e9:e1:0b:c8:85:9d:7e:61:e8:86:31:7c:
f9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A2:88:ED:79:2D:A8:A1:88:73:5D:4F:34:CA:28:67:44:61:78:66
X509v3 Authority Key Identifier:
keyid:82:F6:15:5B:B6:A7:9A:68:2B:C1:B6:E4:CE:D1:7E:EC:7B:54:5E:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5988/A316C65E662C11F1B0BAC73CA147A888/gvYVW7anmmgrwbbkztF-7HtUXjE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gvYVW7anmmgrwbbkztF-7HtUXjE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5988/A316C65E662C11F1B0BAC73CA147A888/gvYVW7anmmgrwbbkztF-7HtUXjE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:65:9c:3a:5b:4d:dd:e0:6d:fc:ed:e0:69:e8:f7:ac:65:ce:
ed:24:65:cb:8d:50:29:db:c3:e8:fe:fe:b9:20:d2:43:d3:ad:
1f:aa:80:58:64:57:95:03:60:e5:97:f2:86:e0:32:d0:ee:1c:
89:03:5f:99:75:41:97:fb:39:ef:69:80:b4:ec:b9:71:24:5f:
bd:ae:01:e0:3b:cb:6f:0b:7f:dc:57:c1:11:69:03:94:7b:03:
1a:18:06:bd:c0:f3:7b:8c:cd:88:9c:b9:b8:25:c7:bd:1b:05:
1e:f9:3b:45:5b:0f:36:17:4d:58:ff:17:1c:36:6a:7d:77:82:
8d:19:72:88:fe:f7:a7:5e:e2:75:32:3f:43:20:0d:06:c8:1b:
e9:47:85:8c:7c:4c:6c:20:46:32:2b:3e:bb:77:08:7a:5d:fe:
41:46:5b:33:3b:35:1f:31:d6:68:9b:7b:59:33:4d:87:67:0f:
98:66:1c:e6:3d:52:3f:ef:a4:70:65:be:4c:74:ea:d3:4f:cf:
65:c9:de:98:35:ec:79:c2:e0:e9:19:f4:10:90:02:c2:ff:a1:
9a:bc:21:4b:55:2c:08:cd:f0:36:27:a7:c3:fe:e6:42:a9:63:
d8:f8:a9:9b:0e:f1:c4:7e:21:68:59:de:fa:d8:68:4a:3b:3c:
af:66:fd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:08:11 2026 by rpki-client