
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.mft
File: gUM6Y8LXXQAyVSxCbENTPsrINRU.mft (raw, json)
Hash identifier: /2ExoASz+IZOURudAglJ8STDHezgFXQT/9nxjgIUvMI=
Subject key identifier: 07:FD:D7:8E:7D:47:37:58:8F:8B:7A:81:78:CC:FB:78:90:DC:BD:87
Authority key identifier: 81:43:3A:63:C2:D7:5D:00:32:55:2C:42:6C:43:53:3E:CA:C8:35:15
Certificate issuer: /CN=A91F1AF5/serialNumber=81433A63C2D75D0032552C426C43533ECAC83515
Certificate serial: 07C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUM6Y8LXXQAyVSxCbENTPsrINRU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.mft
Manifest number: 07BF
Signing time: Sat 04 Apr 2026 21:11:56 +0000
Manifest this update: Sat 04 Apr 2026 21:11:55 +0000
Manifest next update: Sat 11 Apr 2026 21:11:55 +0000
Files and hashes: 1: gUM6Y8LXXQAyVSxCbENTPsrINRU.crl (hash: en9QFdJhx/1NLkZTOAE+D4uoWQsfY1eMXxDlUxwkaNU=)
2: DDFEB10C385E11EB8E85F467C4F9AE02.roa (hash: Zf96iP55f5Jtpq3Ou1kpv1F94L3YI94DnzVRT1WWO7c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.crl
rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUM6Y8LXXQAyVSxCbENTPsrINRU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 21:11:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1991 (0x7c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1AF5, serialNumber=81433A63C2D75D0032552C426C43533ECAC83515
Validity
Not Before: Apr 4 21:11:55 2026 GMT
Not After : Apr 11 21:11:55 2026 GMT
Subject: CN=69d17e9c-c820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bb:60:fa:e8:e8:29:fe:29:4f:2e:ad:85:45:
26:7a:55:c8:a0:e1:68:53:c2:b8:bf:8c:85:fb:b6:
32:89:71:47:4b:5c:f3:e0:9f:03:07:d5:98:54:06:
09:99:97:09:7e:86:c6:90:c3:09:12:57:b8:ad:86:
27:4a:da:7d:7d:3c:45:fc:46:a7:ac:a9:b4:91:b7:
b9:cb:09:2f:3f:fd:7f:fd:af:e2:f3:fe:9c:eb:06:
d4:16:35:30:52:82:ee:ce:26:05:e3:36:f3:ba:55:
e3:99:4a:bb:1e:52:0e:f1:39:d4:f8:8b:f8:d9:f2:
b7:a4:5e:2f:f8:76:5b:cf:dc:01:1d:00:91:e3:81:
c2:ca:b0:f1:70:ce:50:97:78:d2:fe:a0:4b:65:5d:
4d:24:56:2c:b0:ef:82:cf:8d:c2:af:84:d5:60:b8:
c5:50:69:60:c7:47:43:c4:8d:37:f3:b7:cc:b7:e5:
c5:eb:3e:2f:79:91:9c:3a:6f:fa:02:83:f1:79:26:
e5:cf:f3:d9:7d:8a:f3:53:2f:62:bc:6c:48:7c:28:
68:c6:76:28:d7:7f:24:fb:a9:c0:fd:c0:37:db:c1:
a3:55:c2:87:2f:7e:97:b5:4d:8c:06:d1:6a:d9:5c:
92:07:5f:6a:5f:e6:25:b6:8a:c0:02:33:df:25:6d:
bb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FD:D7:8E:7D:47:37:58:8F:8B:7A:81:78:CC:FB:78:90:DC:BD:87
X509v3 Authority Key Identifier:
keyid:81:43:3A:63:C2:D7:5D:00:32:55:2C:42:6C:43:53:3E:CA:C8:35:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUM6Y8LXXQAyVSxCbENTPsrINRU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:23:25:26:08:7e:7a:bd:3b:f5:e2:71:e6:61:ef:aa:b2:17:
e2:aa:b2:0f:79:eb:66:7f:12:b5:3c:85:8b:cc:2c:6a:2d:f6:
9c:1f:84:82:42:0f:87:10:d9:9f:ff:24:28:61:91:03:9f:77:
c4:83:1d:e1:5b:2a:52:a9:62:76:a9:85:18:dc:c2:3f:76:c9:
56:b4:f1:12:c3:09:83:c9:fc:26:f6:7c:3c:bd:f1:1c:59:ee:
85:9a:6d:29:aa:1b:4e:1f:df:a7:85:24:4a:2a:20:3e:f6:a7:
ca:a1:fc:0a:86:42:13:26:65:aa:3f:7c:44:e4:26:ef:99:d6:
7e:40:9b:17:f8:df:dc:d7:be:0a:b4:d6:39:11:0c:54:96:48:
98:ea:c2:a8:eb:69:8f:60:ce:2d:af:70:5b:14:f9:7d:0b:33:
dd:be:26:99:36:ff:ec:23:df:c3:84:79:ed:7a:e0:e9:2a:2f:
3a:b0:93:f1:e8:ac:46:12:26:8f:20:44:d4:ab:09:d2:7c:41:
ab:be:82:9c:18:2f:72:9c:09:a2:f4:11:c9:5c:44:39:f5:2e:
75:67:c0:92:30:ac:52:80:80:58:9d:a4:04:a9:66:e6:05:e1:
db:ae:8c:07:19:97:94:ad:91:32:9f:25:d8:c0:32:78:83:24:
33:41:14:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:31:00 2026 by rpki-client