
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.mft
File: gUM6Y8LXXQAyVSxCbENTPsrINRU.mft (raw, json)
Hash identifier: e5EdbbwOb2bGEeQuVOGmGctmWQIB2vOrwncDnmFWCu4=
Subject key identifier: 31:18:17:44:A8:24:B8:C8:6B:F7:BF:ED:A1:C6:34:D0:04:1A:7F:ED
Authority key identifier: 81:43:3A:63:C2:D7:5D:00:32:55:2C:42:6C:43:53:3E:CA:C8:35:15
Certificate issuer: /CN=A91F1AF5/serialNumber=81433A63C2D75D0032552C426C43533ECAC83515
Certificate serial: 0825
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUM6Y8LXXQAyVSxCbENTPsrINRU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.mft
Manifest number: 081D
Signing time: Tue 06 Oct 2026 21:17:59 +0000
Manifest this update: Tue 06 Oct 2026 21:17:58 +0000
Manifest next update: Tue 13 Oct 2026 21:17:58 +0000
Files and hashes: 1: gUM6Y8LXXQAyVSxCbENTPsrINRU.crl (hash: 00wqFQmXhQBE/0DuTkubB+BvqbsfHzzv7lTruE583Qg=)
2: DDFEB10C385E11EB8E85F467C4F9AE02.roa (hash: Zf96iP55f5Jtpq3Ou1kpv1F94L3YI94DnzVRT1WWO7c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.crl
rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUM6Y8LXXQAyVSxCbENTPsrINRU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 21:17:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2085 (0x825)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1AF5, serialNumber=81433A63C2D75D0032552C426C43533ECAC83515
Validity
Not Before: Oct 6 21:17:58 2026 GMT
Not After : Oct 13 21:17:58 2026 GMT
Subject: CN=6ac56587-7623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5d:69:43:9e:ae:2a:05:b2:08:b0:98:76:38:
a1:28:a7:71:18:7b:4b:0d:5e:c3:1a:8b:2c:44:4f:
54:ab:de:a7:14:99:bd:7f:c3:69:7c:64:9d:7d:c5:
a5:9f:e3:dd:06:64:cd:0e:8e:a6:6d:96:08:10:6f:
45:34:df:e3:14:39:29:d9:27:ce:ac:cf:eb:00:08:
26:22:8c:a5:ab:f2:63:2b:d2:cc:00:23:78:3f:84:
4f:0d:54:82:54:3c:23:67:94:70:ef:ea:07:53:09:
19:47:f0:fa:5a:37:2f:46:12:74:b5:d8:4a:20:52:
ba:7e:18:af:ab:90:b5:95:e9:3e:c6:bb:43:8c:00:
0a:d5:e8:2d:8c:bc:d0:27:f3:cc:1f:13:17:c8:88:
9d:f4:a8:e3:58:ed:76:c8:2a:c9:96:37:15:b1:80:
18:4d:95:a1:62:7f:f2:66:5e:75:ac:e0:f9:7b:6b:
0c:82:85:25:98:f2:0c:93:6d:82:2a:55:f2:df:a6:
74:e1:34:1f:d5:21:8a:fa:7a:5f:e9:5a:f7:86:07:
2a:ed:f1:e7:1c:ac:a3:c8:f4:07:2a:cb:4e:4c:07:
e5:81:8a:24:6e:1e:65:c1:05:ca:a1:27:34:47:5c:
f1:b9:34:22:c6:ec:d8:fa:dd:29:c5:e9:1f:2d:e5:
f5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:18:17:44:A8:24:B8:C8:6B:F7:BF:ED:A1:C6:34:D0:04:1A:7F:ED
X509v3 Authority Key Identifier:
keyid:81:43:3A:63:C2:D7:5D:00:32:55:2C:42:6C:43:53:3E:CA:C8:35:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUM6Y8LXXQAyVSxCbENTPsrINRU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:49:09:43:fe:97:69:0d:fa:34:af:1c:c6:64:72:0d:e7:b8:
31:06:30:b7:60:de:37:59:59:d9:2b:45:ec:aa:90:af:4a:dc:
ae:50:25:65:99:e1:9f:88:a7:e0:9a:46:bc:f3:00:56:13:d4:
38:88:7e:f7:f1:e5:ad:58:de:f7:7c:b6:24:50:a6:bc:3a:b3:
dc:a5:4b:83:00:49:52:4c:c6:96:73:ee:13:9f:e0:f2:1d:db:
fc:38:d5:a7:81:b4:fb:ac:57:b6:08:14:db:c9:04:c4:30:a5:
69:7b:bf:55:da:c1:68:76:41:62:7e:97:d7:92:da:94:3d:5f:
68:11:07:ba:fe:8d:99:5b:51:7a:87:4b:26:a6:a3:37:62:a9:
d7:cc:e7:f6:68:3b:f1:fd:3b:e5:54:d0:52:f9:cb:15:13:bf:
4f:d3:df:fb:e8:aa:81:ba:bd:c3:7b:b1:6f:e3:af:c8:e1:37:
5c:36:c5:49:95:0a:31:5b:f8:55:d7:1b:4b:af:32:e9:a6:8e:
d3:c5:bf:da:fd:c1:f2:95:60:ea:4a:ad:75:8d:e9:5d:09:16:
1f:05:25:68:d9:e8:5b:48:29:02:78:e0:ac:0b:af:36:22:14:
6e:dd:30:2a:40:97:7e:ce:ac:dd:1f:eb:4e:55:15:3d:e5:7c:
6d:16:7e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 01:13:37 2026 by rpki-client