
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F3695/9FA5C852A29B11F1A69892D93211F970/gSgm5X8SSW8LsT-ypYMZiqsnfZk.mft
File: gSgm5X8SSW8LsT-ypYMZiqsnfZk.mft (raw, json)
Hash identifier: v+A/hI/Dkhm+2lUPFm4yBX+0H1jxDu+7CNYmtYLvjaA=
Subject key identifier: D2:2A:C4:90:8E:FE:03:D9:D7:AE:55:02:7A:88:41:04:FF:E9:E0:60
Authority key identifier: 81:28:26:E5:7F:12:49:6F:0B:B1:3F:B2:A5:83:19:8A:AB:27:7D:99
Certificate issuer: /CN=A91F3695/serialNumber=812826E57F12496F0BB13FB2A583198AAB277D99
Certificate serial: 1E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gSgm5X8SSW8LsT-ypYMZiqsnfZk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3695/9FA5C852A29B11F1A69892D93211F970/gSgm5X8SSW8LsT-ypYMZiqsnfZk.mft
Manifest number: 1D
Signing time: Mon 19 Oct 2026 09:42:32 +0000
Manifest this update: Mon 19 Oct 2026 09:42:31 +0000
Manifest next update: Mon 26 Oct 2026 09:42:31 +0000
Files and hashes: 1: gSgm5X8SSW8LsT-ypYMZiqsnfZk.crl (hash: M4M6q0SkHoX9PPCh+BJJ1eNxljsb/WmgpZfJphEIY2Q=)
2: 64898DB6A29C11F19776C6F43211F970.roa (hash: hyemipf6fhL37ipYH+N7rWJpNf7ZwBokBc6dwKfB0oA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3695/9FA5C852A29B11F1A69892D93211F970/gSgm5X8SSW8LsT-ypYMZiqsnfZk.crl
rsync://rpki.apnic.net/member_repository/A91F3695/9FA5C852A29B11F1A69892D93211F970/gSgm5X8SSW8LsT-ypYMZiqsnfZk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gSgm5X8SSW8LsT-ypYMZiqsnfZk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 09:42:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30 (0x1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3695, serialNumber=812826E57F12496F0BB13FB2A583198AAB277D99
Validity
Not Before: Oct 19 09:42:31 2026 GMT
Not After : Oct 26 09:42:31 2026 GMT
Subject: CN=6ad5e607-afe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4e:36:b7:a1:96:29:2c:00:5c:79:ed:1f:3b:
b6:a5:3b:c1:cf:cd:30:30:3f:72:e9:30:bc:33:06:
72:0f:18:25:ab:af:a5:c2:68:79:54:f4:df:b0:45:
95:cc:05:07:b7:65:ad:b3:3e:64:6c:dd:f6:d3:0c:
f5:d9:7a:db:aa:fc:df:d5:f1:fc:9f:03:95:ba:a5:
ab:93:e5:70:a9:4c:ba:fe:df:e0:58:03:c0:e6:5f:
3d:cc:7c:10:e6:b6:b2:68:4c:c3:ca:15:19:50:87:
ed:7f:96:1a:19:12:fd:a3:3c:e7:11:7a:0c:9d:9d:
c5:56:cf:80:38:66:76:fa:51:f6:33:c3:69:a5:18:
84:ec:7b:77:d5:4d:56:6b:81:a1:90:ac:f3:05:f5:
9d:50:d6:86:b5:e0:b0:db:a0:28:89:45:56:84:63:
04:4e:fc:9a:04:13:01:88:72:30:90:1a:21:c9:d6:
66:05:1c:67:c8:3f:f9:70:b3:88:ad:fa:c9:d0:c0:
03:11:23:fe:0c:c7:d8:8e:b5:ba:ac:81:ed:89:19:
1d:0f:0e:98:9b:c4:6a:93:7f:5a:f8:84:3f:8b:d3:
9a:19:b0:b0:23:bf:5d:58:0e:b9:d1:b3:c7:43:a3:
a9:f4:b9:a0:b9:15:71:3f:73:94:1a:06:73:88:39:
1f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:2A:C4:90:8E:FE:03:D9:D7:AE:55:02:7A:88:41:04:FF:E9:E0:60
X509v3 Authority Key Identifier:
keyid:81:28:26:E5:7F:12:49:6F:0B:B1:3F:B2:A5:83:19:8A:AB:27:7D:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3695/9FA5C852A29B11F1A69892D93211F970/gSgm5X8SSW8LsT-ypYMZiqsnfZk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gSgm5X8SSW8LsT-ypYMZiqsnfZk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3695/9FA5C852A29B11F1A69892D93211F970/gSgm5X8SSW8LsT-ypYMZiqsnfZk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:9f:13:d8:4e:c9:db:e8:65:ea:f4:85:57:25:1b:c3:ec:9f:
e4:5c:95:fd:65:14:24:b8:97:f2:d4:e7:69:f3:bf:b6:e6:ad:
1c:52:10:94:09:d1:ed:ea:08:94:1e:48:23:1e:64:1c:dd:e8:
2a:ac:68:5f:ee:2f:0f:20:7c:12:59:a9:80:9a:06:df:9b:bd:
70:12:c8:81:5f:44:e6:e8:20:4e:c3:7a:0e:e8:e1:ba:d0:f2:
4f:91:d0:ec:c0:8c:32:05:45:3d:9c:7f:d2:48:79:30:44:dc:
65:ba:cf:85:f0:19:58:a4:b7:d1:43:58:8b:4d:23:62:82:41:
74:5f:10:a1:4d:c1:b6:94:04:f9:13:ae:07:68:53:97:84:4c:
af:1b:55:7b:81:c0:2b:19:7b:52:18:c0:e0:8b:01:0f:2a:ab:
1f:1a:e7:2d:75:20:be:91:ab:41:f6:8d:de:f3:a9:cf:07:82:
3b:d5:10:a0:e2:3a:a4:dc:60:c3:7d:4a:ad:b6:8b:71:1f:f2:
8a:b6:29:1f:8e:cf:37:2d:fe:05:c8:60:bd:d4:07:50:91:88:
c6:1c:6b:a1:11:b0:e4:09:6f:9f:b4:91:74:fc:9e:f4:c7:5e:
ed:d1:59:bc:f5:2d:b9:61:b4:5a:c2:6c:83:2f:32:d4:2c:e8:
62:3d:06:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 05:06:15 2026 by rpki-client