
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.mft
File: GkhD6J8kRLLN24EYqoovRBgOhJg.mft (raw, json)
Hash identifier: JhND7ruq3V5w3o0dQcgDXh5MePIy1H1afjjQnhwr/fQ=
Subject key identifier: 78:36:1A:3B:DA:DA:9C:20:7A:D7:2D:4D:6E:46:65:7A:D2:F8:B2:73
Authority key identifier: 1A:48:43:E8:9F:24:44:B2:CD:DB:81:18:AA:8A:2F:44:18:0E:84:98
Certificate issuer: /CN=A91F5280/serialNumber=1A4843E89F2444B2CDDB8118AA8A2F44180E8498
Certificate serial: 0280
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkhD6J8kRLLN24EYqoovRBgOhJg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.mft
Manifest number: 0277
Signing time: Wed 07 Oct 2026 02:27:54 +0000
Manifest this update: Wed 07 Oct 2026 02:27:53 +0000
Manifest next update: Wed 14 Oct 2026 02:27:53 +0000
Files and hashes: 1: GkhD6J8kRLLN24EYqoovRBgOhJg.crl (hash: lkpULiRTY7OTqMGaNFDQ0R/tT12oTKxC9wsA3UrFXt4=)
2: B5569B88096311EE9ECB644DC4F9AE02.roa (hash: 4HF0DTPBSH5S3QjwkCb71T/4b+8A54VUugU3EtAjksc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.crl
rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkhD6J8kRLLN24EYqoovRBgOhJg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 02:27:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 640 (0x280)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5280, serialNumber=1A4843E89F2444B2CDDB8118AA8A2F44180E8498
Validity
Not Before: Oct 7 02:27:53 2026 GMT
Not After : Oct 14 02:27:53 2026 GMT
Subject: CN=6ac5ae29-be79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5b:5b:aa:11:7e:4d:36:8d:b2:4d:90:8c:f6:
82:25:1a:d0:7f:f9:f6:ba:a6:6f:b5:e5:4d:0f:39:
ad:47:3e:44:85:70:69:b0:62:c7:a3:d9:fe:e8:39:
62:1e:96:f3:fd:81:57:9b:0b:78:e9:0e:14:99:8b:
13:53:b0:bd:5a:09:82:f4:60:aa:c9:ff:83:15:2f:
3b:77:76:ec:6d:6a:05:ab:07:1b:68:81:ee:96:b0:
e3:3b:24:37:20:0a:98:24:0a:e7:a6:2f:79:78:55:
a5:e6:87:b6:6a:2a:04:04:4e:79:84:36:f2:3d:8e:
ef:cb:89:e2:c5:d3:6f:62:76:67:4d:e6:11:56:eb:
f2:f0:6f:39:4e:85:f6:38:4d:89:61:24:f7:cf:c1:
e8:e5:86:cf:35:55:45:4a:03:48:5a:fa:6c:9e:61:
ee:7d:2b:ce:33:c4:93:66:5d:ac:d1:7f:e2:cc:d5:
3f:9c:45:6d:7e:1e:f0:1d:1b:65:fb:af:e4:86:17:
31:af:78:46:1e:96:4c:a9:23:6a:46:41:04:d3:10:
7d:32:5c:fe:6a:87:c9:22:5c:4e:50:1d:c9:58:c4:
b5:13:bc:37:6b:12:6f:06:0f:89:bc:b8:35:a3:96:
09:31:f4:08:5a:81:a1:f8:17:d8:34:42:3d:a1:df:
85:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:36:1A:3B:DA:DA:9C:20:7A:D7:2D:4D:6E:46:65:7A:D2:F8:B2:73
X509v3 Authority Key Identifier:
keyid:1A:48:43:E8:9F:24:44:B2:CD:DB:81:18:AA:8A:2F:44:18:0E:84:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkhD6J8kRLLN24EYqoovRBgOhJg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:dd:3b:a6:b4:64:db:a3:e8:b7:15:71:71:3e:24:a6:3d:5b:
97:12:c9:4a:a9:7e:7f:26:52:e5:30:42:34:7b:66:77:9b:9c:
b7:48:12:94:17:04:2c:94:2e:42:53:3d:ca:ef:03:67:6c:7f:
52:ca:b1:56:18:49:a8:6e:9d:07:d5:7a:26:56:0c:1e:38:2e:
4f:c7:c4:eb:c6:3c:b4:56:76:73:aa:35:9b:37:ba:b4:3c:f3:
9a:29:67:0c:89:84:c0:b5:06:f3:e3:50:ba:3c:0f:92:8f:60:
8e:88:31:60:d1:01:0b:67:3a:a2:8f:5f:e3:5f:09:b7:c1:fc:
e5:91:00:2d:6f:76:72:9a:f2:8b:71:18:ec:37:45:53:19:8e:
9a:64:ef:5d:f5:28:82:a4:62:0d:6c:14:0c:c3:45:c0:1e:33:
da:0a:22:12:fe:79:7e:53:35:40:a9:e6:89:6c:20:a1:ef:09:
3d:cd:27:d3:a4:20:ef:01:59:52:11:95:6d:f5:61:f9:63:c7:
c5:b9:fa:24:0b:8f:35:ef:a3:b7:c4:93:ff:a7:e8:fa:70:ac:
83:59:b6:e0:c1:3f:2d:fd:c3:be:b1:ba:af:2a:31:95:08:c2:
92:dc:c8:18:8b:78:92:57:02:36:6a:2c:6b:01:e3:22:39:b9:
84:93:c3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:26:03 2026 by rpki-client