
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.mft
File: gmtEdLxvTzvkC151EfEFyuf-jAw.mft (raw, json)
Hash identifier: MUY76MzI4V0Q5CBWywmbjlgZcSPd7K+4y0wmmKNXZyI=
Subject key identifier: D4:30:D9:77:B1:96:3D:7B:3D:65:4E:D6:24:75:28:0C:B2:64:A8:FE
Authority key identifier: 82:6B:44:74:BC:6F:4F:3B:E4:0B:5E:75:11:F1:05:CA:E7:FE:8C:0C
Certificate issuer: /CN=A91FAB3C/serialNumber=826B4474BC6F4F3BE40B5E7511F105CAE7FE8C0C
Certificate serial: 85
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmtEdLxvTzvkC151EfEFyuf-jAw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.mft
Manifest number: 7C
Signing time: Tue 03 Mar 2026 07:29:19 +0000
Manifest this update: Tue 03 Mar 2026 07:29:18 +0000
Manifest next update: Tue 10 Mar 2026 07:29:18 +0000
Files and hashes: 1: gmtEdLxvTzvkC151EfEFyuf-jAw.crl (hash: UXVsIkoJqpAfEvnO7rEbObhjJRJfmgtIIQVZNqI/fn4=)
2: CF2B394C01EA11F190A04A823B6F56BC.roa (hash: rTvAf6dpPCKk56C1vD7o94oTi+zGUzL5wM5zHdMv5WY=)
3: BFA0334C01EA11F192D3B8D33A6F56BC.roa (hash: ING31SnTtfOxcPZAmEFgJK41efrAn9HChDGYUP/RwuA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.crl
rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmtEdLxvTzvkC151EfEFyuf-jAw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 07:29:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133 (0x85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FAB3C, serialNumber=826B4474BC6F4F3BE40B5E7511F105CAE7FE8C0C
Validity
Not Before: Mar 3 07:29:18 2026 GMT
Not After : Mar 10 07:29:18 2026 GMT
Subject: CN=69a68dcf-c090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f6:0b:72:5e:96:86:43:b6:eb:57:4e:e7:e5:
13:02:77:31:aa:da:c1:f6:fa:7b:b3:f9:b6:88:09:
55:96:34:6a:e8:6f:41:f2:b5:c7:88:dd:9c:13:40:
e4:d6:ec:f1:ee:9d:03:e1:e4:05:fa:12:94:1d:54:
39:e2:56:ec:1a:69:81:3f:d1:14:0a:90:02:bc:05:
ff:b5:82:97:a7:0c:30:33:d1:1b:a3:69:69:ed:a2:
01:28:98:b5:00:31:cb:f2:9c:6c:cf:6b:fa:f3:fb:
7f:3b:18:11:2b:25:a8:04:eb:bc:45:24:8b:b4:56:
dd:fb:46:1a:3a:0a:78:45:a2:9f:7c:6c:ed:56:14:
16:2e:e3:eb:a6:8d:8a:03:f4:92:ff:e7:c4:85:81:
cc:d7:42:70:b9:9b:50:17:74:71:ec:5a:71:4d:17:
6d:4a:4f:cd:fe:11:0b:42:ff:6f:52:60:06:01:e1:
b5:3d:55:82:13:26:0f:bf:f8:48:ab:5c:3f:33:b0:
32:f6:e0:ad:f1:98:20:3b:e9:64:dc:3d:3b:2f:d8:
7d:41:9a:93:70:19:4f:d6:6f:e3:1a:60:16:be:63:
0c:a1:b4:84:81:bc:b7:62:4c:ed:ec:74:f7:f2:37:
66:00:42:a5:7e:6d:76:c1:d7:ae:ac:17:01:a0:a3:
f8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:30:D9:77:B1:96:3D:7B:3D:65:4E:D6:24:75:28:0C:B2:64:A8:FE
X509v3 Authority Key Identifier:
keyid:82:6B:44:74:BC:6F:4F:3B:E4:0B:5E:75:11:F1:05:CA:E7:FE:8C:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmtEdLxvTzvkC151EfEFyuf-jAw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:89:ce:6d:33:6f:a4:6b:54:dc:62:93:2e:c3:38:a4:41:a2:
e6:94:15:1e:05:f3:03:5f:2e:48:05:91:7f:45:1e:27:08:07:
4e:09:49:e5:99:ff:5c:c9:03:bf:32:a3:9b:51:bf:69:a7:97:
8d:b6:75:b4:39:cf:01:1c:4b:ab:8a:bd:69:97:af:f1:86:9e:
3e:64:e9:59:b1:c5:35:1f:7f:04:e3:f6:5f:53:f8:19:2a:5f:
7a:dc:55:86:38:02:ea:f6:d8:f4:ec:54:f7:82:ab:e6:a3:38:
9d:43:e7:0a:8f:58:bf:0d:23:87:70:c9:3f:4b:17:0b:6a:73:
27:19:98:f2:87:4b:52:90:4a:b4:93:31:30:76:55:d0:4d:1f:
4f:a3:cc:0f:2b:12:3c:b0:9d:8f:58:1e:51:20:07:32:55:df:
fa:e2:26:0b:9f:06:ea:4c:4e:06:ed:44:b7:af:f6:83:60:3d:
2d:0f:97:4f:81:73:bf:6f:15:b5:d3:bd:be:3d:ab:7f:ec:3d:
ff:0a:1c:b4:e4:dc:82:a8:51:f7:e8:72:db:01:81:90:52:78:
9a:26:ee:b4:ed:0a:6c:7c:69:59:79:2a:19:fc:ae:3f:61:b5:
0c:50:84:7a:85:10:99:76:77:ed:20:bd:e8:ff:60:26:08:ed:
b8:dd:af:5b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkFCM0MxMTAvBgNVBAUTKDgyNkI0NDc0QkM2RjRGM0JFNDBCNUU3NTExRjEwNUNB
RTdGRThDMEMwHhcNMjYwMzAzMDcyOTE4WhcNMjYwMzEwMDcyOTE4WjAYMRYwFAYD
VQQDEw02OWE2OGRjZi1jMDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1fYLcl6WhkO261dO5+UTAncxqtrB9vp7s/m2iAlVljRq6G9B8rXHiN2cE0Dk
1uzx7p0D4eQF+hKUHVQ54lbsGmmBP9EUCpACvAX/tYKXpwwwM9Ebo2lp7aIBKJi1
ADHL8pxsz2v68/t/OxgRKyWoBOu8RSSLtFbd+0YaOgp4RaKffGztVhQWLuPrpo2K
A/SS/+fEhYHM10JwuZtQF3Rx7FpxTRdtSk/N/hELQv9vUmAGAeG1PVWCEyYPv/hI
q1w/M7Ay9uCt8ZggO+lk3D07L9h9QZqTcBlP1m/jGmAWvmMMobSEgby3Ykzt7HT3
8jdmAEKlfm12wdeurBcBoKP4mQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNQw2Xex
lj17PWVO1iR1KAyyZKj+MB8GA1UdIwQYMBaAFIJrRHS8b0875AtedRHxBcrn/owM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUIzQy85OTFFQURGRTY5
NEExMUYwQTc3NDFBNDNDNEY5QUUwMi9nbXRFZEx4dlR6dmtDMTUxRWZFRnl1Zi1q
QXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2dtdEVkTHh2VHp2a0MxNTFFZkVGeXVmLWpBdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QUIzQy85OTFFQURGRTY5NEExMUYwQTc3NDFBNDNDNEY5QUUwMi9nbXRFZEx4dlR6
dmtDMTUxRWZFRnl1Zi1qQXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkonObTNvpGtU3GKTLsM4pEGi5pQVHgXzA18uSAWRf0UeJwgHTglJ5Zn/XMkD
vzKjm1G/aaeXjbZ1tDnPARxLq4q9aZev8YaePmTpWbHFNR9/BOP2X1P4GSpfetxV
hjgC6vbY9OxU94Kr5qM4nUPnCo9Yvw0jh3DJP0sXC2pzJxmY8odLUpBKtJMxMHZV
0E0fT6PMDysSPLCdj1geUSAHMlXf+uImC58G6kxOBu1Et6/2g2A9LQ+XT4Fzv28V
tdO9vj2rf+w9/woctOTcgqhR9+hy2wGBkFJ4mibutO0KbHxpWXkqGfyuP2G1DFCE
eoUQmXZ37SC96P9gJgjtuN2vWw==
-----END CERTIFICATE-----
Generated at Wed Mar 4 08:42:48 2026 by rpki-client