
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft
File: gnj0fexbetwgGJf5m8xuK_qI0BU.mft (raw, json)
Hash identifier: wXA4MPdQiAZgqF2tKBjU0GtuXRba/21QmhK7HngB8Ps=
Subject key identifier: A0:7E:AE:A0:25:9A:26:8F:D2:B7:59:6E:F8:13:57:A8:13:FE:6D:1C
Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
Certificate issuer: /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Certificate serial: 4082
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft
Manifest number: 3C03
Signing time: Sun 04 Oct 2026 14:20:10 +0000
Manifest this update: Sun 04 Oct 2026 14:20:10 +0000
Manifest next update: Sun 11 Oct 2026 14:20:10 +0000
Files and hashes: 1: gnj0fexbetwgGJf5m8xuK_qI0BU.crl (hash: Jrz0Qcrn6RLJA3y07fxkhr19Fgobh0HVP/XpvOhobII=)
2: MfV1xa7bDbXKtafMnwyypyqeh8g.asa (hash: +NbTSmuswGnGY1P97PSRco4HDSCwcmQNJmY7SyJ/cFE=)
3: AF4D576AC55E11E9A634E487C4F9AE02.roa (hash: Ip+BuKNVBvWT59r68mKsxF3JDM5skWNyTIfOgWfcJNE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl
rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 14:20:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16514 (0x4082)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A001E, serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Validity
Not Before: Oct 4 14:20:10 2026 GMT
Not After : Oct 11 14:20:10 2026 GMT
Subject: CN=6ac2609a-db6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d0:d1:09:ba:34:83:3f:7a:c0:97:b2:ee:ea:
5e:91:4b:e3:cd:8d:22:82:8b:bb:52:7e:76:16:6c:
c9:cf:85:44:17:15:84:ee:4d:78:ac:e9:a7:c7:59:
b7:ae:6b:86:ca:4f:96:4e:39:9f:69:bd:e0:65:59:
f9:72:a6:ed:f1:08:fe:a6:b7:b3:92:e6:9c:6d:e2:
3d:ff:79:46:fb:50:1f:10:a8:34:bd:27:27:b5:e7:
39:a8:48:83:f7:03:5f:67:27:b6:e6:30:84:06:42:
a1:68:db:74:9e:25:6a:b4:5a:c6:b2:16:32:74:e9:
68:6f:c4:21:16:79:92:ac:82:0d:91:0d:e1:e0:d2:
6d:67:c6:1a:71:7b:64:1f:7a:9b:07:97:da:e9:e9:
e6:e0:0d:e6:c6:db:15:b9:c5:56:41:39:5c:e2:82:
7b:2f:a4:61:24:01:1e:c1:9b:a8:21:8b:2c:45:15:
d6:2c:47:98:f4:c7:5c:ef:57:5d:e1:37:1f:10:fd:
26:77:f4:81:2a:12:85:6e:95:9e:3f:7c:ed:0a:be:
2f:3f:30:7c:31:b3:41:1c:a2:25:a1:39:51:64:cf:
a3:67:4d:75:a6:cd:f9:a5:bf:f0:a5:64:93:06:4f:
da:6e:98:fc:72:d7:e0:f8:42:2e:b8:bf:ae:a8:13:
af:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:7E:AE:A0:25:9A:26:8F:D2:B7:59:6E:F8:13:57:A8:13:FE:6D:1C
X509v3 Authority Key Identifier:
keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:e1:f7:d4:77:a7:08:1e:fe:3d:27:b7:84:a7:88:56:20:43:
18:82:9c:3c:22:5b:28:0f:c3:92:76:57:ac:75:ed:15:ea:d9:
87:6a:54:7e:d5:f7:e1:ca:bb:5a:ca:f4:0d:d9:65:2d:f0:15:
49:c6:66:8c:eb:2d:c9:b4:86:f2:73:c9:7f:65:f1:a4:ff:7f:
12:e9:9a:86:41:5f:a4:16:65:3d:88:e0:8a:2f:8f:ab:6e:dd:
eb:10:e6:a2:70:e8:16:73:81:06:ee:7f:53:a4:f3:b5:72:2a:
90:83:57:15:ba:94:38:87:bf:a2:02:ff:1c:bb:96:7a:4b:f2:
09:18:6c:40:e4:74:6f:0c:51:d4:0f:46:86:0f:88:68:86:6e:
af:a6:d9:1e:03:6d:36:0f:04:00:13:26:89:74:08:35:2e:f0:
ef:69:ba:1e:ca:5e:24:ef:a4:c2:b5:de:26:1c:79:01:aa:2d:
51:5d:be:6a:b5:c7:fd:ef:71:20:58:be:93:1e:1d:6b:41:16:
a3:3e:b3:b2:d6:f6:5c:c6:a3:29:24:26:a2:10:f1:83:e3:df:
b4:c1:9d:07:43:cc:ca:5b:e1:89:f4:86:f7:63:ef:c8:9b:44:
f3:a3:b9:cc:13:b7:d2:86:c3:96:57:ca:5c:d7:62:e8:78:61:
e3:2d:b4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:41:19 2026 by rpki-client