
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft
File: gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft (raw, json)
Hash identifier: f1AIr5cFuobSIjHHZrcfKRJLe5EgKkEoJRjtSh6skjI=
Subject key identifier: A0:8C:FD:5E:47:11:0D:87:7C:CE:17:3D:A3:32:FC:23:02:45:0E:68
Authority key identifier: 80:FB:52:63:6A:9E:50:C0:88:68:E6:27:52:0A:1A:0D:8A:87:F0:46
Certificate issuer: /CN=A91B3EDE/serialNumber=80FB52636A9E50C08868E627520A1A0D8A87F046
Certificate serial: 012A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gPtSY2qeUMCIaOYnUgoaDYqH8EY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft
Manifest number: 0125
Signing time: Fri 25 Sep 2026 05:51:29 +0000
Manifest this update: Fri 25 Sep 2026 05:51:28 +0000
Manifest next update: Fri 02 Oct 2026 05:51:28 +0000
Files and hashes: 1: gPtSY2qeUMCIaOYnUgoaDYqH8EY.crl (hash: I8r5C681JaNP18O3inCsa4M/tmDRgsvOGr0ulunw2zc=)
2: BC66C474FB5C11EFB5FF765EC4F9AE02.roa (hash: pX32CYqIuCC9WIBfrCctEx/uwPxu80qncBmM35DD0HE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.crl
rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gPtSY2qeUMCIaOYnUgoaDYqH8EY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 05:51:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 298 (0x12a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3EDE, serialNumber=80FB52636A9E50C08868E627520A1A0D8A87F046
Validity
Not Before: Sep 25 05:51:28 2026 GMT
Not After : Oct 2 05:51:28 2026 GMT
Subject: CN=6ab60be0-4725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f0:5e:4b:43:bf:6d:f9:ba:4b:3f:18:e2:67:
f5:42:b5:bb:3b:af:11:78:8c:0d:18:8d:e4:a3:02:
33:d0:2c:b0:24:dc:c0:fb:60:ea:33:52:83:22:dd:
71:c4:06:bd:45:e7:81:7f:33:38:c5:b1:9b:65:b4:
f5:c4:b6:3c:1c:66:23:48:79:2a:15:a4:6b:4e:c6:
8e:36:bf:f0:f7:db:42:d2:46:72:66:40:9a:15:bc:
39:6a:b7:ae:94:0f:3e:c5:5e:3a:95:3f:df:d2:e4:
46:2c:73:57:d1:b6:07:64:94:95:e4:96:f3:c8:8e:
16:c3:e6:fb:55:87:a3:a5:80:1e:f8:3e:3b:71:fc:
f8:1d:d5:0d:5b:af:75:83:92:28:b8:d9:93:81:85:
d4:bf:8f:c1:61:98:c6:a6:a8:85:93:a9:cd:e1:e4:
1d:45:cb:36:27:e8:60:0e:95:76:d1:90:6b:a9:a9:
59:54:ab:3e:8d:6c:37:18:23:62:75:47:16:4d:8a:
e0:c3:cd:db:9a:ae:67:41:fb:a5:33:4f:fd:43:c4:
2d:39:72:f8:c7:3f:1d:86:70:2d:93:01:57:2a:b4:
2c:a6:c8:a5:47:21:34:d3:36:67:4c:0a:88:6e:cf:
e7:ae:a0:b8:75:53:6a:8e:1f:be:3b:8a:f9:37:9e:
5d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:8C:FD:5E:47:11:0D:87:7C:CE:17:3D:A3:32:FC:23:02:45:0E:68
X509v3 Authority Key Identifier:
keyid:80:FB:52:63:6A:9E:50:C0:88:68:E6:27:52:0A:1A:0D:8A:87:F0:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gPtSY2qeUMCIaOYnUgoaDYqH8EY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:54:d7:13:89:dc:60:59:e4:5b:db:22:1d:a0:34:b5:d6:f1:
c9:15:1f:5b:a9:95:85:cf:b4:77:16:ee:89:36:86:62:70:4c:
ab:11:d5:a3:ac:01:74:68:dc:46:98:6a:47:e3:5c:20:53:b0:
9e:1f:97:1c:a4:59:15:a2:81:ec:f8:99:90:e3:ec:d3:6c:43:
b2:5a:28:5e:b1:f1:a3:ce:f8:b0:1b:03:84:b0:dc:e8:af:dc:
75:d4:5c:25:32:46:58:66:21:db:6a:93:ec:97:df:a0:fb:63:
0f:ed:5a:22:bf:a5:d1:dd:5c:d4:a9:52:dc:be:22:18:9e:75:
e0:d4:4b:4a:8f:e3:9f:1d:32:08:8b:ec:65:5e:e7:f2:17:9e:
6d:12:d4:d2:d7:3a:71:69:e9:81:25:b4:bb:13:3c:0c:c6:85:
15:d6:b8:53:ef:0a:3b:1d:7a:cf:35:8b:93:cb:b8:b1:a5:a5:
35:8c:ec:96:fd:2b:77:d7:48:9c:82:5d:30:7e:97:ca:85:eb:
31:43:7a:d2:29:44:28:6e:a0:b7:0b:0c:dc:98:82:2a:72:92:
f6:31:79:78:9b:52:58:da:35:92:b4:85:3d:f6:18:fe:48:b4:
14:a1:6d:05:7d:7f:57:57:5c:d6:5e:7d:5b:58:41:c0:23:62:
f2:d4:92:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:10:29 2026 by rpki-client