
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/Gb2CLT62_26TcCRe6HS-qeuL7lU.mft
File: Gb2CLT62_26TcCRe6HS-qeuL7lU.mft (raw, json)
Hash identifier: kSokJ6aAJNHjc/9mZJJZPr+xVWAnlI63j2DqG8Bltto=
Subject key identifier: 2D:3C:51:E6:FE:D8:F8:40:4C:74:08:3F:B0:29:B8:0C:BE:CB:BA:BF
Authority key identifier: 19:BD:82:2D:3E:B6:FF:6E:93:70:24:5E:E8:74:BE:A9:EB:8B:EE:55
Certificate issuer: /CN=A91CA294/serialNumber=19BD822D3EB6FF6E9370245EE874BEA9EB8BEE55
Certificate serial: E7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gb2CLT62_26TcCRe6HS-qeuL7lU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/Gb2CLT62_26TcCRe6HS-qeuL7lU.mft
Manifest number: DA
Signing time: Fri 13 Nov 2026 06:49:30 +0000
Manifest this update: Fri 13 Nov 2026 06:49:29 +0000
Manifest next update: Fri 20 Nov 2026 06:49:29 +0000
Files and hashes: 1: Gb2CLT62_26TcCRe6HS-qeuL7lU.crl (hash: 9dtbKGWN51nE+O+n0dmYLIHa8ovuQiL1NMGtqv6pnYU=)
2: 208EBFD6A2F811F0ACA39B18C4F9AE02.roa (hash: PeDT0A9DS0K+E0STvDA9nu8d3naIFvE2mDpO1bS+oPA=)
3: 1F8F98EEA2F811F0ACA39B18C4F9AE02.roa (hash: NU9tf6UMHljQIjKKHQ1GU7qnq9LDlOfrMzucXyS5f2g=)
4: 1E0F8E02A2F811F0ACA39B18C4F9AE02.roa (hash: NlcyVDyxB6GuzIcN9CcqYsXH/G62jfahp6/xAFojKSs=)
5: 1EC99BBCA2F811F0ACA39B18C4F9AE02.roa (hash: Y2w151Sd/NSv/Gx02xlDDidA2Mi4842f5ckvhNv506A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/Gb2CLT62_26TcCRe6HS-qeuL7lU.crl
rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/Gb2CLT62_26TcCRe6HS-qeuL7lU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gb2CLT62_26TcCRe6HS-qeuL7lU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Nov 2026 06:49:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 231 (0xe7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CA294, serialNumber=19BD822D3EB6FF6E9370245EE874BEA9EB8BEE55
Validity
Not Before: Nov 13 06:49:29 2026 GMT
Not After : Nov 20 06:49:29 2026 GMT
Subject: CN=6af6b2f9-79d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2b:b7:7c:a3:d4:67:d1:a9:48:e8:86:09:1e:
21:d2:51:fd:bb:c7:50:7c:21:2a:15:f6:f1:0c:9c:
f7:c2:2f:d9:28:18:69:a3:60:d7:94:5b:99:51:73:
30:98:fd:3f:b5:4c:e9:06:ff:a2:38:4e:a3:f4:30:
77:09:bc:56:64:ba:6a:57:5e:43:98:d6:c0:f0:04:
9a:a3:8b:72:6a:6a:70:5c:de:11:04:ea:76:05:96:
39:f1:35:36:e2:e1:48:5f:f5:7f:69:7b:c3:b5:12:
ab:ee:b2:91:2c:96:e4:04:19:cc:5e:fb:70:34:5b:
27:73:57:f8:7d:84:fa:10:4d:c7:1d:bc:04:dd:f9:
89:b1:43:f0:dd:d8:c2:95:14:0f:36:ae:2a:c2:80:
d7:eb:0f:b9:af:fb:5d:44:3d:99:65:79:01:26:20:
e7:d7:4b:d3:23:1a:af:d1:49:8f:fd:64:8d:76:34:
ff:15:86:34:05:06:16:61:60:e5:b0:b8:c6:23:ec:
42:04:a5:f9:ba:6b:f1:3c:2e:3d:1a:2e:93:3c:cf:
46:f4:d8:23:fc:6a:19:15:76:05:da:00:ed:5e:20:
fb:7b:0f:b5:17:c4:98:b7:04:3c:64:19:ac:5b:77:
33:2d:84:40:ea:2f:a9:e4:c3:07:71:3f:b8:88:ef:
e7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:3C:51:E6:FE:D8:F8:40:4C:74:08:3F:B0:29:B8:0C:BE:CB:BA:BF
X509v3 Authority Key Identifier:
keyid:19:BD:82:2D:3E:B6:FF:6E:93:70:24:5E:E8:74:BE:A9:EB:8B:EE:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/Gb2CLT62_26TcCRe6HS-qeuL7lU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gb2CLT62_26TcCRe6HS-qeuL7lU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/Gb2CLT62_26TcCRe6HS-qeuL7lU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:52:ff:27:41:d2:7f:ad:24:df:73:22:e7:06:2c:cf:24:b9:
75:3c:23:67:4f:1b:27:4e:45:b1:9b:55:6e:b2:42:d9:34:03:
50:9d:ca:7f:03:78:df:80:3d:e4:ee:71:0a:09:70:e7:43:25:
d6:e9:21:ed:42:0b:4b:cb:18:fb:ce:49:9f:ce:3c:81:73:f8:
f2:82:00:b7:a2:23:b6:e6:02:57:96:8b:30:4f:3b:98:03:2c:
fd:2b:e9:e3:f0:81:87:8a:4c:62:df:f7:08:5a:5d:d3:26:bb:
fe:e7:c7:10:2c:2f:ea:b2:c5:a7:69:a1:5a:c4:36:81:f7:af:
4b:82:39:d7:3c:2b:a7:54:8b:27:8b:79:21:0d:2d:7d:16:b9:
8e:cf:38:f0:2c:ed:e1:1b:43:62:65:fc:99:12:d7:de:66:56:
d9:2e:1d:f0:53:9d:7c:bf:b0:86:ee:46:85:8a:4e:97:cd:19:
db:ec:d3:e4:15:40:b5:92:bd:32:34:a9:9c:7f:51:d2:8a:48:
20:84:14:54:7e:ab:0a:4f:29:7e:94:e5:a0:39:af:8e:64:38:
65:d3:dc:f0:89:a6:af:1f:d4:f9:e8:17:f7:8c:0c:a2:9d:81:
f7:48:c6:a7:6a:ea:0a:19:45:dd:62:cf:b4:85:f0:67:4a:df:
cb:0d:10:08
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0EyOTQxMTAvBgNVBAUTKDE5QkQ4MjJEM0VCNkZGNkU5MzcwMjQ1RUU4NzRCRUE5
RUI4QkVFNTUwHhcNMjYxMTEzMDY0OTI5WhcNMjYxMTIwMDY0OTI5WjAYMRYwFAYD
VQQDEw02YWY2YjJmOS03OWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuyu3fKPUZ9GpSOiGCR4h0lH9u8dQfCEqFfbxDJz3wi/ZKBhpo2DXlFuZUXMw
mP0/tUzpBv+iOE6j9DB3CbxWZLpqV15DmNbA8ASao4tyampwXN4RBOp2BZY58TU2
4uFIX/V/aXvDtRKr7rKRLJbkBBnMXvtwNFsnc1f4fYT6EE3HHbwE3fmJsUPw3djC
lRQPNq4qwoDX6w+5r/tdRD2ZZXkBJiDn10vTIxqv0UmP/WSNdjT/FYY0BQYWYWDl
sLjGI+xCBKX5umvxPC49Gi6TPM9G9Ngj/GoZFXYF2gDtXiD7ew+1F8SYtwQ8ZBms
W3czLYRA6i+p5MMHcT+4iO/n2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC08Ueb+
2PhATHQIP7ApuAy+y7q/MB8GA1UdIwQYMBaAFBm9gi0+tv9uk3AkXuh0vqnri+5V
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTI5NC9CREMwOUEyQTlE
QUExMUYwOTY0MjBCNjNDNEY5QUUwMi9HYjJDTFQ2Ml8yNlRjQ1JlNkhTLXFldUw3
bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0diMkNMVDYyXzI2VGNDUmU2SFMtcWV1TDdsVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QTI5NC9CREMwOUEyQTlEQUExMUYwOTY0MjBCNjNDNEY5QUUwMi9HYjJDTFQ2Ml8y
NlRjQ1JlNkhTLXFldUw3bFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIlL/J0HSf60k33Mi5wYszyS5dTwjZ08bJ05FsZtVbrJC2TQDUJ3KfwN434A9
5O5xCglw50Ml1ukh7UILS8sY+85Jn848gXP48oIAt6IjtuYCV5aLME87mAMs/Svp
4/CBh4pMYt/3CFpd0ya7/ufHECwv6rLFp2mhWsQ2gfevS4I51zwrp1SLJ4t5IQ0t
fRa5js848Czt4RtDYmX8mRLX3mZW2S4d8FOdfL+whu5GhYpOl80Z2+zT5BVAtZK9
MjSpnH9R0opIIIQUVH6rCk8pfpTloDmvjmQ4ZdPc8Immrx/U+egX94wMop2B90jG
p2rqChlF3WLPtIXwZ0rfyw0QCA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 00:08:51 2026 by rpki-client