
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.mft
File: gmtVkqw4sBK358JzDdBgfhDbgQI.mft (raw, json)
Hash identifier: Soro019CffDhdxANDOK82cRI8Kspm2Zqy0n9O/QbHRU=
Subject key identifier: 7A:B4:B6:6D:77:E5:B1:DB:62:8A:E5:93:B7:4D:4C:B2:91:AA:92:1B
Authority key identifier: 82:6B:55:92:AC:38:B0:12:B7:E7:C2:73:0D:D0:60:7E:10:DB:81:02
Certificate issuer: /CN=A91D23C7/serialNumber=826B5592AC38B012B7E7C2730DD0607E10DB8102
Certificate serial: 05CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmtVkqw4sBK358JzDdBgfhDbgQI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.mft
Manifest number: 05C5
Signing time: Tue 24 Mar 2026 22:45:56 +0000
Manifest this update: Tue 24 Mar 2026 22:45:55 +0000
Manifest next update: Tue 31 Mar 2026 22:45:55 +0000
Files and hashes: 1: gmtVkqw4sBK358JzDdBgfhDbgQI.crl (hash: +MadOfqMOOyCC3hg2nTj23pNb/EdH3UMYy10v1PdCnk=)
2: 25B713A4FE6B11EBB5DD176BC4F9AE02.roa (hash: DqhzTlL/TM9MCYZl1hZt1EMkx6698paItxMEmrPBJS4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.crl
rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmtVkqw4sBK358JzDdBgfhDbgQI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:45:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1486 (0x5ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D23C7, serialNumber=826B5592AC38B012B7E7C2730DD0607E10DB8102
Validity
Not Before: Mar 24 22:45:55 2026 GMT
Not After : Mar 31 22:45:55 2026 GMT
Subject: CN=69c31424-3646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:00:08:8d:72:ff:2e:b5:cd:4a:07:d0:97:84:
eb:9d:64:07:97:52:ed:c8:54:98:09:ef:f8:aa:ae:
5d:47:34:f6:e3:09:77:f0:a8:89:12:75:79:26:20:
02:17:0b:f9:30:5a:cb:44:ae:db:b7:45:c5:1d:64:
d2:48:e1:f5:36:e2:5e:66:d8:10:f6:02:c3:01:e1:
28:1a:3e:5f:c6:1e:45:ba:bd:09:b8:b2:8b:14:6b:
7c:fa:ce:97:24:dd:b8:58:11:f2:9d:dc:27:8b:56:
4d:fe:03:62:b0:0a:a9:b5:e6:e8:77:99:34:ea:a0:
64:ed:10:e6:c0:08:02:d1:ed:d3:9e:fb:10:7a:27:
f5:da:0f:b3:75:29:4d:38:99:08:bc:fb:dc:b8:da:
04:52:11:ef:2b:fb:0e:9f:73:05:e3:91:f9:31:28:
cd:32:37:3d:44:c4:04:bb:fe:d7:aa:8a:2b:57:13:
39:24:1d:00:7a:62:7d:77:55:af:e6:c4:18:00:9c:
6c:27:18:c0:e8:a0:3a:4b:3a:cd:e0:68:9b:51:79:
1c:39:2c:dc:16:37:28:9c:09:35:17:6c:f0:ff:30:
d7:72:4f:f1:e6:7b:8e:4d:cd:bb:05:3a:78:e2:14:
00:1c:9e:5a:2d:2b:61:bd:0a:f2:5c:c1:0a:a0:04:
a3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B4:B6:6D:77:E5:B1:DB:62:8A:E5:93:B7:4D:4C:B2:91:AA:92:1B
X509v3 Authority Key Identifier:
keyid:82:6B:55:92:AC:38:B0:12:B7:E7:C2:73:0D:D0:60:7E:10:DB:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmtVkqw4sBK358JzDdBgfhDbgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:56:ed:74:43:f6:4b:bd:7b:41:d4:83:f9:2c:84:62:c6:44:
a6:1a:6b:f4:d0:bf:30:8a:dc:29:fb:14:d6:ed:2d:d8:54:1a:
0c:cc:4b:0c:94:81:21:e9:ba:31:bf:4d:f5:8c:0a:8e:5f:75:
b1:92:3c:90:96:17:3d:cf:e2:a1:10:5b:26:f4:1f:4f:86:3a:
61:19:49:33:ad:64:12:07:9a:81:b2:52:af:7b:bb:d5:b8:ba:
f6:a4:05:aa:8a:a2:5a:f0:2c:79:1c:95:1e:34:04:2a:a8:37:
82:84:5b:21:36:78:95:71:21:cb:b0:bf:8b:67:e0:26:63:e4:
b6:6b:d5:e4:6a:9d:64:32:31:22:73:24:30:6c:6e:c5:1f:da:
f9:92:de:b9:88:31:77:f1:dc:2e:40:62:1b:45:0b:62:58:4f:
fa:6f:d8:79:e8:8d:38:b6:23:f2:ae:69:05:6f:0e:c0:41:64:
98:64:0a:8f:0a:3c:57:83:6e:4b:1a:6b:2b:99:29:56:a9:16:
c4:fe:1e:de:ed:0c:40:78:74:e1:ab:99:23:64:2b:fb:58:fd:
d2:1c:da:bb:7f:d4:87:a5:85:4a:13:72:ac:b8:d3:55:3c:8c:
24:da:e5:ac:95:7d:8d:47:1c:0d:c9:1b:0d:a6:d0:40:4b:66:
1f:3f:86:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:25:32 2026 by rpki-client