
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E5988/A316C65E662C11F1B0BAC73CA147A888/gvYVW7anmmgrwbbkztF-7HtUXjE.mft
File: gvYVW7anmmgrwbbkztF-7HtUXjE.mft (raw, json)
Hash identifier: mn73nSbEq3/mXd6C0o2By2FyLyQGUT5lzUXp7LLfGjc=
Subject key identifier: 2B:A7:2C:24:5D:AA:9B:F1:8B:82:12:72:6B:A7:E1:6A:AC:4A:59:85
Authority key identifier: 82:F6:15:5B:B6:A7:9A:68:2B:C1:B6:E4:CE:D1:7E:EC:7B:54:5E:31
Certificate issuer: /CN=A91E5988/serialNumber=82F6155BB6A79A682BC1B6E4CED17EEC7B545E31
Certificate serial: 43
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gvYVW7anmmgrwbbkztF-7HtUXjE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5988/A316C65E662C11F1B0BAC73CA147A888/gvYVW7anmmgrwbbkztF-7HtUXjE.mft
Manifest number: 41
Signing time: Tue 13 Oct 2026 09:16:35 +0000
Manifest this update: Tue 13 Oct 2026 09:16:35 +0000
Manifest next update: Tue 20 Oct 2026 09:16:35 +0000
Files and hashes: 1: gvYVW7anmmgrwbbkztF-7HtUXjE.crl (hash: ZEwV2zumpNjuJdt0X3kFUTq1Jf4GrXk3HmmoM8pVis0=)
2: 1A0F60ACB5A811F1A1C47BD53711F970.roa (hash: zo7ARhMf7sXcb1Wzo/WGHBDItpWzhIj8mr4YHAO8djw=)
3: 62C23538662D11F1A5BC4310A247A888.roa (hash: o2DwrfThWmBts2qM7FHUBBrRqwsSlJYkQtksSisltek=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5988/A316C65E662C11F1B0BAC73CA147A888/gvYVW7anmmgrwbbkztF-7HtUXjE.crl
rsync://rpki.apnic.net/member_repository/A91E5988/A316C65E662C11F1B0BAC73CA147A888/gvYVW7anmmgrwbbkztF-7HtUXjE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gvYVW7anmmgrwbbkztF-7HtUXjE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 09:16:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67 (0x43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5988, serialNumber=82F6155BB6A79A682BC1B6E4CED17EEC7B545E31
Validity
Not Before: Oct 13 09:16:35 2026 GMT
Not After : Oct 20 09:16:35 2026 GMT
Subject: CN=6acdf6f3-3998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d5:f0:63:82:3d:a4:59:bb:74:c5:b4:04:a4:
5a:31:ea:d6:c1:45:e4:b3:f1:c7:1c:bb:15:1a:e1:
f2:19:78:e8:bc:0d:3e:d2:9a:a4:40:0c:5f:ca:5c:
f1:2d:91:86:42:05:86:9c:00:5c:55:66:7a:20:b1:
ca:ed:b5:5c:e2:cb:9b:bd:6a:4b:4a:c6:66:3a:67:
75:20:d5:78:f6:a2:b7:3f:c3:44:c7:52:80:10:1c:
97:17:5a:2a:46:2c:c6:59:20:ad:fe:70:d4:91:d4:
98:93:ed:88:2b:d5:68:05:5d:90:69:fb:43:d5:c3:
50:ec:a2:35:60:2f:de:2b:c0:65:b1:d6:ec:15:a6:
fb:6f:eb:1d:54:a2:72:b7:90:c0:18:bf:ee:81:ce:
f3:0d:47:39:48:f6:2b:5f:98:e8:b8:22:c5:9b:a3:
d4:8c:fb:e7:c3:08:c3:ac:65:4c:45:b2:5b:35:21:
98:3d:95:14:22:3b:a0:82:da:6b:d5:fa:1c:33:4f:
62:c5:a4:03:22:36:7e:d2:99:06:9f:45:8b:5e:92:
8d:91:70:89:52:5f:d0:dc:22:01:8b:4a:2f:04:5b:
7f:f3:42:00:f2:1c:df:6f:12:52:28:e6:c4:a7:a7:
08:ea:f1:0b:71:8f:29:a4:60:f4:aa:2a:f6:04:59:
fa:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A7:2C:24:5D:AA:9B:F1:8B:82:12:72:6B:A7:E1:6A:AC:4A:59:85
X509v3 Authority Key Identifier:
keyid:82:F6:15:5B:B6:A7:9A:68:2B:C1:B6:E4:CE:D1:7E:EC:7B:54:5E:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5988/A316C65E662C11F1B0BAC73CA147A888/gvYVW7anmmgrwbbkztF-7HtUXjE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gvYVW7anmmgrwbbkztF-7HtUXjE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5988/A316C65E662C11F1B0BAC73CA147A888/gvYVW7anmmgrwbbkztF-7HtUXjE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:45:ab:57:de:6c:be:83:99:05:25:d5:67:c0:db:d8:56:22:
5e:89:37:61:e1:38:a6:b5:b2:38:5e:25:37:83:0b:03:9d:6f:
e9:21:7c:34:3f:ec:76:bd:e9:3c:39:fa:a4:98:a4:5f:8a:7e:
2b:f9:25:98:b8:70:8a:a1:85:29:b8:e0:bc:83:04:fa:c9:cc:
8a:98:b0:52:23:76:2b:7f:c7:f3:9e:54:dc:8d:0a:88:9e:aa:
50:74:1e:0d:dd:b3:fc:5d:d5:91:77:18:f5:09:8a:f8:79:27:
e8:88:eb:70:d1:2c:8f:3f:95:7a:c9:18:81:95:14:16:1a:96:
0a:89:73:75:d3:b7:af:23:af:61:ae:1d:09:85:d5:40:35:b6:
0e:0d:bf:14:b8:5b:9b:d8:0e:aa:12:17:b7:18:31:c2:99:34:
8f:17:7e:1e:98:04:7d:b5:ac:f7:db:80:be:81:f2:ac:09:73:
26:e6:4f:60:31:01:26:ce:6d:1b:ad:b9:41:08:55:d5:aa:f0:
38:fd:62:bc:d3:ec:dc:22:ae:ff:66:bc:01:86:75:ce:93:db:
ac:47:8c:bc:b0:18:9f:0e:0b:06:f5:28:73:3b:93:9a:8c:39:
91:87:aa:18:47:f9:eb:1f:c7:1d:97:a9:47:8d:49:21:65:8a:
99:ac:83:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 11:56:53 2026 by rpki-client