
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft
File: GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft (raw, json)
Hash identifier: +r9cqBgHdLHzoIVnbgj2/C5pUG1yUhSrPLR4a0ucGvc=
Subject key identifier: A9:6E:BE:B3:82:61:B1:85:C5:62:53:27:DC:A3:3F:B1:12:8A:E2:BD
Authority key identifier: 19:B9:A5:2C:C9:02:50:3E:CD:E3:02:BD:02:47:74:7E:A9:19:3B:60
Certificate issuer: /CN=A91ED3AE/serialNumber=19B9A52CC902503ECDE302BD0247747EA9193B60
Certificate serial: 05AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbmlLMkCUD7N4wK9Akd0fqkZO2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft
Manifest number: 05A2
Signing time: Sun 10 May 2026 23:14:50 +0000
Manifest this update: Sun 10 May 2026 23:14:50 +0000
Manifest next update: Sun 17 May 2026 23:14:50 +0000
Files and hashes: 1: GbmlLMkCUD7N4wK9Akd0fqkZO2A.crl (hash: 5nXV7PXuTzmOll37PExLh7vQ4FivhJZmid+9XTsPY/I=)
2: 491FFA9A177011ECA96DF680C4F9AE02.roa (hash: pnyxT9fzqZ2JZTKKceDF98fPU2nq8VujgoO8G+Dnb0U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.crl
rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbmlLMkCUD7N4wK9Akd0fqkZO2A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 17 May 2026 23:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1454 (0x5ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED3AE, serialNumber=19B9A52CC902503ECDE302BD0247747EA9193B60
Validity
Not Before: May 10 23:14:50 2026 GMT
Not After : May 17 23:14:50 2026 GMT
Subject: CN=6a01116a-6dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:2d:c1:ee:92:36:79:d0:3d:f5:a0:51:29:c6:
7b:af:6c:6b:84:c7:bd:c0:0e:54:ac:60:77:1c:4e:
40:61:c2:ed:c3:5d:11:81:3b:18:76:c5:96:1a:c4:
42:fa:f5:0e:2c:b5:6f:bc:33:c9:4a:25:40:93:f1:
cb:53:81:c3:1f:4d:52:f0:c5:74:e3:5b:d1:51:b9:
82:a7:42:47:f7:70:85:a7:96:f2:e0:1b:27:c8:e9:
c2:e1:e9:c6:c2:ff:b5:b0:d8:e0:1c:cd:6f:dc:06:
99:5e:22:63:a0:20:07:28:65:38:fb:07:02:93:82:
fe:b9:44:b7:73:0f:61:9e:0e:92:7f:d9:97:1d:64:
5c:eb:bf:b8:c4:f9:42:8b:6b:81:64:01:d6:78:f8:
1d:a9:2f:29:e4:f1:15:fe:11:ef:24:c7:04:d3:7f:
56:79:d8:07:20:e0:0c:50:21:34:4a:19:27:ba:35:
4c:17:92:1d:92:86:78:1d:cb:53:4a:d5:56:9c:3b:
69:b9:3d:a5:86:72:55:ed:85:7f:af:ff:46:84:be:
a2:e0:88:74:4a:36:1e:65:e8:c3:9d:24:1c:8d:81:
0c:68:43:bc:e5:56:36:ae:fa:a2:12:2e:f4:ce:34:
36:18:64:3b:52:ed:d0:c9:46:5d:2a:a1:9c:e2:30:
c0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:6E:BE:B3:82:61:B1:85:C5:62:53:27:DC:A3:3F:B1:12:8A:E2:BD
X509v3 Authority Key Identifier:
keyid:19:B9:A5:2C:C9:02:50:3E:CD:E3:02:BD:02:47:74:7E:A9:19:3B:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbmlLMkCUD7N4wK9Akd0fqkZO2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:a9:72:d1:20:a5:fc:f7:8b:67:3e:55:34:66:99:b4:e4:58:
e6:47:48:40:fd:0e:83:53:27:98:ba:00:61:35:3d:a1:40:63:
be:d8:a4:73:d2:99:50:81:dd:99:00:02:2e:df:84:48:69:00:
2c:1b:8c:48:27:62:c5:b8:fc:20:6e:2b:4b:b3:fc:7f:f1:81:
4e:92:92:d6:d7:56:43:21:2c:10:5e:7a:d7:af:c3:9d:e2:21:
8d:64:33:8a:ae:36:70:a5:7f:04:ad:10:8c:0f:54:3b:1a:99:
20:89:b5:2f:20:fd:bf:77:4c:4c:ba:f1:f6:0f:fa:87:f4:3b:
8b:c0:ec:31:8c:e0:5c:d3:f2:b8:b5:7b:f3:02:c0:d1:cf:a6:
7f:e1:98:5c:4b:f7:a1:ed:c7:34:5f:c2:bc:0f:36:32:77:bf:
a2:d2:4e:97:3f:26:9c:01:43:f8:d0:fe:93:b4:8f:6f:c8:52:
1e:95:8a:a6:0d:53:38:d9:63:ca:bd:dd:9b:5a:f5:f8:19:88:
ca:0a:2c:1f:55:9e:c1:5c:55:5a:c5:42:dd:fa:0a:24:91:1c:
a8:c5:b4:07:19:43:49:b8:f2:52:47:e7:20:64:6a:3a:44:2a:
6e:bb:c3:8d:63:32:ef:8a:1f:59:fe:96:86:4b:51:05:ce:88:
87:58:29:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:40:31 2026 by rpki-client