
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.mft
File: gUM6Y8LXXQAyVSxCbENTPsrINRU.mft (raw, json)
Hash identifier: 3bqEFWXH3pkvuyE4JfL7XVFjOTIj8hG4dpNVydBrRDM=
Subject key identifier: 6E:57:E7:BD:0D:8A:18:37:2A:E1:7C:3A:86:F7:2A:EC:E0:06:07:1A
Authority key identifier: 81:43:3A:63:C2:D7:5D:00:32:55:2C:42:6C:43:53:3E:CA:C8:35:15
Certificate issuer: /CN=A91F1AF5/serialNumber=81433A63C2D75D0032552C426C43533ECAC83515
Certificate serial: 081E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUM6Y8LXXQAyVSxCbENTPsrINRU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.mft
Manifest number: 0816
Signing time: Tue 22 Sep 2026 20:57:02 +0000
Manifest this update: Tue 22 Sep 2026 20:57:02 +0000
Manifest next update: Tue 29 Sep 2026 20:57:02 +0000
Files and hashes: 1: gUM6Y8LXXQAyVSxCbENTPsrINRU.crl (hash: V6BaHQSLQQOWy1CeV3TlQ7C00o7XfHMcAXIM8SCovrw=)
2: DDFEB10C385E11EB8E85F467C4F9AE02.roa (hash: Zf96iP55f5Jtpq3Ou1kpv1F94L3YI94DnzVRT1WWO7c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.crl
rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUM6Y8LXXQAyVSxCbENTPsrINRU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 15:21:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2078 (0x81e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1AF5, serialNumber=81433A63C2D75D0032552C426C43533ECAC83515
Validity
Not Before: Sep 22 20:57:02 2026 GMT
Not After : Sep 29 20:57:02 2026 GMT
Subject: CN=6ab2eb9e-fbf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:36:e3:4d:53:2c:85:ae:e0:c3:3f:2f:2d:05:
6d:8f:c5:cd:a6:b0:bb:b0:c6:02:b2:fa:ea:eb:fc:
12:ea:07:18:4c:28:61:23:86:c6:a2:96:41:e7:16:
ea:da:de:fa:59:a4:6e:c6:18:a1:f0:32:88:a4:50:
43:14:99:af:f1:d6:cb:96:bc:e7:79:53:0f:56:53:
98:92:b0:2c:e0:a8:a1:b4:61:c2:4f:65:e5:10:7a:
95:77:76:8b:03:54:ba:a0:3c:ba:20:f1:40:71:39:
63:71:a6:80:ee:2d:1f:1a:47:4e:0d:a2:3b:74:f6:
16:45:ff:f0:74:16:e4:a3:45:f7:a4:b2:31:5c:81:
04:10:6a:e4:6a:a6:8c:02:cc:2e:1f:bf:b8:be:48:
5c:87:4d:d1:a9:e0:55:d5:5c:13:44:75:06:24:2c:
4f:85:eb:3d:c0:30:86:56:3e:67:86:8b:62:db:99:
66:02:17:8b:40:bf:b4:1e:f2:22:c1:70:7e:dc:a2:
e0:1c:56:d7:70:a7:0c:29:1b:8e:ee:77:17:3e:eb:
58:b2:15:13:3c:3b:46:80:5f:a9:37:f4:7a:77:26:
11:05:8a:4e:77:ba:cc:0f:27:1a:8a:28:ca:1e:ab:
d2:70:27:15:fd:b0:bf:51:eb:8a:99:93:55:e2:72:
45:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:57:E7:BD:0D:8A:18:37:2A:E1:7C:3A:86:F7:2A:EC:E0:06:07:1A
X509v3 Authority Key Identifier:
keyid:81:43:3A:63:C2:D7:5D:00:32:55:2C:42:6C:43:53:3E:CA:C8:35:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUM6Y8LXXQAyVSxCbENTPsrINRU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:30:b2:3f:75:a9:ec:0a:39:d7:45:1d:96:3d:33:ea:70:c4:
d9:52:74:26:9f:0c:ea:90:55:7c:37:54:f0:b9:15:b2:f2:ac:
f3:ee:88:55:0d:44:ef:47:b5:63:1a:80:64:f1:43:97:32:c9:
4e:df:ec:c7:f6:59:8d:3e:f2:82:08:63:71:1a:2e:70:1e:5d:
14:30:11:a5:3a:b8:11:b3:f5:d2:4a:bd:40:78:01:bb:98:ca:
9d:e3:d4:2d:bd:1f:b0:0c:a4:50:2d:93:a2:0e:ed:14:f1:fc:
0a:68:7e:3a:f4:50:d5:21:df:7f:70:77:27:69:a4:42:16:ca:
86:3c:2f:0b:72:c9:2f:45:79:6b:8b:22:f2:b9:e6:8e:33:ee:
9a:03:c1:a5:25:d9:5e:34:eb:4d:6e:66:fd:4b:37:ce:d7:a8:
ed:05:35:e5:79:a5:c0:6b:98:0b:45:36:c4:a3:dd:e3:9a:d1:
0c:9f:2a:89:52:ed:20:b7:63:04:ae:d6:3d:8a:4d:55:9e:a4:
b7:f2:32:52:d6:1e:2a:c8:70:e7:9b:bf:44:88:e8:54:ab:7a:
9a:4e:56:f3:68:72:6b:4d:73:0f:a4:cc:95:af:3d:78:b5:aa:
00:6b:98:aa:c6:ff:40:64:26:eb:eb:f4:31:48:f7:5f:c6:b3:
9c:98:f0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:13:20 2026 by rpki-client