
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.mft
File: GkhD6J8kRLLN24EYqoovRBgOhJg.mft (raw, json)
Hash identifier: lDpFDYwuKZqbrQUA1MOKJvIIC13bR6liMDwWrf2tg6Y=
Subject key identifier: 3C:A2:04:E0:A1:91:58:6A:B3:40:B0:28:D2:B6:70:19:3F:89:EF:BC
Authority key identifier: 1A:48:43:E8:9F:24:44:B2:CD:DB:81:18:AA:8A:2F:44:18:0E:84:98
Certificate issuer: /CN=A91F5280/serialNumber=1A4843E89F2444B2CDDB8118AA8A2F44180E8498
Certificate serial: 027A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkhD6J8kRLLN24EYqoovRBgOhJg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.mft
Manifest number: 0271
Signing time: Fri 25 Sep 2026 02:07:52 +0000
Manifest this update: Fri 25 Sep 2026 02:07:51 +0000
Manifest next update: Fri 02 Oct 2026 02:07:51 +0000
Files and hashes: 1: GkhD6J8kRLLN24EYqoovRBgOhJg.crl (hash: bMf3JKsq+NRV9+0cGJatTWZsTUzhj1VoJmukjg/SU3A=)
2: B5569B88096311EE9ECB644DC4F9AE02.roa (hash: 4HF0DTPBSH5S3QjwkCb71T/4b+8A54VUugU3EtAjksc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.crl
rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkhD6J8kRLLN24EYqoovRBgOhJg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 02:07:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 634 (0x27a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5280, serialNumber=1A4843E89F2444B2CDDB8118AA8A2F44180E8498
Validity
Not Before: Sep 25 02:07:51 2026 GMT
Not After : Oct 2 02:07:51 2026 GMT
Subject: CN=6ab5d778-38f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:f9:76:ae:f0:56:f1:55:ac:b6:e7:93:86:c0:
d3:0a:14:e8:24:c4:08:c9:44:dd:87:98:ca:f1:ee:
e2:8b:e7:05:72:15:07:a3:5e:88:94:dc:c9:b1:c4:
f6:78:a6:e0:5f:45:4c:be:8d:44:99:c3:8f:df:ff:
ee:cf:ba:5d:bc:92:20:82:13:06:64:b4:40:05:97:
07:62:5f:5c:51:19:8c:5d:7a:b7:00:8e:ff:01:12:
e4:67:56:84:d4:74:0a:b2:5a:25:d4:c8:d8:7d:cf:
5a:b7:c3:8f:ce:97:7a:53:b5:40:72:c5:dc:d5:0c:
80:ea:1a:94:90:16:c9:41:62:ab:ea:73:a5:95:21:
d8:71:cf:9c:ee:27:99:f6:0f:b1:cb:65:c0:b6:45:
7a:83:74:cd:f5:bd:aa:73:3c:c0:63:7b:85:d2:5c:
b6:7c:b8:eb:df:1d:6a:ba:e0:d2:08:6e:0a:6b:e3:
8a:57:b4:07:f1:76:a9:f9:7b:e8:e2:35:38:67:43:
d2:f1:46:8f:1f:ea:2a:1f:0b:bc:ed:40:ba:64:be:
c9:63:88:7d:52:2e:52:7d:6a:da:69:0a:a7:18:d5:
dc:9c:75:11:a8:6f:25:6f:5b:b3:96:04:66:23:49:
af:b0:1a:79:40:58:69:4e:cf:d5:41:93:dd:49:af:
96:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A2:04:E0:A1:91:58:6A:B3:40:B0:28:D2:B6:70:19:3F:89:EF:BC
X509v3 Authority Key Identifier:
keyid:1A:48:43:E8:9F:24:44:B2:CD:DB:81:18:AA:8A:2F:44:18:0E:84:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkhD6J8kRLLN24EYqoovRBgOhJg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:e3:40:30:68:e5:7e:53:17:f2:2b:42:66:ed:62:a8:df:a5:
4a:42:c8:4d:bb:19:2a:8e:b5:3a:29:40:cb:cc:b4:a4:c8:9a:
a3:b7:d1:d7:0a:c4:bf:8e:b2:75:63:65:38:11:56:31:eb:36:
eb:8f:c7:86:8d:f7:f0:24:be:bc:b0:ab:97:20:f3:12:12:41:
30:78:1d:ce:ab:b9:7a:85:2f:e9:d9:ba:a8:5a:e7:0d:8b:78:
63:22:f2:9b:22:c9:6a:6d:9d:3f:60:a9:6a:f1:11:f6:69:58:
e0:ca:44:8f:0a:12:79:a5:4e:f6:47:c3:56:a4:31:3f:43:e0:
7a:06:7e:52:f8:fb:c5:0f:3e:e2:a9:d4:5b:9b:b4:e3:d2:af:
13:e2:21:d7:d9:49:00:6f:d5:98:4a:7a:0f:a7:5c:f6:fc:08:
20:52:9d:f3:26:2b:46:1c:bc:2e:5a:8d:62:df:18:ac:2c:bd:
03:e9:7f:a5:8b:5d:e9:37:2b:75:94:bf:b7:9c:cc:3d:e9:1f:
4b:1c:bf:3d:49:db:49:f2:5a:a4:f8:87:f7:4f:23:56:1e:49:
d0:9d:f3:f1:4f:ef:4e:70:ef:66:05:a9:99:a9:02:81:aa:19:
19:5f:1d:12:f7:ba:89:65:1b:62:cd:45:ef:85:3f:2a:67:ac:
fb:ef:25:95
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjUyODAxMTAvBgNVBAUTKDFBNDg0M0U4OUYyNDQ0QjJDRERCODExOEFBOEEyRjQ0
MTgwRTg0OTgwHhcNMjYwOTI1MDIwNzUxWhcNMjYxMDAyMDIwNzUxWjAYMRYwFAYD
VQQDEw02YWI1ZDc3OC0zOGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8vl2rvBW8VWstueThsDTChToJMQIyUTdh5jK8e7ii+cFchUHo16IlNzJscT2
eKbgX0VMvo1EmcOP3//uz7pdvJIgghMGZLRABZcHYl9cURmMXXq3AI7/ARLkZ1aE
1HQKslol1MjYfc9at8OPzpd6U7VAcsXc1QyA6hqUkBbJQWKr6nOllSHYcc+c7ieZ
9g+xy2XAtkV6g3TN9b2qczzAY3uF0ly2fLjr3x1quuDSCG4Ka+OKV7QH8Xap+Xvo
4jU4Z0PS8UaPH+oqHwu87UC6ZL7JY4h9Ui5SfWraaQqnGNXcnHURqG8lb1uzlgRm
I0mvsBp5QFhpTs/VQZPdSa+WtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDyiBOCh
kVhqs0CwKNK2cBk/ie+8MB8GA1UdIwQYMBaAFBpIQ+ifJESyzduBGKqKL0QYDoSY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTI4MC9DMDRCMUI3NjA5
NUYxMUVFQUQwRUQwNENDNEY5QUUwMi9Ha2hENko4a1JMTE4yNEVZcW9vdlJCZ09o
SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0draEQ2SjhrUkxMTjI0RVlxb292UkJnT2hKZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NTI4MC9DMDRCMUI3NjA5NUYxMUVFQUQwRUQwNENDNEY5QUUwMi9Ha2hENko4a1JM
TE4yNEVZcW9vdlJCZ09oSmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAONAMGjlflMX8itCZu1iqN+lSkLITbsZKo61OilAy8y0pMiao7fR1wrEv46y
dWNlOBFWMes264/Hho338CS+vLCrlyDzEhJBMHgdzqu5eoUv6dm6qFrnDYt4YyLy
myLJam2dP2CpavER9mlY4MpEjwoSeaVO9kfDVqQxP0PgegZ+Uvj7xQ8+4qnUW5u0
49KvE+Ih19lJAG/VmEp6D6dc9vwIIFKd8yYrRhy8LlqNYt8YrCy9A+l/pYtd6Tcr
dZS/t5zMPekfSxy/PUnbSfJapPiH908jVh5J0J3z8U/vTnDvZgWpmakCgaoZGV8d
Eve6iWUbYs1F74U/Kmes++8llQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 01:51:37 2026 by rpki-client