
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.mft
File: GkhD6J8kRLLN24EYqoovRBgOhJg.mft (raw, json)
Hash identifier: HTeID6rzyWUFswC24LeKe33orit/mZBJgxylUpLnwwg=
Subject key identifier: EE:F6:9F:A7:8C:C0:1A:7C:C7:4B:9B:54:90:7B:41:EC:81:F3:74:93
Authority key identifier: 1A:48:43:E8:9F:24:44:B2:CD:DB:81:18:AA:8A:2F:44:18:0E:84:98
Certificate issuer: /CN=A91F5280/serialNumber=1A4843E89F2444B2CDDB8118AA8A2F44180E8498
Certificate serial: 0259
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkhD6J8kRLLN24EYqoovRBgOhJg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.mft
Manifest number: 0250
Signing time: Thu 23 Jul 2026 03:34:58 +0000
Manifest this update: Thu 23 Jul 2026 03:34:57 +0000
Manifest next update: Thu 30 Jul 2026 03:34:57 +0000
Files and hashes: 1: GkhD6J8kRLLN24EYqoovRBgOhJg.crl (hash: m9rFU6ltdWOSIuhzL42wbnowocS04CpoiHeeY8B4ImE=)
2: B5569B88096311EE9ECB644DC4F9AE02.roa (hash: 4HF0DTPBSH5S3QjwkCb71T/4b+8A54VUugU3EtAjksc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.crl
rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkhD6J8kRLLN24EYqoovRBgOhJg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 601 (0x259)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5280, serialNumber=1A4843E89F2444B2CDDB8118AA8A2F44180E8498
Validity
Not Before: Jul 23 03:34:57 2026 GMT
Not After : Jul 30 03:34:57 2026 GMT
Subject: CN=6a618be1-5615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1a:ad:5b:68:aa:c8:1d:a9:66:a5:b6:3a:a2:
17:57:18:17:56:c8:a7:09:6a:5d:9a:a6:db:00:9a:
28:92:e3:37:d5:dd:0c:11:6a:f1:95:ff:2f:48:01:
be:7e:dc:48:b7:c7:9a:ed:62:aa:87:dd:fa:d6:2c:
c8:97:8e:e8:f0:9c:74:fc:3a:cc:a5:97:d1:7e:7b:
ab:c0:94:9f:53:56:eb:74:c2:c0:80:96:8a:df:ca:
bf:1a:cc:1c:31:ab:3d:7f:db:d9:d6:99:b0:8d:a1:
32:d9:c1:73:51:46:a2:49:15:48:08:fa:45:2d:42:
de:7f:37:75:28:27:1a:91:c7:2c:81:5c:12:bb:75:
a5:1b:1f:75:a9:6f:8a:ea:5c:9c:44:c2:38:57:f8:
83:ca:3d:d7:9c:6b:ff:c2:c8:c2:d7:02:0a:27:35:
db:a2:c9:93:e5:15:bc:22:10:3c:9b:6a:bd:d3:2e:
db:8f:30:3c:a4:47:04:2e:18:d3:b6:e9:44:a4:1e:
66:a7:a6:d6:82:63:97:9a:3e:04:87:87:a2:a2:1d:
6c:68:3d:f4:c5:f2:0c:bc:d7:c8:a7:00:7d:2b:60:
19:d5:2e:8a:f7:ca:f7:21:f4:c8:86:a2:07:49:a1:
f9:33:7d:94:5d:c6:1b:a1:15:0f:8a:6e:cb:d6:9c:
51:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F6:9F:A7:8C:C0:1A:7C:C7:4B:9B:54:90:7B:41:EC:81:F3:74:93
X509v3 Authority Key Identifier:
keyid:1A:48:43:E8:9F:24:44:B2:CD:DB:81:18:AA:8A:2F:44:18:0E:84:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkhD6J8kRLLN24EYqoovRBgOhJg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:9b:33:81:4c:c7:5d:d9:e0:e4:56:36:1a:87:04:bf:c9:a3:
de:66:68:e3:86:bf:04:68:28:40:71:86:ff:43:ae:a8:ce:50:
92:46:2d:aa:c3:bf:1c:b3:9f:c3:24:02:40:c4:66:43:97:cb:
82:a9:35:d7:bd:20:53:cf:14:3a:76:cc:4b:b4:29:f8:a7:3d:
1c:57:60:e5:43:17:7b:ff:3f:3a:5c:15:5d:60:70:b3:50:a9:
4f:04:d2:54:c2:39:6a:9f:60:09:37:b6:9a:ef:26:aa:07:e0:
d8:3a:1e:b6:eb:2f:50:3f:99:18:fa:bc:5e:59:f5:7d:e4:90:
24:fa:be:ed:5d:90:e9:64:f5:b5:4a:27:4f:fa:24:25:57:15:
cd:32:1c:ba:fa:28:09:ce:f3:5f:bb:a5:ed:c3:64:9d:d0:8c:
13:b6:14:05:b3:aa:da:bc:c5:33:48:ed:a6:13:f3:6f:80:ce:
67:ea:02:16:a9:99:01:07:e4:50:69:61:e4:c3:b6:c0:fa:ab:
bf:c2:37:31:0d:26:cd:55:0f:e3:c4:3e:e3:17:2f:cb:52:af:
dc:07:cc:74:99:75:8c:97:17:db:85:a7:e6:fc:e4:07:a2:22:
b0:f4:08:19:b8:8f:9d:4f:2b:ea:df:c7:6c:c4:70:4e:85:5d:
9f:0b:b6:4a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjUyODAxMTAvBgNVBAUTKDFBNDg0M0U4OUYyNDQ0QjJDRERCODExOEFBOEEyRjQ0
MTgwRTg0OTgwHhcNMjYwNzIzMDMzNDU3WhcNMjYwNzMwMDMzNDU3WjAYMRYwFAYD
VQQDEw02YTYxOGJlMS01NjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoxqtW2iqyB2pZqW2OqIXVxgXVsinCWpdmqbbAJookuM31d0MEWrxlf8vSAG+
ftxIt8ea7WKqh9361izIl47o8Jx0/DrMpZfRfnurwJSfU1brdMLAgJaK38q/Gswc
Mas9f9vZ1pmwjaEy2cFzUUaiSRVICPpFLULefzd1KCcakccsgVwSu3WlGx91qW+K
6lycRMI4V/iDyj3XnGv/wsjC1wIKJzXbosmT5RW8IhA8m2q90y7bjzA8pEcELhjT
tulEpB5mp6bWgmOXmj4Eh4eioh1saD30xfIMvNfIpwB9K2AZ1S6K98r3IfTIhqIH
SaH5M32UXcYboRUPim7L1pxRMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO72n6eM
wBp8x0ubVJB7QeyB83STMB8GA1UdIwQYMBaAFBpIQ+ifJESyzduBGKqKL0QYDoSY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTI4MC9DMDRCMUI3NjA5
NUYxMUVFQUQwRUQwNENDNEY5QUUwMi9Ha2hENko4a1JMTE4yNEVZcW9vdlJCZ09o
SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0draEQ2SjhrUkxMTjI0RVlxb292UkJnT2hKZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NTI4MC9DMDRCMUI3NjA5NUYxMUVFQUQwRUQwNENDNEY5QUUwMi9Ha2hENko4a1JM
TE4yNEVZcW9vdlJCZ09oSmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWpszgUzHXdng5FY2GocEv8mj3mZo44a/BGgoQHGG/0OuqM5QkkYtqsO/HLOf
wyQCQMRmQ5fLgqk1170gU88UOnbMS7Qp+Kc9HFdg5UMXe/8/OlwVXWBws1CpTwTS
VMI5ap9gCTe2mu8mqgfg2DoetusvUD+ZGPq8Xln1feSQJPq+7V2Q6WT1tUonT/ok
JVcVzTIcuvooCc7zX7ul7cNkndCME7YUBbOq2rzFM0jtphPzb4DOZ+oCFqmZAQfk
UGlh5MO2wPqrv8I3MQ0mzVUP48Q+4xcvy1Kv3AfMdJl1jJcX24Wn5vzkB6IisPQI
GbiPnU8r6t/HbMRwToVdnwu2Sg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:44:05 2026 by rpki-client