
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.mft
File: gmtEdLxvTzvkC151EfEFyuf-jAw.mft (raw, json)
Hash identifier: ydAPO7u4pasMnzt/vXVgDuu2HuxzfJ5rrxoKZKKiGno=
Subject key identifier: 33:2D:57:CD:AE:31:91:43:EE:3E:99:95:3E:3F:77:F8:83:17:C1:61
Authority key identifier: 82:6B:44:74:BC:6F:4F:3B:E4:0B:5E:75:11:F1:05:CA:E7:FE:8C:0C
Certificate issuer: /CN=A91FAB3C/serialNumber=826B4474BC6F4F3BE40B5E7511F105CAE7FE8C0C
Certificate serial: F3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmtEdLxvTzvkC151EfEFyuf-jAw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.mft
Manifest number: E8
Signing time: Wed 23 Sep 2026 06:25:21 +0000
Manifest this update: Wed 23 Sep 2026 06:25:20 +0000
Manifest next update: Wed 30 Sep 2026 06:25:20 +0000
Files and hashes: 1: gmtEdLxvTzvkC151EfEFyuf-jAw.crl (hash: rtw4Hv4jkJLUhzgchfToebwb8JvUJos18kfSLg9KTL0=)
2: BFA0334C01EA11F192D3B8D33A6F56BC.roa (hash: XjlVmV8NgohpXMWVwien7pyrDDxq3Y5kxsjfkRxixjk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.crl
rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmtEdLxvTzvkC151EfEFyuf-jAw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 06:25:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 243 (0xf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FAB3C, serialNumber=826B4474BC6F4F3BE40B5E7511F105CAE7FE8C0C
Validity
Not Before: Sep 23 06:25:20 2026 GMT
Not After : Sep 30 06:25:20 2026 GMT
Subject: CN=6ab370d1-6d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3b:ea:db:50:83:ff:fd:09:e3:73:5a:5d:1c:
ca:ff:b6:ec:eb:d2:01:1d:c5:25:2e:3f:f2:f0:20:
f7:b7:2a:a1:58:ae:5c:e6:51:76:1b:7c:4e:98:c5:
a2:4b:9d:ab:b4:8c:30:07:3d:a0:59:6e:a5:a0:de:
81:bb:fc:67:3d:9a:2d:8e:e8:f7:20:a4:f9:bb:ab:
ce:df:17:9b:e0:58:22:16:1c:ac:87:c9:0b:cc:2e:
c1:4b:2e:cb:d9:89:0f:f7:24:04:e8:f9:b0:5f:89:
46:f7:35:fa:31:38:74:82:fc:3b:50:95:b3:ea:59:
fa:39:d5:92:35:d2:6c:b2:1f:33:2b:01:8e:02:ca:
e1:ac:03:b2:63:62:5f:45:0b:26:61:f7:46:74:cc:
b5:95:bb:84:88:20:1d:48:93:c2:fa:b0:0b:52:21:
66:e7:38:8b:ff:85:5c:71:fe:b0:f5:79:0f:2a:45:
0d:60:90:21:55:64:1a:1d:cc:d5:90:11:2d:7c:fc:
06:8f:3a:15:8f:6b:bd:0c:dd:f1:8c:bc:65:d4:c9:
3b:65:7f:32:94:59:96:11:70:8f:b8:de:86:6b:db:
4a:b3:30:26:43:f1:d8:35:d2:86:47:d7:c9:9a:f5:
ba:8b:23:38:a6:fb:5a:4f:1a:cd:d9:76:ae:b0:bb:
dd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:2D:57:CD:AE:31:91:43:EE:3E:99:95:3E:3F:77:F8:83:17:C1:61
X509v3 Authority Key Identifier:
keyid:82:6B:44:74:BC:6F:4F:3B:E4:0B:5E:75:11:F1:05:CA:E7:FE:8C:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmtEdLxvTzvkC151EfEFyuf-jAw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:d4:76:ec:ca:b1:67:e0:7c:dc:6d:53:ca:0c:93:68:4b:3b:
22:06:c5:0e:92:5f:07:b0:f4:53:58:96:64:35:21:44:6b:87:
89:90:12:b0:2f:86:84:f3:ec:44:bf:14:a1:8f:1f:70:3d:22:
83:bc:58:ce:66:a9:64:0f:ef:01:62:eb:6a:a1:ae:7d:1d:d6:
67:54:37:62:dc:a7:e9:a8:fa:33:f5:9e:fd:84:ec:05:2d:13:
7b:43:f7:d1:e4:f4:2e:67:ab:66:4c:9f:4e:46:38:60:2d:95:
f0:9a:c3:06:58:11:60:f8:03:c7:2c:26:f6:01:3c:ce:32:a6:
b5:71:7f:e8:48:c2:2a:a2:79:dc:72:8b:e0:3e:8a:3c:b6:15:
93:33:80:3c:78:27:e9:3a:1c:ac:46:27:b7:38:ff:a5:91:d4:
30:a9:b5:ee:b4:1a:da:f0:5e:f7:fb:4c:3e:83:b6:0a:78:08:
59:9f:25:c0:7e:ef:0f:9a:9f:c9:f7:7f:3c:e7:2f:35:2f:50:
cf:fc:5c:55:47:d2:0e:ef:a7:45:60:de:0d:be:cb:aa:ad:69:
23:04:0e:28:90:64:0c:51:de:22:54:56:e7:d2:66:e3:c1:ff:
e3:be:37:9f:4a:f4:b2:56:2d:f4:61:bd:15:45:bc:e1:6b:60:
28:7f:80:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:26:35 2026 by rpki-client