
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.mft
File: gmtEdLxvTzvkC151EfEFyuf-jAw.mft (raw, json)
Hash identifier: wBKBb6wpdXtInaeK/K4RKPCMIe4DH8BjvkvWxIwsEmA=
Subject key identifier: E0:A3:B9:F5:F6:AC:3F:A2:04:52:BF:49:92:A1:CA:7F:06:AF:C5:1E
Authority key identifier: 82:6B:44:74:BC:6F:4F:3B:E4:0B:5E:75:11:F1:05:CA:E7:FE:8C:0C
Certificate issuer: /CN=A91FAB3C/serialNumber=826B4474BC6F4F3BE40B5E7511F105CAE7FE8C0C
Certificate serial: A8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmtEdLxvTzvkC151EfEFyuf-jAw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.mft
Manifest number: 9F
Signing time: Mon 11 May 2026 07:36:31 +0000
Manifest this update: Mon 11 May 2026 07:36:30 +0000
Manifest next update: Mon 18 May 2026 07:36:30 +0000
Files and hashes: 1: gmtEdLxvTzvkC151EfEFyuf-jAw.crl (hash: zqbU1EZ0BUcRKg2Ux0EjZPPaqqbVcps+Q6lVDn4T5zs=)
2: CF2B394C01EA11F190A04A823B6F56BC.roa (hash: rTvAf6dpPCKk56C1vD7o94oTi+zGUzL5wM5zHdMv5WY=)
3: BFA0334C01EA11F192D3B8D33A6F56BC.roa (hash: ING31SnTtfOxcPZAmEFgJK41efrAn9HChDGYUP/RwuA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.crl
rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmtEdLxvTzvkC151EfEFyuf-jAw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:36:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168 (0xa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FAB3C, serialNumber=826B4474BC6F4F3BE40B5E7511F105CAE7FE8C0C
Validity
Not Before: May 11 07:36:30 2026 GMT
Not After : May 18 07:36:30 2026 GMT
Subject: CN=6a0186fe-abf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:32:da:60:4d:0e:f8:1e:d4:60:dc:0b:78:b4:
3e:cf:3f:06:9f:46:ff:89:0e:74:bd:1e:c8:fa:d7:
e4:8a:d8:1b:04:09:a5:a3:da:f4:c0:b4:c6:59:9e:
cc:2b:aa:2a:68:f6:55:b0:12:c7:79:ac:75:01:65:
ef:d8:22:c4:9d:8d:79:7d:08:20:e6:a3:b0:c1:4e:
20:ea:94:f3:5f:e0:3d:fe:23:bd:0b:ef:6c:00:e6:
b2:f4:fd:c3:05:dd:aa:2e:9b:db:67:28:fb:7f:45:
18:a7:7a:ee:18:f7:e8:49:c7:c8:72:36:ba:30:7e:
7e:57:fe:de:7c:d6:79:bf:77:39:fb:f8:15:0e:71:
a3:11:3d:c1:f6:4e:c8:6f:8a:56:ba:d5:db:fe:06:
1e:de:db:8a:85:ee:19:82:b3:5c:4a:17:c0:39:67:
b1:9b:77:48:e5:a5:8c:fb:31:d5:a1:4a:da:89:02:
bb:a8:86:ba:fc:55:8f:37:6f:6a:f3:7d:29:fb:5b:
a9:e1:f7:b6:45:4a:69:cb:39:aa:65:2c:a1:40:b5:
7b:02:24:99:c1:4a:c9:d1:e3:9f:7e:35:08:a2:25:
9c:62:bc:9d:28:0b:22:52:ad:95:1d:5b:c0:c5:17:
12:d4:ce:d8:af:7c:6e:52:0e:8d:53:54:24:9d:74:
aa:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A3:B9:F5:F6:AC:3F:A2:04:52:BF:49:92:A1:CA:7F:06:AF:C5:1E
X509v3 Authority Key Identifier:
keyid:82:6B:44:74:BC:6F:4F:3B:E4:0B:5E:75:11:F1:05:CA:E7:FE:8C:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmtEdLxvTzvkC151EfEFyuf-jAw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:f5:a2:ca:3f:cb:96:14:30:ee:a2:1c:5a:1b:cb:22:23:ba:
6e:0d:13:80:6c:3c:0b:a5:3b:3c:a3:64:06:5a:21:5c:76:5d:
9c:a7:3f:5c:89:92:23:75:ff:e2:9e:7e:df:8c:77:d6:ec:17:
07:dd:5d:d7:e3:b5:7a:5a:78:e7:5f:37:5c:9d:f9:5c:c9:3e:
3b:71:60:28:df:63:c1:08:6b:3a:3a:c4:4c:42:54:47:4e:a4:
31:13:46:d1:df:d2:69:ec:ee:dd:61:03:3d:ec:34:dc:e7:5b:
93:61:66:3a:06:7d:da:dc:5a:4f:ab:66:7e:69:45:d9:16:1b:
cb:ed:d4:8d:b1:f9:b3:b9:c7:c5:56:1a:eb:86:31:a6:ed:97:
2e:78:c0:d4:6f:30:38:c6:bb:05:10:55:86:2c:b7:1d:59:26:
6d:92:db:28:ae:6e:b1:8e:45:56:be:1e:c7:67:85:c7:2f:b1:
3e:f3:46:13:a4:75:3a:6b:bd:6d:05:9a:03:1c:de:53:80:3b:
b5:16:21:be:09:33:df:11:1a:58:9f:b3:2b:6c:f9:18:57:fd:
24:54:a2:10:55:b1:f1:9b:4f:80:e0:b8:57:65:70:83:b8:05:
97:11:47:7b:a2:6f:e2:cb:dd:47:e4:7d:22:5c:2f:65:74:ba:
52:86:ed:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:31:55 2026 by rpki-client