
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.mft
File: GM0m8vXURLcgxFKoxskgxtCmGAU.mft (raw, json)
Hash identifier: VdOdaPt28lJZooEMl9isD1Vys73OINbaa6p2E6kSZEY=
Subject key identifier: 9F:BE:A9:EE:1F:85:A4:AF:C6:4B:CA:AC:BE:E6:F0:71:08:C4:01:14
Authority key identifier: 18:CD:26:F2:F5:D4:44:B7:20:C4:52:A8:C6:C9:20:C6:D0:A6:18:05
Certificate issuer: /CN=A91AAF02/serialNumber=18CD26F2F5D444B720C452A8C6C920C6D0A61805
Certificate serial: 0287
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GM0m8vXURLcgxFKoxskgxtCmGAU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.mft
Manifest number: 0282
Signing time: Tue 28 Jul 2026 17:34:52 +0000
Manifest this update: Tue 28 Jul 2026 17:34:51 +0000
Manifest next update: Tue 04 Aug 2026 17:34:51 +0000
Files and hashes: 1: GM0m8vXURLcgxFKoxskgxtCmGAU.crl (hash: lf5zxE4B8XF/aqeobZ1N3bcuJ44i5m0V7w/+Fe6HWXs=)
2: 65A422A8C3F411EEB1191654C4F9AE02.roa (hash: s3pplahrtkEIiqFvq9bDswEXkbohC1ZEoUg/qiNs0L4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.crl
rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GM0m8vXURLcgxFKoxskgxtCmGAU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:41:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 647 (0x287)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAF02, serialNumber=18CD26F2F5D444B720C452A8C6C920C6D0A61805
Validity
Not Before: Jul 28 17:34:51 2026 GMT
Not After : Aug 4 17:34:51 2026 GMT
Subject: CN=6a68e83c-fe9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:18:8a:a1:67:14:b5:1a:38:69:85:a9:43:b4:
69:07:20:1c:af:60:5d:a8:25:c7:12:d5:ce:97:24:
09:3e:d4:7e:90:71:fb:fa:60:6c:6b:8b:b1:4f:ed:
81:2b:c4:93:5b:c2:7b:e7:11:ac:42:7d:b2:45:90:
a8:d1:38:7a:21:b8:80:da:8a:29:62:ee:a0:83:73:
25:9a:4c:a9:e2:f3:37:a1:a4:6c:66:75:5c:6d:32:
c8:d2:84:0c:3d:b4:fd:63:b0:c6:dc:c1:55:1b:e2:
5b:47:42:f6:29:0b:fc:2d:4e:75:20:5f:ea:a3:9b:
6b:a4:0b:df:a9:90:6e:f1:0c:ff:76:aa:cd:71:17:
21:d9:50:98:42:c8:01:d9:e3:ce:01:fa:55:7a:08:
a2:7c:7f:50:d9:01:97:6c:38:0d:e5:53:2c:af:19:
95:b1:58:70:32:54:aa:3b:db:9b:9c:61:19:5c:98:
31:8f:e7:e8:5d:7e:52:f8:2f:40:ae:72:8f:d7:17:
4a:63:f6:21:0e:8b:1a:00:a3:28:14:de:02:94:72:
58:e0:f9:8d:37:7f:22:35:d4:bf:1d:15:7b:cf:ec:
73:7f:9c:1e:a6:60:17:2c:38:07:20:b1:ab:e6:b9:
2b:e6:f9:69:c2:f1:f9:0c:e2:dd:43:50:d7:43:c7:
1a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:BE:A9:EE:1F:85:A4:AF:C6:4B:CA:AC:BE:E6:F0:71:08:C4:01:14
X509v3 Authority Key Identifier:
keyid:18:CD:26:F2:F5:D4:44:B7:20:C4:52:A8:C6:C9:20:C6:D0:A6:18:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GM0m8vXURLcgxFKoxskgxtCmGAU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:bf:86:64:03:87:9f:f8:a9:ee:9c:33:15:8d:94:25:0d:27:
80:1d:c6:5f:55:d4:01:c9:72:2f:70:f9:cb:46:b5:af:98:55:
bf:56:dd:71:3f:8d:41:1f:4a:be:62:8e:d4:04:2b:e6:02:2d:
16:d1:6f:2a:e9:da:12:10:ce:d8:93:27:a0:60:e3:91:9c:1f:
17:6b:bc:46:59:ed:8d:51:8a:9e:a5:16:3b:d7:34:4b:24:b5:
1b:e0:26:08:b4:58:0f:8e:88:2c:8c:24:57:dc:e9:ce:e2:f7:
01:4d:30:32:60:ea:51:7f:b6:f0:5d:6d:ad:a1:f8:85:10:a1:
fa:8d:59:1f:3b:88:52:04:bb:f4:00:23:0f:b2:69:2f:a4:db:
7d:90:9b:85:9a:52:5b:41:b4:48:d0:29:ac:ab:1c:ec:0e:f3:
a0:cc:d5:11:0f:04:b1:f7:ed:64:44:e8:e1:94:d3:3b:2c:33:
6f:9f:62:74:2d:00:f2:fe:04:8f:2c:1e:af:4f:f1:c0:6e:b9:
81:40:f3:30:96:b1:cd:54:04:27:c9:4e:fd:91:b1:e5:b5:56:
52:2a:66:b4:11:39:3f:35:2b:93:d3:40:dd:fb:f7:69:6f:83:
3b:2b:77:74:21:e4:d3:18:8b:09:ca:bf:c6:ca:d3:8f:10:5f:
a0:e1:76:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:01:28 2026 by rpki-client