
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB1C2/059F7CBCDCA311F085D6F15B436F56BC/GEMtUeYt2nKdH_G-G4H79VvYs0c.mft
File: GEMtUeYt2nKdH_G-G4H79VvYs0c.mft (raw, json)
Hash identifier: +rGsWuXIYPkU/kpE9VaJM3Dfv9KwpDeRh+jiemVlY3E=
Subject key identifier: 93:2E:CB:78:52:4C:62:DC:84:67:E5:3F:D2:83:25:3A:E2:A1:0F:45
Authority key identifier: 18:43:2D:51:E6:2D:DA:72:9D:1F:F1:BE:1B:81:FB:F5:5B:D8:B3:47
Certificate issuer: /CN=A91AB1C2/serialNumber=18432D51E62DDA729D1FF1BE1B81FBF55BD8B347
Certificate serial: 79
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GEMtUeYt2nKdH_G-G4H79VvYs0c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB1C2/059F7CBCDCA311F085D6F15B436F56BC/GEMtUeYt2nKdH_G-G4H79VvYs0c.mft
Manifest number: 76
Signing time: Mon 27 Jul 2026 10:07:25 +0000
Manifest this update: Mon 27 Jul 2026 10:07:24 +0000
Manifest next update: Mon 03 Aug 2026 10:07:24 +0000
Files and hashes: 1: GEMtUeYt2nKdH_G-G4H79VvYs0c.crl (hash: IHnsPmSUwFkAO1LUxdlxewCotWudmc9l6sc091jppCI=)
2: D4578CBCE0F811F0841404A85E6F56BC.roa (hash: kVIQF28+VXWQvXZxpxDtZOt5V7kSBnZhEpXWdQv6LfU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB1C2/059F7CBCDCA311F085D6F15B436F56BC/GEMtUeYt2nKdH_G-G4H79VvYs0c.crl
rsync://rpki.apnic.net/member_repository/A91AB1C2/059F7CBCDCA311F085D6F15B436F56BC/GEMtUeYt2nKdH_G-G4H79VvYs0c.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GEMtUeYt2nKdH_G-G4H79VvYs0c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 10:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121 (0x79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB1C2, serialNumber=18432D51E62DDA729D1FF1BE1B81FBF55BD8B347
Validity
Not Before: Jul 27 10:07:24 2026 GMT
Not After : Aug 3 10:07:24 2026 GMT
Subject: CN=6a672ddc-3f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:91:99:94:91:8c:49:63:9d:31:87:b3:4e:48:
c6:26:82:1f:09:1a:1b:96:76:d2:e9:3b:47:38:03:
c2:8c:38:c2:61:b8:93:4b:71:b4:17:7a:51:b3:4e:
49:c6:78:68:7a:ab:f5:54:91:22:6a:20:c4:a2:c3:
d1:b7:06:bd:26:2c:f7:59:12:03:c9:17:37:f5:ba:
82:03:1b:8b:b9:ec:73:f7:9a:af:59:ba:f7:7e:8a:
e3:af:34:21:98:b2:71:a1:aa:25:59:5a:6c:40:26:
01:6d:f0:73:50:47:60:67:40:8b:55:47:d3:22:1d:
e4:38:17:44:cc:33:36:23:45:b1:04:69:c9:de:ed:
46:e1:bf:75:a0:52:74:02:1c:cc:83:80:9f:b1:70:
3e:ab:e4:1c:3d:40:50:2c:45:bb:5d:7a:47:0d:20:
8d:45:a2:eb:ae:bb:e4:93:bb:88:3b:74:0f:f6:d6:
b6:fc:76:83:61:4e:19:a1:e9:7c:6a:33:2f:98:2c:
9c:d8:6b:2f:20:2a:09:49:4f:ff:a6:2c:6a:18:6f:
a8:5c:c3:ab:18:11:be:fc:0a:13:e0:36:90:d6:e1:
be:7f:cf:4f:30:15:cb:8a:27:81:a7:fd:0a:9a:a5:
dd:4b:28:d4:10:18:7a:6e:7d:58:5c:df:76:c0:a1:
6d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:2E:CB:78:52:4C:62:DC:84:67:E5:3F:D2:83:25:3A:E2:A1:0F:45
X509v3 Authority Key Identifier:
keyid:18:43:2D:51:E6:2D:DA:72:9D:1F:F1:BE:1B:81:FB:F5:5B:D8:B3:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/059F7CBCDCA311F085D6F15B436F56BC/GEMtUeYt2nKdH_G-G4H79VvYs0c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GEMtUeYt2nKdH_G-G4H79VvYs0c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/059F7CBCDCA311F085D6F15B436F56BC/GEMtUeYt2nKdH_G-G4H79VvYs0c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:82:9a:83:33:1f:74:79:6d:b4:a2:19:67:32:65:a0:e1:37:
57:c8:40:fa:98:52:17:78:4d:b9:27:23:41:d4:40:10:61:a0:
2d:23:56:97:94:ad:dd:5b:1f:9c:26:71:0b:c5:79:f4:54:76:
02:0d:f3:e4:ed:72:b2:a5:99:1a:81:96:e3:db:ac:5f:83:9e:
a9:a1:82:da:73:66:7c:dd:23:91:1a:67:be:fd:07:e6:1a:91:
60:a9:e3:11:b3:b5:91:b8:0f:40:9f:a8:ce:48:3b:83:e3:bc:
66:cf:52:9d:6a:d1:9b:f0:25:ee:81:36:fd:16:52:ec:c0:33:
e5:e1:b5:e3:27:46:84:ef:a7:91:a9:dd:00:f2:3f:a1:2a:0e:
80:43:c5:98:e7:63:c3:1f:01:55:fd:4b:5d:07:99:fd:7f:c4:
44:cf:74:62:ad:ff:4f:a2:f7:36:db:99:b2:66:4e:16:c7:5d:
8c:10:a0:1c:85:ec:28:20:76:e4:e3:1d:6f:cc:5f:16:5c:ce:
2e:86:4c:d5:17:ac:9c:68:aa:08:ba:68:4e:ef:9b:c9:9b:5b:
4c:41:30:3b:f4:d5:64:df:2a:12:ae:f9:f6:cc:46:8f:4a:ae:
cc:61:1e:bf:b8:24:ee:4c:60:ae:e2:f1:0f:6e:18:a7:cb:2c:
6e:3e:c0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:10:09 2026 by rpki-client