
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.mft
File: gmtVkqw4sBK358JzDdBgfhDbgQI.mft (raw, json)
Hash identifier: yGlRqLvG5Y3bd9/IJJlOXouJFcUrYekh3xLrE/DK1Ic=
Subject key identifier: 00:3B:D7:D8:D9:3C:56:31:B1:4C:47:19:91:C4:13:84:9B:54:85:D8
Authority key identifier: 82:6B:55:92:AC:38:B0:12:B7:E7:C2:73:0D:D0:60:7E:10:DB:81:02
Certificate issuer: /CN=A91D23C7/serialNumber=826B5592AC38B012B7E7C2730DD0607E10DB8102
Certificate serial: 062A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmtVkqw4sBK358JzDdBgfhDbgQI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.mft
Manifest number: 0621
Signing time: Sun 20 Sep 2026 22:39:42 +0000
Manifest this update: Sun 20 Sep 2026 22:39:42 +0000
Manifest next update: Sun 27 Sep 2026 22:39:42 +0000
Files and hashes: 1: gmtVkqw4sBK358JzDdBgfhDbgQI.crl (hash: yeuHfOe2gs969yvWLL56pzgLZ1MQT3oqCk4bzggYbkM=)
2: 25B713A4FE6B11EBB5DD176BC4F9AE02.roa (hash: DqhzTlL/TM9MCYZl1hZt1EMkx6698paItxMEmrPBJS4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.crl
rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmtVkqw4sBK358JzDdBgfhDbgQI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 22:39:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1578 (0x62a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D23C7, serialNumber=826B5592AC38B012B7E7C2730DD0607E10DB8102
Validity
Not Before: Sep 20 22:39:42 2026 GMT
Not After : Sep 27 22:39:42 2026 GMT
Subject: CN=6ab060ae-aa75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:89:93:11:90:e7:d5:a7:b4:79:97:37:56:b6:
ce:ce:9e:51:11:94:19:3b:de:d9:7d:bd:19:bd:f0:
52:13:91:b0:ae:30:99:20:a4:b5:f7:5f:f4:d9:a0:
c7:96:63:fd:c7:1b:13:7b:be:df:cd:a8:b0:56:a1:
35:1d:51:bd:8a:d9:dc:75:45:39:6e:1c:8c:f6:87:
fe:b8:87:d3:af:5b:6c:ec:b3:79:5a:4b:45:8f:c7:
f3:da:07:34:fe:89:c9:7d:28:8c:4f:4c:62:75:53:
8c:af:f6:a4:9f:9a:dd:2d:91:a4:cf:5a:32:df:a0:
d6:a7:de:55:d3:f8:70:fa:62:05:60:d7:e4:3d:95:
c5:31:66:07:66:7e:f5:3c:99:ac:e7:8d:2f:05:6a:
e6:0a:a3:52:cd:0e:f0:79:2b:ab:39:95:21:e2:20:
f8:d8:08:9e:e9:e8:cc:86:19:0d:2a:de:3b:ac:58:
03:61:32:28:f6:8c:e7:b8:3f:da:79:bb:96:a7:44:
b7:2a:c6:f3:41:57:b4:ce:f0:8d:d7:ac:2d:64:95:
22:50:33:a8:57:6b:ca:43:db:10:26:ec:f5:b1:82:
9c:76:21:26:58:ab:a7:5b:fd:60:e3:49:ef:4b:f5:
6a:eb:72:6b:80:c1:b9:7f:6b:e9:ef:03:22:30:dd:
79:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:3B:D7:D8:D9:3C:56:31:B1:4C:47:19:91:C4:13:84:9B:54:85:D8
X509v3 Authority Key Identifier:
keyid:82:6B:55:92:AC:38:B0:12:B7:E7:C2:73:0D:D0:60:7E:10:DB:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmtVkqw4sBK358JzDdBgfhDbgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:54:d3:2b:ed:68:55:63:3d:a3:87:bc:74:dc:1a:b3:8f:a5:
89:4d:b3:e0:ce:67:c9:26:80:b7:d8:bf:66:ef:d4:72:39:7d:
9d:5f:44:8f:f8:ce:15:83:10:16:7e:0c:6f:62:c7:77:41:2f:
bb:a0:35:f4:7e:f9:47:35:55:63:4f:a0:ca:47:37:2a:45:7c:
31:19:f7:86:82:8f:3f:81:c9:eb:66:ed:01:9f:7a:84:19:f1:
a9:60:08:d0:5d:7c:f8:f9:c0:12:99:5c:e1:80:62:bc:98:17:
5c:0e:1c:89:c9:de:2c:4a:dc:b5:d8:c1:19:51:97:04:d9:c8:
3e:ea:cc:9b:b3:cf:bc:38:9f:6f:86:7d:05:33:4d:e7:1f:c6:
32:4a:69:60:b3:65:3f:5e:e0:74:13:6f:f3:c7:6b:6d:e4:20:
68:bd:fc:da:0a:35:48:fa:5a:c5:17:32:77:93:ef:1b:9f:1d:
b9:1a:45:ea:92:a8:8e:e0:f5:9a:ab:c6:23:d0:e7:ef:27:2c:
8a:f9:fe:97:a7:03:a4:bf:dd:0b:12:96:21:79:13:fe:21:a9:
79:9f:ae:a5:10:54:a6:c8:ae:fa:89:39:1f:1a:54:42:8f:80:
23:2c:f3:44:9b:17:da:58:c7:94:4b:a4:38:d0:19:79:6d:17:
2b:92:8c:71
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDIzQzcxMTAvBgNVBAUTKDgyNkI1NTkyQUMzOEIwMTJCN0U3QzI3MzBERDA2MDdF
MTBEQjgxMDIwHhcNMjYwOTIwMjIzOTQyWhcNMjYwOTI3MjIzOTQyWjAYMRYwFAYD
VQQDEw02YWIwNjBhZS1hYTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA64mTEZDn1ae0eZc3VrbOzp5REZQZO97Zfb0ZvfBSE5GwrjCZIKS191/02aDH
lmP9xxsTe77fzaiwVqE1HVG9itncdUU5bhyM9of+uIfTr1ts7LN5WktFj8fz2gc0
/onJfSiMT0xidVOMr/akn5rdLZGkz1oy36DWp95V0/hw+mIFYNfkPZXFMWYHZn71
PJms540vBWrmCqNSzQ7weSurOZUh4iD42Aie6ejMhhkNKt47rFgDYTIo9oznuD/a
ebuWp0S3KsbzQVe0zvCN16wtZJUiUDOoV2vKQ9sQJuz1sYKcdiEmWKunW/1g40nv
S/Vq63JrgMG5f2vp7wMiMN15EwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAA719jZ
PFYxsUxHGZHEE4SbVIXYMB8GA1UdIwQYMBaAFIJrVZKsOLASt+fCcw3QYH4Q24EC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjNDNy83QjJGNTM4QUZF
NjgxMUVCODhDQzBFNDFDNEY5QUUwMi9nbXRWa3F3NHNCSzM1OEp6RGRCZ2ZoRGJn
UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dtdFZrcXc0c0JLMzU4SnpEZEJnZmhEYmdRSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MjNDNy83QjJGNTM4QUZFNjgxMUVCODhDQzBFNDFDNEY5QUUwMi9nbXRWa3F3NHNC
SzM1OEp6RGRCZ2ZoRGJnUUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAo1TTK+1oVWM9o4e8dNwas4+liU2z4M5nySaAt9i/Zu/Ucjl9nV9Ej/jOFYMQ
Fn4Mb2LHd0Evu6A19H75RzVVY0+gykc3KkV8MRn3hoKPP4HJ62btAZ96hBnxqWAI
0F18+PnAEplc4YBivJgXXA4cicneLErctdjBGVGXBNnIPurMm7PPvDifb4Z9BTNN
5x/GMkppYLNlP17gdBNv88drbeQgaL382go1SPpaxRcyd5PvG58duRpF6pKojuD1
mqvGI9Dn7ycsivn+l6cDpL/dCxKWIXkT/iGpeZ+upRBUpsiu+ok5HxpUQo+AIyzz
RJsX2ljHlEukONAZeW0XK5KMcQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 16:42:16 2026 by rpki-client