
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.mft
File: gOknW25uvGrXWF12r7akALUULD8.mft (raw, json)
Hash identifier: +N13HZIZBS6e7hbHyzb8729pW+rGbzFR0n6wUMqROlI=
Subject key identifier: A1:34:AF:08:AF:8F:2E:B8:70:EB:1F:84:19:CC:B8:CE:EE:AA:7C:E8
Authority key identifier: 80:E9:27:5B:6E:6E:BC:6A:D7:58:5D:76:AF:B6:A4:00:B5:14:2C:3F
Certificate issuer: /CN=A91D313B/serialNumber=80E9275B6E6EBC6AD7585D76AFB6A400B5142C3F
Certificate serial: 019E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gOknW25uvGrXWF12r7akALUULD8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.mft
Manifest number: 0199
Signing time: Mon 21 Sep 2026 04:20:18 +0000
Manifest this update: Mon 21 Sep 2026 04:20:17 +0000
Manifest next update: Mon 28 Sep 2026 04:20:17 +0000
Files and hashes: 1: gOknW25uvGrXWF12r7akALUULD8.crl (hash: I/r/lzobG1z05ywlJoymkvfgh1WMOZ3EFSlrnNqhFEY=)
2: 3446813047DC11EFA05E932EC4F9AE02.roa (hash: K4s4bQ+AZEMbINRSOhh8kAqaJQUKtCHKATxaJcI+fSc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.crl
rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gOknW25uvGrXWF12r7akALUULD8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 04:20:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 414 (0x19e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D313B, serialNumber=80E9275B6E6EBC6AD7585D76AFB6A400B5142C3F
Validity
Not Before: Sep 21 04:20:17 2026 GMT
Not After : Sep 28 04:20:17 2026 GMT
Subject: CN=6ab0b081-1b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1d:15:3b:10:34:5a:ed:96:4e:71:de:1b:b3:
e8:81:f3:fb:5c:7d:14:bf:29:6b:3c:03:cd:4a:15:
ae:65:08:cd:dc:14:20:25:4f:ba:fa:d6:b2:46:72:
9c:47:ea:d8:0e:c4:17:6b:98:5e:ff:bf:dd:4f:19:
31:35:a1:c8:29:92:c3:40:5e:b7:7f:f6:81:6f:96:
01:03:5b:29:76:76:fd:e6:7d:aa:43:af:36:3c:06:
49:44:1d:9e:08:c8:47:68:71:70:41:4c:9a:db:b6:
26:ae:61:01:e9:44:28:cb:26:66:68:96:bc:71:3f:
0b:6d:09:52:56:92:cc:ac:a8:1d:e0:6b:9b:d1:31:
f7:50:f2:24:42:18:60:c3:fd:d4:b3:74:4d:39:1f:
7a:55:2a:fa:64:10:a7:d7:e5:f7:61:b4:cb:9c:3f:
c3:a8:d9:71:85:ec:25:eb:44:53:6d:c1:39:04:ac:
2e:ec:34:f2:12:e7:d0:c0:ce:00:b5:12:ed:4b:be:
35:2f:e8:09:9e:d3:08:52:c8:e7:30:2f:f0:f6:d0:
c2:d0:6d:c0:f7:c9:60:46:fc:98:45:24:2b:75:95:
78:d8:f0:8d:94:c1:09:48:11:0f:56:61:45:87:b0:
bd:1c:40:f9:7a:0f:ea:13:a5:db:91:35:05:44:82:
71:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:34:AF:08:AF:8F:2E:B8:70:EB:1F:84:19:CC:B8:CE:EE:AA:7C:E8
X509v3 Authority Key Identifier:
keyid:80:E9:27:5B:6E:6E:BC:6A:D7:58:5D:76:AF:B6:A4:00:B5:14:2C:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gOknW25uvGrXWF12r7akALUULD8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:a6:89:c5:8a:d6:4e:d1:39:9d:1e:c7:b3:45:0d:da:0d:9a:
a3:ef:94:0b:d9:d8:db:aa:32:e2:d8:67:18:1b:d0:b4:a6:03:
25:a7:c0:e7:1e:f5:45:ac:87:79:ae:42:2a:f2:14:9e:a5:38:
80:aa:ff:d6:79:e0:f9:26:ed:8a:77:1b:2d:17:b4:d0:29:48:
e1:87:e9:7c:cf:58:5a:a8:4b:6d:f2:0b:b3:76:d4:f0:6b:0b:
73:82:2e:58:ed:8a:17:08:49:9f:b2:67:b6:d5:62:33:e4:80:
7e:86:84:26:15:1f:71:35:28:ac:fd:d8:3e:a6:e9:b8:67:a5:
ec:75:8b:b4:99:1b:61:c5:48:41:17:d7:1d:72:8f:af:e6:22:
46:eb:40:be:b0:85:88:62:2b:cf:78:8d:af:d7:75:2f:24:49:
89:92:74:0d:5f:69:1d:52:bf:57:7f:fb:db:09:35:55:fe:97:
c5:c9:45:ec:5b:57:9e:0b:45:fa:05:3f:9c:81:7c:5c:45:2f:
df:e9:44:46:59:ca:12:9f:4a:8e:ee:10:06:b2:fb:eb:92:f3:
6e:96:c0:39:3c:16:f4:7b:d0:dd:6f:73:3c:ad:87:fe:24:a9:
98:a2:87:5b:5f:f3:c3:13:f1:69:b5:7a:ac:9b:8a:a7:49:5d:
89:e9:13:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:20:55 2026 by rpki-client