
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E5988/A316C65E662C11F1B0BAC73CA147A888/gvYVW7anmmgrwbbkztF-7HtUXjE.mft
File: gvYVW7anmmgrwbbkztF-7HtUXjE.mft (raw, json)
Hash identifier: rp5wLIENXwASjl0eLNPLScrTq4N1v1+Y8wgs6G4vNfM=
Subject key identifier: C7:80:B8:40:C3:8C:01:B3:7A:E3:41:EC:6A:68:D4:30:E4:A1:F2:E8
Authority key identifier: 82:F6:15:5B:B6:A7:9A:68:2B:C1:B6:E4:CE:D1:7E:EC:7B:54:5E:31
Certificate issuer: /CN=A91E5988/serialNumber=82F6155BB6A79A682BC1B6E4CED17EEC7B545E31
Certificate serial: 45
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gvYVW7anmmgrwbbkztF-7HtUXjE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5988/A316C65E662C11F1B0BAC73CA147A888/gvYVW7anmmgrwbbkztF-7HtUXjE.mft
Manifest number: 43
Signing time: Sat 17 Oct 2026 09:12:47 +0000
Manifest this update: Sat 17 Oct 2026 09:12:46 +0000
Manifest next update: Sat 24 Oct 2026 09:12:46 +0000
Files and hashes: 1: gvYVW7anmmgrwbbkztF-7HtUXjE.crl (hash: fWhcInDQ51Gr1v9jLaMpgNMnVX6qJuhvV7SAbAnfVqI=)
2: 62C23538662D11F1A5BC4310A247A888.roa (hash: o2DwrfThWmBts2qM7FHUBBrRqwsSlJYkQtksSisltek=)
3: 1A0F60ACB5A811F1A1C47BD53711F970.roa (hash: zo7ARhMf7sXcb1Wzo/WGHBDItpWzhIj8mr4YHAO8djw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5988/A316C65E662C11F1B0BAC73CA147A888/gvYVW7anmmgrwbbkztF-7HtUXjE.crl
rsync://rpki.apnic.net/member_repository/A91E5988/A316C65E662C11F1B0BAC73CA147A888/gvYVW7anmmgrwbbkztF-7HtUXjE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gvYVW7anmmgrwbbkztF-7HtUXjE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 09:12:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69 (0x45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5988, serialNumber=82F6155BB6A79A682BC1B6E4CED17EEC7B545E31
Validity
Not Before: Oct 17 09:12:46 2026 GMT
Not After : Oct 24 09:12:46 2026 GMT
Subject: CN=6ad33c0f-9ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:86:79:bc:58:52:aa:b1:d1:95:ef:cb:e0:22:
d4:cf:dd:d7:3b:d5:ba:8a:20:05:bc:44:a9:6f:bc:
f4:06:db:6a:92:c3:c0:82:5f:af:88:22:ca:ab:e2:
a2:29:ea:0b:3e:fa:74:50:8c:ca:1a:90:4c:85:d8:
c0:56:cb:6e:99:12:1a:b9:ec:42:ec:34:89:a9:ab:
a1:14:2c:6c:95:64:33:0d:ad:a5:58:d6:72:96:04:
f4:63:4e:df:e9:5b:2b:6f:85:89:c2:b0:50:28:bd:
ae:48:18:27:e4:a7:60:c5:e7:f1:6c:30:40:de:1b:
0f:2c:b7:88:f2:19:19:98:4e:1d:28:24:57:df:7d:
92:e8:22:08:77:1e:e7:8a:ed:2a:f8:b8:83:5b:90:
fc:64:4b:97:fe:f7:74:13:99:5d:80:ec:ce:12:ed:
9f:bc:82:7f:3e:ed:41:a8:61:4d:6e:fd:2e:32:d6:
4f:b4:07:3b:91:36:b0:a5:51:ad:23:3e:3e:93:3f:
f4:a0:71:cd:04:a1:ad:16:ba:27:6d:8e:f4:06:cb:
f2:25:2b:3c:c5:91:11:7f:9e:6b:37:52:d4:c5:44:
7f:15:70:7a:da:ee:6c:c2:3b:af:87:b9:c1:6a:e1:
e8:b7:06:a5:a5:63:6f:52:52:18:45:1a:23:90:6c:
91:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:80:B8:40:C3:8C:01:B3:7A:E3:41:EC:6A:68:D4:30:E4:A1:F2:E8
X509v3 Authority Key Identifier:
keyid:82:F6:15:5B:B6:A7:9A:68:2B:C1:B6:E4:CE:D1:7E:EC:7B:54:5E:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5988/A316C65E662C11F1B0BAC73CA147A888/gvYVW7anmmgrwbbkztF-7HtUXjE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gvYVW7anmmgrwbbkztF-7HtUXjE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5988/A316C65E662C11F1B0BAC73CA147A888/gvYVW7anmmgrwbbkztF-7HtUXjE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ee:3a:2e:d3:ea:a7:0a:da:34:8b:d2:ae:84:5e:5b:8f:44:
24:7f:33:7e:63:6c:ff:d8:bf:42:46:48:6e:b8:69:0e:b5:66:
ac:3c:e8:a6:97:27:5a:85:57:08:92:00:22:51:44:76:c0:66:
4e:e8:9d:e7:32:0a:48:6b:b6:37:75:c1:2d:ff:61:31:c2:bf:
ee:df:4a:d0:47:d0:35:9f:b1:3a:5a:da:e7:ec:59:e3:f2:62:
f3:25:e6:48:10:39:10:3e:a2:f0:28:74:9a:80:e4:17:e5:28:
fc:e0:94:9a:18:78:76:6a:46:a5:d5:fa:35:e1:d9:8e:d1:6f:
a5:6f:7d:6f:fc:64:ae:9e:72:ac:9c:65:a3:31:98:a0:b4:be:
01:f0:ee:65:2f:10:4b:5e:4d:48:41:92:1f:43:13:7f:a4:ed:
dd:4e:f9:b8:8a:03:ab:0b:b7:52:54:50:ce:b6:8e:03:e9:41:
50:0f:db:98:32:93:d1:42:2f:7b:d9:b6:4d:30:86:0a:1f:d4:
ae:17:ca:50:cd:74:98:18:f5:4b:76:1c:37:5a:16:74:18:be:
8a:8e:13:53:a0:0d:bd:e2:91:2c:0e:58:03:30:0b:7a:c6:25:
8b:ef:b7:8e:db:3f:a6:45:77:42:bd:e2:cc:9a:60:de:af:76:
87:d6:4c:5f
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
NTk4ODExMC8GA1UEBRMoODJGNjE1NUJCNkE3OUE2ODJCQzFCNkU0Q0VEMTdFRUM3
QjU0NUUzMTAeFw0yNjEwMTcwOTEyNDZaFw0yNjEwMjQwOTEyNDZaMBgxFjAUBgNV
BAMTDTZhZDMzYzBmLTllYTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDPhnm8WFKqsdGV78vgItTP3dc71bqKIAW8RKlvvPQG22qSw8CCX6+IIsqr4qIp
6gs++nRQjMoakEyF2MBWy26ZEhq57ELsNImpq6EULGyVZDMNraVY1nKWBPRjTt/p
WytvhYnCsFAova5IGCfkp2DF5/FsMEDeGw8st4jyGRmYTh0oJFfffZLoIgh3HueK
7Sr4uINbkPxkS5f+93QTmV2A7M4S7Z+8gn8+7UGoYU1u/S4y1k+0BzuRNrClUa0j
Pj6TP/Sgcc0Eoa0WuidtjvQGy/IlKzzFkRF/nms3UtTFRH8VcHra7mzCO6+HucFq
4ei3BqWlY29SUhhFGiOQbJH/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUx4C4QMOM
AbN640HsamjUMOSh8ugwHwYDVR0jBBgwFoAUgvYVW7anmmgrwbbkztF+7HtUXjEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1OTg4L0EzMTZDNjVFNjYy
QzExRjFCMEJBQzczQ0ExNDdBODg4L2d2WVZXN2FubW1ncndiYmt6dEYtN0h0VVhq
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvZ3ZZVlc3YW5tbWdyd2Jia3p0Ri03SHRVWGpFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1
OTg4L0EzMTZDNjVFNjYyQzExRjFCMEJBQzczQ0ExNDdBODg4L2d2WVZXN2FubW1n
cndiYmt6dEYtN0h0VVhqRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQB87jou0+qnCto0i9KuhF5bj0QkfzN+Y2z/2L9CRkhuuGkOtWasPOimlydahVcI
kgAiUUR2wGZO6J3nMgpIa7Y3dcEt/2Exwr/u30rQR9A1n7E6Wtrn7Fnj8mLzJeZI
EDkQPqLwKHSagOQX5Sj84JSaGHh2akal1fo14dmO0W+lb31v/GSunnKsnGWjMZig
tL4B8O5lLxBLXk1IQZIfQxN/pO3dTvm4igOrC7dSVFDOto4D6UFQD9uYMpPRQi97
2bZNMIYKH9SuF8pQzXSYGPVLdhw3WhZ0GL6KjhNToA294pEsDlgDMAt6xiWL77eO
2z+mRXdCveLMmmDer3aH1kxf
-----END CERTIFICATE-----
Generated at Sat Oct 17 19:51:55 2026 by rpki-client