
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.mft
File: gkVvIaH33yOGQR-g7REgZPbrw5o.mft (raw, json)
Hash identifier: KCEIrTfvSn4UJpAvCsbIfPFTy0toxJO5ZxuxHL67TdM=
Subject key identifier: 73:89:2A:B4:11:12:37:42:4B:DB:60:21:4C:C6:D5:5D:A9:B8:E6:33
Authority key identifier: 82:45:6F:21:A1:F7:DF:23:86:41:1F:A0:ED:11:20:64:F6:EB:C3:9A
Certificate issuer: /CN=A91E94F0/serialNumber=82456F21A1F7DF2386411FA0ED112064F6EBC39A
Certificate serial: 04D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gkVvIaH33yOGQR-g7REgZPbrw5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.mft
Manifest number: 04CA
Signing time: Tue 22 Sep 2026 23:28:23 +0000
Manifest this update: Tue 22 Sep 2026 23:28:22 +0000
Manifest next update: Tue 29 Sep 2026 23:28:22 +0000
Files and hashes: 1: gkVvIaH33yOGQR-g7REgZPbrw5o.crl (hash: /MAviSIL2VC92qnZQ4G3V2VRzps1B/rLfMslCYNJKv8=)
2: F15E709A880611ECAF18133AC4F9AE02.roa (hash: inq6gAvjEHM8zp22wNx8lTrd20tmUX6yM5AUeaCqRws=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.crl
rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gkVvIaH33yOGQR-g7REgZPbrw5o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 23:28:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1236 (0x4d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E94F0, serialNumber=82456F21A1F7DF2386411FA0ED112064F6EBC39A
Validity
Not Before: Sep 22 23:28:22 2026 GMT
Not After : Sep 29 23:28:22 2026 GMT
Subject: CN=6ab30f17-8263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:23:8d:2a:28:0e:bf:7f:c6:cb:2b:85:81:d3:
c1:9c:07:6c:d4:08:a0:43:88:53:8e:e6:7a:ba:7a:
74:42:d9:38:a5:c8:eb:48:97:20:be:8b:a9:6e:76:
ea:a5:78:41:9a:bb:3e:3f:fd:38:5e:ca:15:13:bb:
1c:4f:bd:77:fe:80:1d:bf:d2:ec:ea:f0:91:3d:7a:
0f:cc:25:f6:02:46:1c:26:6e:db:76:7f:f8:69:1f:
34:03:44:9f:ad:98:1a:93:be:3e:1f:e7:ee:04:aa:
e7:54:dc:c9:30:ef:23:bb:52:5a:20:04:d5:e7:f3:
64:d8:14:3f:f5:23:cb:08:44:fc:9a:a0:54:a7:22:
8c:94:7f:31:c2:2a:9e:d5:df:f5:9a:ae:cb:ed:8b:
9e:3b:26:cc:68:95:eb:8b:83:55:81:e4:2a:0e:60:
d1:bf:58:10:82:cb:ec:b6:88:cd:c6:69:53:7b:93:
f2:2e:a9:3f:a6:1f:7f:f8:a2:67:e3:3e:0d:a4:4b:
f6:f5:72:4d:41:a5:e0:e3:40:02:80:23:e3:63:ec:
21:b2:4e:1e:91:28:31:75:a3:3e:c2:00:96:15:40:
fe:e8:0a:39:a8:75:76:a4:b4:f1:4b:92:ae:ce:0c:
25:2a:f9:53:31:4e:f6:b6:db:3c:9c:85:f5:17:c2:
39:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:89:2A:B4:11:12:37:42:4B:DB:60:21:4C:C6:D5:5D:A9:B8:E6:33
X509v3 Authority Key Identifier:
keyid:82:45:6F:21:A1:F7:DF:23:86:41:1F:A0:ED:11:20:64:F6:EB:C3:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gkVvIaH33yOGQR-g7REgZPbrw5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a0:28:ca:07:b4:30:6c:45:8d:9d:b7:c7:a2:37:2a:fa:c9:
e0:22:03:14:ce:3c:26:00:38:67:26:74:2b:66:3c:23:1c:ff:
12:f7:0c:0e:dd:cf:4b:4d:66:e9:86:f0:be:81:10:2b:e9:d4:
ff:6d:39:47:87:43:eb:f7:c5:76:fb:7f:85:7c:f8:0a:8b:50:
03:80:9a:a8:97:bd:dc:a8:00:7c:c0:99:62:a2:9c:f4:63:4c:
e0:ba:bc:e0:b0:f4:6b:16:cc:8f:0f:16:8b:c8:ef:03:bb:e6:
e3:bb:1f:f0:ef:2e:00:51:ad:36:f0:46:70:d1:8f:4f:f6:b6:
6e:d0:a4:66:22:cc:2c:91:5a:eb:b9:e8:a2:f8:d4:33:ae:da:
ac:15:fa:d8:47:67:02:b0:7e:f3:0d:f1:07:0c:58:2c:8f:ef:
00:9f:c5:36:09:a3:19:d9:f8:07:51:a4:83:88:b0:86:2d:b3:
56:2d:44:6f:50:26:95:d8:06:ea:73:97:ac:fe:13:6b:a6:8d:
db:a2:16:01:94:ab:84:3e:2c:0a:cd:3e:6d:ce:0f:8c:b2:54:
a1:a3:a5:a4:8c:ea:c6:71:dd:f0:5d:b1:90:40:d6:ed:be:42:
6b:80:30:bf:da:d2:eb:b0:21:9a:1a:d6:77:ef:20:2e:a3:21:
22:c4:ac:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:04:01 2026 by rpki-client