
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft
File: GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft (raw, json)
Hash identifier: deYfcL7VjBKceFgyyeLTpacPbuSbnLmJkpw3FAQipvo=
Subject key identifier: CF:6E:E2:20:2E:22:35:5C:0E:59:13:34:8F:17:7F:C3:58:35:A9:92
Authority key identifier: 19:B9:A5:2C:C9:02:50:3E:CD:E3:02:BD:02:47:74:7E:A9:19:3B:60
Certificate issuer: /CN=A91ED3AE/serialNumber=19B9A52CC902503ECDE302BD0247747EA9193B60
Certificate serial: 05F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbmlLMkCUD7N4wK9Akd0fqkZO2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft
Manifest number: 05E6
Signing time: Sun 20 Sep 2026 22:50:53 +0000
Manifest this update: Sun 20 Sep 2026 22:50:52 +0000
Manifest next update: Sun 27 Sep 2026 22:50:52 +0000
Files and hashes: 1: GbmlLMkCUD7N4wK9Akd0fqkZO2A.crl (hash: f4TdsSVPt9EJHlNoAsuIfk+hqeAZ6zRaK84N7BsNCpk=)
2: 491FFA9A177011ECA96DF680C4F9AE02.roa (hash: pnyxT9fzqZ2JZTKKceDF98fPU2nq8VujgoO8G+Dnb0U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.crl
rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbmlLMkCUD7N4wK9Akd0fqkZO2A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 22:50:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1522 (0x5f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED3AE, serialNumber=19B9A52CC902503ECDE302BD0247747EA9193B60
Validity
Not Before: Sep 20 22:50:52 2026 GMT
Not After : Sep 27 22:50:52 2026 GMT
Subject: CN=6ab0634d-7617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dc:72:72:92:a0:bd:a8:67:63:c7:76:90:4d:
ef:30:73:07:56:91:7d:33:e2:e5:cd:fe:c0:01:e6:
f5:6e:93:11:e0:71:6c:df:96:7b:30:2c:9b:61:b1:
0e:77:fe:29:f4:13:e2:f4:a4:fb:06:d0:b0:4f:cb:
6b:74:bc:38:85:5b:71:0b:19:08:c6:1e:71:f9:10:
06:d4:f8:a5:c4:63:9a:da:63:de:e2:d8:86:f4:06:
f6:7a:c2:bf:32:83:09:ec:a4:26:b6:28:81:f8:03:
d8:1c:66:68:2e:f1:7f:a7:fd:ce:88:47:62:72:c6:
1f:29:10:69:92:c7:7e:79:0f:ad:f8:21:c8:2c:78:
c8:8d:0f:f4:6f:a7:d3:ad:ab:9a:06:99:0b:05:bf:
72:5a:e2:87:08:17:51:7e:61:7f:04:e0:8a:b8:a0:
4b:8f:ec:4e:75:a7:21:02:de:74:1b:51:79:b1:a8:
58:12:8b:4b:ec:67:8f:61:ee:8b:fc:80:8f:e4:7d:
71:3d:42:dd:91:05:df:f8:8e:93:88:53:1f:d2:8d:
cd:60:98:5b:ab:2c:93:6a:75:aa:dc:74:2c:9b:9d:
a3:53:fb:4e:60:7f:a1:ff:48:40:f7:46:9e:e9:e5:
83:bd:c8:24:37:17:8c:24:8a:13:82:b0:dc:52:45:
01:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:6E:E2:20:2E:22:35:5C:0E:59:13:34:8F:17:7F:C3:58:35:A9:92
X509v3 Authority Key Identifier:
keyid:19:B9:A5:2C:C9:02:50:3E:CD:E3:02:BD:02:47:74:7E:A9:19:3B:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbmlLMkCUD7N4wK9Akd0fqkZO2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:2d:34:0e:17:19:3e:38:54:11:74:ad:23:cc:c0:f5:31:cf:
71:bb:42:68:fc:99:e4:10:3f:c7:ed:e4:5b:c6:94:ba:01:76:
92:a1:df:70:69:e1:33:9f:0a:ae:12:94:d1:1b:55:42:2a:55:
26:e1:84:ac:f1:93:aa:b6:f0:99:7d:d5:b4:f0:40:12:b0:8c:
d3:5c:64:6d:09:a6:91:2a:68:52:b0:64:87:99:9e:70:f2:a0:
64:b0:dc:9f:42:a2:07:c7:4f:20:fd:a5:72:b0:45:7f:c7:d1:
ca:cb:4f:c6:e5:a3:6f:68:ba:e1:e7:6d:63:8e:2e:78:c9:25:
89:0e:e2:73:c2:93:fb:ea:ac:c9:ad:5e:9c:1e:4e:d6:73:9c:
59:e4:70:49:a8:2d:6f:f8:60:3a:a4:14:62:e4:c2:b2:61:22:
20:ca:0c:e0:09:08:68:f6:1e:ec:78:0a:33:c5:56:f0:24:a2:
4b:4d:f6:d1:6a:06:79:b8:20:99:dd:08:27:79:ee:5e:0c:0e:
68:8a:67:6d:51:2d:f0:3a:0d:a1:3f:ba:96:6f:f2:61:03:3d:
ad:fd:42:e6:3e:3b:38:4e:5d:af:03:af:bd:4b:de:89:04:d7:
8b:21:07:b6:6d:97:fb:0d:2d:6f:8b:f6:dc:6a:af:b9:9e:ff:
21:5f:f4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:24:43 2026 by rpki-client