
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.mft
File: gUM6Y8LXXQAyVSxCbENTPsrINRU.mft (raw, json)
Hash identifier: 3IlZGMCtbkvqpCHKgpIbR6wgVOiUEBIhvaqcdhJ6P78=
Subject key identifier: A6:FE:19:03:1A:DC:A5:81:3D:48:E8:BC:3A:42:07:7B:82:0B:5A:11
Authority key identifier: 81:43:3A:63:C2:D7:5D:00:32:55:2C:42:6C:43:53:3E:CA:C8:35:15
Certificate issuer: /CN=A91F1AF5/serialNumber=81433A63C2D75D0032552C426C43533ECAC83515
Certificate serial: 0820
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUM6Y8LXXQAyVSxCbENTPsrINRU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.mft
Manifest number: 0818
Signing time: Sat 26 Sep 2026 21:16:42 +0000
Manifest this update: Sat 26 Sep 2026 21:16:41 +0000
Manifest next update: Sat 03 Oct 2026 21:16:41 +0000
Files and hashes: 1: gUM6Y8LXXQAyVSxCbENTPsrINRU.crl (hash: sJkSlgCJ5PCen+Ce24zKeDWe5A1QmFhrKaHM3SXaRho=)
2: DDFEB10C385E11EB8E85F467C4F9AE02.roa (hash: Zf96iP55f5Jtpq3Ou1kpv1F94L3YI94DnzVRT1WWO7c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.crl
rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUM6Y8LXXQAyVSxCbENTPsrINRU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 21:16:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2080 (0x820)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1AF5, serialNumber=81433A63C2D75D0032552C426C43533ECAC83515
Validity
Not Before: Sep 26 21:16:41 2026 GMT
Not After : Oct 3 21:16:41 2026 GMT
Subject: CN=6ab8363a-b179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:12:bb:03:f8:82:32:a8:b8:68:99:bf:bb:fd:
78:f7:ac:7e:4a:fe:d7:5b:03:f0:ad:f3:50:01:e2:
69:c2:a7:da:7d:06:5c:3e:d8:6f:ef:80:cf:02:70:
40:10:1f:40:d0:12:05:67:af:39:c2:b1:22:93:cd:
b5:ce:52:a7:61:d5:8e:5a:8b:03:bc:a8:bd:ba:d3:
51:be:e2:f3:b5:f7:4e:c9:e4:57:ad:a6:0c:5a:b2:
e4:1e:3b:e0:a5:6f:90:0a:93:b2:09:d9:8a:fd:fc:
2e:a1:2f:4d:f0:9e:a8:79:12:42:c8:b7:37:69:7b:
00:aa:eb:c0:1c:24:a8:61:e5:f3:f7:fe:6e:40:a5:
5b:db:f8:f2:08:16:60:46:66:0c:02:23:bb:6b:4e:
06:2d:f6:61:18:e9:85:b2:db:37:92:62:e8:7a:2a:
0b:03:a7:5c:e4:a2:d2:29:5b:87:eb:39:ae:0c:b4:
93:5e:f3:0d:e9:0f:48:4e:3e:89:34:e8:73:ff:3b:
be:8a:6a:1d:81:be:4f:b5:af:7c:45:a1:3e:1a:53:
cb:9c:25:3f:f9:17:57:d9:54:46:6b:04:04:7f:29:
9a:25:c3:fc:12:71:57:f9:e1:f7:83:85:4e:5a:a2:
ab:05:2d:01:d6:20:23:ad:17:88:56:72:c0:11:e9:
73:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:FE:19:03:1A:DC:A5:81:3D:48:E8:BC:3A:42:07:7B:82:0B:5A:11
X509v3 Authority Key Identifier:
keyid:81:43:3A:63:C2:D7:5D:00:32:55:2C:42:6C:43:53:3E:CA:C8:35:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUM6Y8LXXQAyVSxCbENTPsrINRU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:4b:97:14:30:55:bf:7c:b8:69:70:db:73:c9:0e:f8:b4:78:
e1:91:0a:8a:a9:bb:fc:40:09:84:cc:3a:13:74:d9:c1:54:53:
56:f8:5e:6e:c5:b1:5b:52:61:19:34:4e:f4:aa:0e:f6:f3:fb:
7e:48:de:23:77:0f:e3:7e:b6:fc:d4:97:89:23:49:cc:0e:fb:
39:67:70:e8:08:be:70:de:77:27:43:a9:cf:35:79:ad:b7:44:
fb:f7:27:83:ee:ff:f2:f6:ab:04:4c:7b:c7:25:a0:4f:28:93:
eb:07:be:6e:5f:f5:4f:40:03:06:4f:af:bf:85:a3:60:3a:66:
8c:56:7d:17:b1:44:93:0e:60:bc:cc:11:d6:94:7a:da:1a:d1:
d9:42:16:dd:b4:9a:4d:bf:1c:46:c2:33:03:6c:18:e9:26:cf:
07:ef:1f:b4:71:0a:fe:40:d5:65:69:75:5e:05:df:ab:99:33:
fd:9c:38:a0:dc:b4:12:d9:76:74:a8:e3:ee:f7:13:ab:c4:28:
94:c1:14:16:00:3e:5b:f9:8c:7e:1e:87:85:ae:b7:c0:ed:01:
f1:15:f7:b8:e6:38:47:68:cc:02:45:4e:83:a3:cc:a4:3a:cf:
36:cc:25:2c:77:ff:4e:32:9f:b0:b6:78:bf:20:b6:88:d7:2d:
a7:8e:e3:ca
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCCAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjFBRjUxMTAvBgNVBAUTKDgxNDMzQTYzQzJENzVEMDAzMjU1MkM0MjZDNDM1MzNF
Q0FDODM1MTUwHhcNMjYwOTI2MjExNjQxWhcNMjYxMDAzMjExNjQxWjAYMRYwFAYD
VQQDEw02YWI4MzYzYS1iMTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1BK7A/iCMqi4aJm/u/1496x+Sv7XWwPwrfNQAeJpwqfafQZcPthv74DPAnBA
EB9A0BIFZ685wrEik821zlKnYdWOWosDvKi9utNRvuLztfdOyeRXraYMWrLkHjvg
pW+QCpOyCdmK/fwuoS9N8J6oeRJCyLc3aXsAquvAHCSoYeXz9/5uQKVb2/jyCBZg
RmYMAiO7a04GLfZhGOmFsts3kmLoeioLA6dc5KLSKVuH6zmuDLSTXvMN6Q9ITj6J
NOhz/zu+imodgb5Pta98RaE+GlPLnCU/+RdX2VRGawQEfymaJcP8EnFX+eH3g4VO
WqKrBS0B1iAjrReIVnLAEelzGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKb+GQMa
3KWBPUjovDpCB3uCC1oRMB8GA1UdIwQYMBaAFIFDOmPC110AMlUsQmxDUz7KyDUV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUFGNS8xNTEwRkI1QzM4
NUQxMUVCQkNCMjA0NjNDNEY5QUUwMi9nVU02WThMWFhRQXlWU3hDYkVOVFBzcklO
UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dVTTZZOExYWFFBeVZTeENiRU5UUHNySU5SVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MUFGNS8xNTEwRkI1QzM4NUQxMUVCQkNCMjA0NjNDNEY5QUUwMi9nVU02WThMWFhR
QXlWU3hDYkVOVFBzcklOUlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkEuXFDBVv3y4aXDbc8kO+LR44ZEKiqm7/EAJhMw6E3TZwVRTVvhebsWxW1Jh
GTRO9KoO9vP7fkjeI3cP4362/NSXiSNJzA77OWdw6Ai+cN53J0OpzzV5rbdE+/cn
g+7/8varBEx7xyWgTyiT6we+bl/1T0ADBk+vv4WjYDpmjFZ9F7FEkw5gvMwR1pR6
2hrR2UIW3bSaTb8cRsIzA2wY6SbPB+8ftHEK/kDVZWl1XgXfq5kz/Zw4oNy0Etl2
dKjj7vcTq8QolMEUFgA+W/mMfh6Hha63wO0B8RX3uOY4R2jMAkVOg6PMpDrPNswl
LHf/TjKfsLZ4vyC2iNctp47jyg==
-----END CERTIFICATE-----
Generated at Sun Sep 27 12:35:13 2026 by rpki-client