
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.mft
File: gUM6Y8LXXQAyVSxCbENTPsrINRU.mft (raw, json)
Hash identifier: A+zoUVMo6ez3dWvWbbQLW/2WWahsex4/mzDBIZD7rPQ=
Subject key identifier: 70:37:7F:AA:D8:32:B1:6B:EB:BC:2B:27:85:50:2F:EF:D8:75:5B:2E
Authority key identifier: 81:43:3A:63:C2:D7:5D:00:32:55:2C:42:6C:43:53:3E:CA:C8:35:15
Certificate issuer: /CN=A91F1AF5/serialNumber=81433A63C2D75D0032552C426C43533ECAC83515
Certificate serial: 07B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUM6Y8LXXQAyVSxCbENTPsrINRU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.mft
Manifest number: 07AD
Signing time: Mon 02 Mar 2026 01:18:50 +0000
Manifest this update: Mon 02 Mar 2026 01:18:49 +0000
Manifest next update: Mon 09 Mar 2026 01:18:49 +0000
Files and hashes: 1: gUM6Y8LXXQAyVSxCbENTPsrINRU.crl (hash: 5VD4YedX9Ug+EMDsf1Va1xRe9vgsKVwp8M2xUyJdZL0=)
2: DDFEB10C385E11EB8E85F467C4F9AE02.roa (hash: Zf96iP55f5Jtpq3Ou1kpv1F94L3YI94DnzVRT1WWO7c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.crl
rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUM6Y8LXXQAyVSxCbENTPsrINRU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:18:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1973 (0x7b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1AF5, serialNumber=81433A63C2D75D0032552C426C43533ECAC83515
Validity
Not Before: Mar 2 01:18:49 2026 GMT
Not After : Mar 9 01:18:49 2026 GMT
Subject: CN=69a4e57a-fce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:61:8f:31:67:6e:65:b9:63:f6:a5:20:17:6b:
74:4c:4d:96:72:47:bb:77:b1:98:a2:3a:c9:9f:f1:
6b:d3:9c:0e:fb:05:f0:9a:bc:30:f8:6d:4b:06:7a:
33:46:0b:df:eb:94:dd:02:19:ad:f2:74:66:ff:41:
70:14:bf:96:7d:31:49:30:f0:22:fc:74:b6:55:ff:
af:8c:42:88:6a:93:16:82:6d:34:7a:2c:ec:b7:30:
0c:2e:5b:9a:5a:5f:e6:63:e4:54:f4:9b:f3:f3:08:
56:b1:96:3e:1d:6d:b1:ae:3c:1e:2e:42:3f:75:0e:
4d:a7:b9:3d:53:8d:ec:66:e9:9f:e7:60:ef:96:0c:
1e:bc:d0:89:66:1a:e3:65:a9:94:52:b5:38:96:e7:
74:ea:2a:95:69:50:20:a6:fe:a5:9f:b3:9f:75:7d:
10:9d:77:4b:8e:ba:5a:36:ff:a5:89:ec:68:db:ea:
ad:6d:d9:fe:08:ee:96:dd:5d:ff:03:08:14:dd:89:
9c:70:f4:8d:7a:f4:31:e5:00:0f:3f:f7:ee:ca:7f:
60:ee:59:5d:63:d1:eb:80:cb:e0:88:86:92:5f:13:
a2:a3:d2:c0:06:35:cb:0f:3a:03:64:c2:c1:08:5b:
1c:05:6b:63:b9:10:7f:cf:6f:17:7a:01:bf:ad:8c:
f2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:37:7F:AA:D8:32:B1:6B:EB:BC:2B:27:85:50:2F:EF:D8:75:5B:2E
X509v3 Authority Key Identifier:
keyid:81:43:3A:63:C2:D7:5D:00:32:55:2C:42:6C:43:53:3E:CA:C8:35:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUM6Y8LXXQAyVSxCbENTPsrINRU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:98:98:e3:74:f6:c4:86:db:60:e5:6f:82:fb:91:24:55:93:
7d:11:b2:bb:18:ed:4e:b5:7a:8b:e8:f5:33:6e:d1:9a:e7:a9:
54:72:e2:91:e2:27:91:3a:8b:72:7b:0e:4d:89:26:50:38:b5:
c1:5d:86:de:4a:1c:69:0f:9c:14:2e:73:89:e0:39:ff:b6:9e:
a1:2c:be:93:01:f8:47:a7:22:b9:91:bc:68:8b:98:75:f7:e1:
c2:97:d3:0c:e4:18:b6:93:47:42:ae:c1:47:94:33:c9:05:79:
8c:39:6f:f2:08:b0:0c:05:f7:8f:15:5f:b0:b0:8e:56:ae:01:
94:59:90:98:3a:63:80:07:c6:be:76:1f:dc:c8:01:47:8a:be:
3d:25:e0:70:e1:c0:2c:18:6f:d5:8f:c0:61:25:36:13:84:bb:
9c:d3:28:7a:96:1f:c0:26:97:00:90:dd:03:89:58:f1:12:82:
49:65:60:8b:7b:9c:cb:e8:77:db:e8:b5:16:6f:16:09:54:eb:
b6:bc:d1:4c:11:0a:db:1e:ef:c1:8d:1a:69:bc:08:76:4e:8a:
87:65:a8:1f:f0:a3:79:26:5d:3f:11:1f:19:06:61:a5:31:18:
f8:f2:34:79:c8:8d:32:bd:03:26:cc:10:82:c7:90:d6:c8:19:
0f:9e:eb:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:26:20 2026 by rpki-client