
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F3695/9FA5C852A29B11F1A69892D93211F970/gSgm5X8SSW8LsT-ypYMZiqsnfZk.mft
File: gSgm5X8SSW8LsT-ypYMZiqsnfZk.mft (raw, json)
Hash identifier: n8S0QXnbaMsZU8Ky9ZA3DSFJQsuOxhkydi8tdtVNra0=
Subject key identifier: 34:20:2C:F9:6F:05:48:C6:04:42:F5:35:17:EB:1A:24:21:4B:6B:E9
Authority key identifier: 81:28:26:E5:7F:12:49:6F:0B:B1:3F:B2:A5:83:19:8A:AB:27:7D:99
Certificate issuer: /CN=A91F3695/serialNumber=812826E57F12496F0BB13FB2A583198AAB277D99
Certificate serial: 10
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gSgm5X8SSW8LsT-ypYMZiqsnfZk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3695/9FA5C852A29B11F1A69892D93211F970/gSgm5X8SSW8LsT-ypYMZiqsnfZk.mft
Manifest number: 0F
Signing time: Mon 21 Sep 2026 09:06:59 +0000
Manifest this update: Mon 21 Sep 2026 09:06:59 +0000
Manifest next update: Mon 28 Sep 2026 09:06:59 +0000
Files and hashes: 1: gSgm5X8SSW8LsT-ypYMZiqsnfZk.crl (hash: Mdj+P8xPdcrcGRlTmeraN6C87OPj9jGMGyliEm4WjwE=)
2: 64898DB6A29C11F19776C6F43211F970.roa (hash: hyemipf6fhL37ipYH+N7rWJpNf7ZwBokBc6dwKfB0oA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3695/9FA5C852A29B11F1A69892D93211F970/gSgm5X8SSW8LsT-ypYMZiqsnfZk.crl
rsync://rpki.apnic.net/member_repository/A91F3695/9FA5C852A29B11F1A69892D93211F970/gSgm5X8SSW8LsT-ypYMZiqsnfZk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gSgm5X8SSW8LsT-ypYMZiqsnfZk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 09:06:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3695, serialNumber=812826E57F12496F0BB13FB2A583198AAB277D99
Validity
Not Before: Sep 21 09:06:59 2026 GMT
Not After : Sep 28 09:06:59 2026 GMT
Subject: CN=6ab0f3b3-f53d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:61:73:9c:f8:73:df:f9:87:ae:f0:5d:39:56:
3c:20:1b:dc:69:89:6f:cf:db:b9:f6:85:b5:49:63:
7a:4b:f7:fb:b3:69:f3:52:2f:3a:37:2c:21:ca:9c:
43:24:d7:f8:9b:ce:16:a8:66:e1:d0:09:98:e8:46:
db:c5:51:67:33:bb:79:a3:01:bf:2e:43:25:47:53:
79:43:b3:19:2a:21:f6:c9:48:d4:82:20:5a:d1:96:
41:21:fa:0a:ed:ba:f6:05:26:ea:74:d5:ec:be:0d:
92:eb:cd:42:34:a2:85:de:82:39:d3:24:04:d5:1c:
26:36:08:67:6e:c8:21:b1:2e:bf:bd:50:45:bb:34:
0d:0d:23:bc:49:20:fc:a2:88:ff:c0:6d:0f:2b:04:
b8:99:d8:57:1d:b5:b0:d0:a6:5e:ac:7b:50:b7:dc:
32:65:10:b4:b9:13:c1:df:b9:03:4c:79:26:f0:d9:
8f:56:73:f0:cb:62:03:cb:84:6a:b7:54:93:58:b9:
ac:c8:7e:f8:5f:0f:28:4a:74:f9:ee:92:a1:52:4b:
e1:ec:a2:9f:52:e2:73:c7:93:44:41:90:f5:85:78:
f5:67:26:d8:1d:c3:d4:a6:7a:57:d4:42:ab:35:6e:
7f:74:e9:d5:3c:94:7d:67:f9:a1:ba:06:14:5d:2c:
51:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:20:2C:F9:6F:05:48:C6:04:42:F5:35:17:EB:1A:24:21:4B:6B:E9
X509v3 Authority Key Identifier:
keyid:81:28:26:E5:7F:12:49:6F:0B:B1:3F:B2:A5:83:19:8A:AB:27:7D:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3695/9FA5C852A29B11F1A69892D93211F970/gSgm5X8SSW8LsT-ypYMZiqsnfZk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gSgm5X8SSW8LsT-ypYMZiqsnfZk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3695/9FA5C852A29B11F1A69892D93211F970/gSgm5X8SSW8LsT-ypYMZiqsnfZk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:60:01:aa:2b:fb:13:a0:59:db:58:8e:d5:03:ce:62:7a:8e:
e5:09:54:e8:b7:59:6e:ad:0b:48:51:12:ed:91:55:cf:31:6e:
43:bf:e5:66:fc:11:4e:0a:41:26:14:e1:8f:5e:bd:a3:36:65:
65:58:2b:60:63:56:6a:f3:b3:68:8f:c4:ae:a6:01:c1:74:33:
ed:7f:e9:ac:bb:bc:3c:60:2c:b2:98:f3:8a:e6:f9:36:98:99:
42:d2:7c:18:0c:6a:f3:b5:c7:fb:1e:59:ae:01:65:d7:5f:58:
a1:e5:26:53:52:97:14:38:42:1c:a9:5e:50:52:71:cc:a6:f1:
e0:9b:16:de:29:38:1a:af:cb:77:7e:e6:f6:2c:13:46:e0:fe:
13:1f:b8:6c:b2:e2:62:4c:85:c1:93:b2:ef:7f:55:98:11:4b:
f5:fd:59:85:54:d9:74:18:cc:bf:05:81:1e:47:d1:fb:7e:ec:
90:da:4e:b8:90:31:70:ca:cf:83:db:06:66:43:b1:84:d3:f6:
1c:04:0c:11:0d:b1:ec:ea:29:de:d4:94:c0:db:73:4f:7a:2a:
af:b8:f5:4d:50:d6:55:31:8f:cc:39:36:10:0b:e4:41:5b:61:
84:3d:58:31:56:0d:50:e3:64:d6:5a:8f:ca:1c:fb:56:a3:14:
a8:f0:51:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:13:06 2026 by rpki-client