
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.mft
File: gmtEdLxvTzvkC151EfEFyuf-jAw.mft (raw, json)
Hash identifier: tdlfQh5FtRDR21La3j7YhvEtnZ8rzpUEO21cYiejdMk=
Subject key identifier: 8A:E2:80:41:BE:E6:A4:EC:6C:E5:66:DB:CE:0B:7E:80:89:B5:F3:56
Authority key identifier: 82:6B:44:74:BC:6F:4F:3B:E4:0B:5E:75:11:F1:05:CA:E7:FE:8C:0C
Certificate issuer: /CN=A91FAB3C/serialNumber=826B4474BC6F4F3BE40B5E7511F105CAE7FE8C0C
Certificate serial: B8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmtEdLxvTzvkC151EfEFyuf-jAw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.mft
Manifest number: AF
Signing time: Sat 13 Jun 2026 07:20:39 +0000
Manifest this update: Sat 13 Jun 2026 07:20:39 +0000
Manifest next update: Sat 20 Jun 2026 07:20:39 +0000
Files and hashes: 1: gmtEdLxvTzvkC151EfEFyuf-jAw.crl (hash: jsBRK9FTTbJksOUrnYC2h8hpoDbPZ9KkB189hQhAiY8=)
2: CF2B394C01EA11F190A04A823B6F56BC.roa (hash: rTvAf6dpPCKk56C1vD7o94oTi+zGUzL5wM5zHdMv5WY=)
3: BFA0334C01EA11F192D3B8D33A6F56BC.roa (hash: ING31SnTtfOxcPZAmEFgJK41efrAn9HChDGYUP/RwuA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.crl
rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmtEdLxvTzvkC151EfEFyuf-jAw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 07:20:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184 (0xb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FAB3C, serialNumber=826B4474BC6F4F3BE40B5E7511F105CAE7FE8C0C
Validity
Not Before: Jun 13 07:20:39 2026 GMT
Not After : Jun 20 07:20:39 2026 GMT
Subject: CN=6a2d04c7-6bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:61:af:1f:24:a9:2f:d6:2f:d2:47:0b:0d:2f:
4f:c6:6d:a4:ea:de:87:1d:07:bf:8d:f7:e5:b7:d0:
c7:d0:fc:7d:4f:5b:22:8d:54:3d:5d:2c:07:0f:b5:
6b:3f:f0:a9:82:85:af:14:62:ca:fa:46:a4:79:9c:
86:b0:3a:e7:43:65:3e:85:c6:7c:f4:df:da:3c:f9:
5e:5c:7f:83:76:34:fa:c0:8c:09:3a:58:c9:c4:54:
3b:17:ee:a8:aa:31:f7:e1:32:66:fb:dd:fe:ef:ea:
2a:5b:b3:fb:8e:04:a1:9a:e0:ac:69:5c:f6:6a:1f:
8e:47:39:cd:8a:04:87:cd:b3:d5:06:b1:c0:9f:ff:
38:08:57:53:0f:b0:65:a4:60:32:24:56:77:1b:bf:
a9:98:31:01:0f:8a:9d:8f:9a:87:43:82:2e:6b:55:
24:0e:4b:79:67:f0:cf:61:3e:82:a2:05:4f:32:ff:
6f:4b:a2:cc:2e:2b:7a:e2:f8:99:39:ae:a3:0e:ad:
6e:93:f5:3e:e7:49:83:5c:33:b7:2a:9a:f9:55:00:
f1:24:98:fb:5b:46:fd:5d:2c:0d:18:6c:c2:e3:bd:
93:43:1b:02:69:08:a3:9d:34:3f:17:53:1f:e7:e5:
c2:f9:b5:13:f1:9d:c8:90:9e:b9:a6:80:85:b7:c4:
9f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E2:80:41:BE:E6:A4:EC:6C:E5:66:DB:CE:0B:7E:80:89:B5:F3:56
X509v3 Authority Key Identifier:
keyid:82:6B:44:74:BC:6F:4F:3B:E4:0B:5E:75:11:F1:05:CA:E7:FE:8C:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmtEdLxvTzvkC151EfEFyuf-jAw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:e6:bc:72:f0:39:76:25:96:b9:bc:ef:e5:61:8d:2b:89:cb:
ed:30:e3:cf:d9:cc:f7:46:99:76:8b:08:20:ae:41:68:76:9a:
53:59:d3:d1:2c:69:fd:c7:4c:6c:4b:cb:b0:2a:c2:bb:49:91:
32:7a:dd:af:b5:85:50:9e:a7:79:74:47:97:44:a2:44:2f:b3:
c7:8e:76:97:29:d3:a3:e7:55:c6:1a:44:1d:58:94:1d:c5:ae:
b6:aa:8d:04:75:04:21:64:39:2c:bc:4a:e9:dd:0a:19:de:1b:
25:78:d5:db:c5:6b:af:c0:88:ee:95:cd:8b:61:4b:1c:2b:2b:
6f:a7:20:3d:dd:15:8f:b3:e3:01:14:01:b5:8e:c6:47:b9:f4:
f4:1e:ea:76:58:8c:98:aa:da:fa:25:51:f0:5b:fd:da:19:fa:
b2:59:ec:29:e2:d0:dd:e6:0d:29:07:00:00:0e:7f:46:77:fe:
18:b3:90:d6:27:e0:4c:9d:3e:7d:84:48:92:8d:30:44:e2:1c:
ba:24:64:19:3a:ee:ce:da:3f:c7:3d:86:97:a5:bf:4c:d2:5a:
2f:ee:90:a7:9d:b0:fc:50:bd:14:d3:a1:75:69:48:ef:de:01:
55:d6:65:61:12:fc:6f:56:dc:db:c6:7a:23:df:a5:2a:2e:e0:
25:58:cf:48
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkFCM0MxMTAvBgNVBAUTKDgyNkI0NDc0QkM2RjRGM0JFNDBCNUU3NTExRjEwNUNB
RTdGRThDMEMwHhcNMjYwNjEzMDcyMDM5WhcNMjYwNjIwMDcyMDM5WjAYMRYwFAYD
VQQDEw02YTJkMDRjNy02YmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxGGvHySpL9Yv0kcLDS9Pxm2k6t6HHQe/jfflt9DH0Px9T1sijVQ9XSwHD7Vr
P/CpgoWvFGLK+kakeZyGsDrnQ2U+hcZ89N/aPPleXH+DdjT6wIwJOljJxFQ7F+6o
qjH34TJm+93+7+oqW7P7jgShmuCsaVz2ah+ORznNigSHzbPVBrHAn/84CFdTD7Bl
pGAyJFZ3G7+pmDEBD4qdj5qHQ4Iua1UkDkt5Z/DPYT6CogVPMv9vS6LMLit64viZ
Oa6jDq1uk/U+50mDXDO3Kpr5VQDxJJj7W0b9XSwNGGzC472TQxsCaQijnTQ/F1Mf
5+XC+bUT8Z3IkJ65poCFt8SfwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIrigEG+
5qTsbOVm284LfoCJtfNWMB8GA1UdIwQYMBaAFIJrRHS8b0875AtedRHxBcrn/owM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUIzQy85OTFFQURGRTY5
NEExMUYwQTc3NDFBNDNDNEY5QUUwMi9nbXRFZEx4dlR6dmtDMTUxRWZFRnl1Zi1q
QXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2dtdEVkTHh2VHp2a0MxNTFFZkVGeXVmLWpBdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QUIzQy85OTFFQURGRTY5NEExMUYwQTc3NDFBNDNDNEY5QUUwMi9nbXRFZEx4dlR6
dmtDMTUxRWZFRnl1Zi1qQXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAj+a8cvA5diWWubzv5WGNK4nL7TDjz9nM90aZdosIIK5BaHaaU1nT0Sxp/cdM
bEvLsCrCu0mRMnrdr7WFUJ6neXRHl0SiRC+zx452lynTo+dVxhpEHViUHcWutqqN
BHUEIWQ5LLxK6d0KGd4bJXjV28Vrr8CI7pXNi2FLHCsrb6cgPd0Vj7PjARQBtY7G
R7n09B7qdliMmKra+iVR8Fv92hn6slnsKeLQ3eYNKQcAAA5/Rnf+GLOQ1ifgTJ0+
fYRIko0wROIcuiRkGTruzto/xz2Gl6W/TNJaL+6Qp52w/FC9FNOhdWlI794BVdZl
YRL8b1bc28Z6I9+lKi7gJVjPSA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:45:06 2026 by rpki-client