
$ rpki-client -vvf rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft
File: G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft (raw, json)
Hash identifier: +SRb8dWeXt2utKQlwRXVPmbwIy7VmPKrYszSpblf3IU=
Subject key identifier: C3:27:27:B9:B1:A2:F7:1D:FB:30:4C:4A:65:38:D6:9B:DD:28:A7:0A
Authority key identifier: 1B:8A:E7:C7:43:01:72:9D:85:C3:15:95:24:9C:3B:48:F1:B9:15:1E
Certificate issuer: /CN=A91340D8/serialNumber=1B8AE7C74301729D85C31595249C3B48F1B9151E
Certificate serial: 0321
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft
Manifest number: 0310
Signing time: Wed 29 Jul 2026 01:59:42 +0000
Manifest this update: Wed 29 Jul 2026 01:59:41 +0000
Manifest next update: Wed 05 Aug 2026 01:59:41 +0000
Files and hashes: 1: G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl (hash: I3zP5x6/VovQb1gaXoffXaXg96HGZcAqe9fjx/2PlRg=)
2: BDDB04B633DC11EF82BB2E27C4F9AE02.roa (hash: dkeJym/v87RKiKKUryyLDWvUYJU8ndSZ66o3idoC4+8=)
3: F2257AC0289011ED8AEEB43CC4F9AE02.roa (hash: vLKPklVP43k6OROJ42PijdvI9ys2gzzUNgh6DMpb1V4=)
4: BE608B1833DC11EF82BB2E27C4F9AE02.roa (hash: yGjZ2qr+BhGngGtcisuW8nAIXic6S3m8loWau7p/bRY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl
rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 01:59:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 801 (0x321)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91340D8, serialNumber=1B8AE7C74301729D85C31595249C3B48F1B9151E
Validity
Not Before: Jul 29 01:59:41 2026 GMT
Not After : Aug 5 01:59:41 2026 GMT
Subject: CN=6a695e8e-9a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ea:2e:c3:f3:ff:ed:f6:ed:47:ab:f9:4f:a7:
2c:50:47:0b:4e:4a:25:95:bf:0b:98:13:28:8a:9f:
c1:e8:4f:5f:fa:d2:59:61:17:b7:c9:28:ba:20:ed:
42:d4:22:10:a8:70:8b:8f:1b:d8:15:d5:f0:62:40:
d4:fc:43:b3:c7:ab:41:9e:b0:89:20:90:2c:40:38:
2c:a3:5e:cd:64:b9:46:25:f5:84:31:ba:cb:56:fc:
6b:d5:f1:53:47:90:a9:6a:4a:3a:10:32:74:d0:5e:
8c:bd:b4:fe:d0:19:00:25:7f:4b:e8:d0:1c:19:20:
86:75:54:6a:7f:28:ff:7b:9f:88:eb:bf:b7:62:98:
6a:d8:cc:f3:ca:f6:ed:28:06:a5:9e:71:13:a2:9c:
c8:df:bc:29:cf:9c:1d:b7:40:f8:40:5c:00:c2:6d:
84:79:ee:55:89:2f:e8:ae:94:1e:08:89:fa:1f:8a:
3e:91:d0:fa:8f:6b:2e:23:e0:53:1b:52:4a:85:0d:
14:0e:01:87:8e:6d:73:15:21:86:74:79:ab:9a:b6:
36:6a:71:f6:63:a8:06:59:bf:ce:97:10:4b:6d:98:
6f:0e:6a:19:7b:2c:bd:84:16:62:9d:3e:d8:3d:39:
88:a2:fb:4a:14:9a:fa:51:19:2b:c1:99:46:86:67:
45:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:27:27:B9:B1:A2:F7:1D:FB:30:4C:4A:65:38:D6:9B:DD:28:A7:0A
X509v3 Authority Key Identifier:
keyid:1B:8A:E7:C7:43:01:72:9D:85:C3:15:95:24:9C:3B:48:F1:B9:15:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:03:85:7b:22:38:08:ec:cf:60:66:ec:87:60:88:98:4c:d9:
0e:5e:20:2e:b6:bc:a2:9f:22:e5:c3:37:62:c4:21:53:37:20:
f9:d8:8e:50:30:64:67:d2:49:5f:a1:41:07:be:55:8f:41:b4:
f4:ce:fa:6b:2c:ec:47:ae:30:7a:c9:67:0c:bd:bb:c3:07:1f:
b2:98:8f:2a:b3:ec:df:42:24:be:0b:86:09:a2:1d:0c:84:a1:
4a:77:8b:06:3e:92:48:01:ee:55:0d:13:d1:fe:9d:c2:74:10:
e3:da:53:6d:29:2b:3c:1d:03:82:26:6b:06:86:c1:7a:fa:ba:
01:02:ef:0b:81:bc:a0:98:90:34:54:99:ee:bd:99:10:1c:b7:
f2:5c:50:f5:de:31:58:1c:bf:98:9b:44:03:c2:11:a2:01:3e:
64:3d:19:18:ff:8a:23:b2:d0:78:c1:49:88:4e:a5:40:a8:10:
31:9a:0a:c6:d7:60:cc:51:95:32:00:01:df:6a:bf:41:24:a8:
6f:f6:26:fa:8f:6b:14:2d:d4:5b:d7:72:6d:e2:a5:e2:51:79:
42:f3:f9:14:27:49:c3:40:77:de:77:0a:25:2e:0d:09:1e:40:
21:1b:57:45:87:37:ea:44:f1:5b:fc:dd:72:a0:1f:93:d6:a8:
d1:cd:f3:3c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAyEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzQwRDgxMTAvBgNVBAUTKDFCOEFFN0M3NDMwMTcyOUQ4NUMzMTU5NTI0OUMzQjQ4
RjFCOTE1MUUwHhcNMjYwNzI5MDE1OTQxWhcNMjYwODA1MDE1OTQxWjAYMRYwFAYD
VQQDEw02YTY5NWU4ZS05YThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1+ouw/P/7fbtR6v5T6csUEcLTkollb8LmBMoip/B6E9f+tJZYRe3ySi6IO1C
1CIQqHCLjxvYFdXwYkDU/EOzx6tBnrCJIJAsQDgso17NZLlGJfWEMbrLVvxr1fFT
R5Cpako6EDJ00F6MvbT+0BkAJX9L6NAcGSCGdVRqfyj/e5+I67+3Yphq2Mzzyvbt
KAalnnETopzI37wpz5wdt0D4QFwAwm2Eee5ViS/orpQeCIn6H4o+kdD6j2suI+BT
G1JKhQ0UDgGHjm1zFSGGdHmrmrY2anH2Y6gGWb/OlxBLbZhvDmoZeyy9hBZinT7Y
PTmIovtKFJr6URkrwZlGhmdFnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMMnJ7mx
ovcd+zBMSmU41pvdKKcKMB8GA1UdIwQYMBaAFBuK58dDAXKdhcMVlSScO0jxuRUe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDBEOC9CM0RFNUNFNDI4
OEQxMUVEQTlBNEVBNkZDNEY5QUUwMi9HNHJueDBNQmNwMkZ3eFdWSkp3N1NQRzVG
UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0c0cm54ME1CY3AyRnd4V1ZKSnc3U1BHNUZSNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NDBEOC9CM0RFNUNFNDI4OEQxMUVEQTlBNEVBNkZDNEY5QUUwMi9HNHJueDBNQmNw
MkZ3eFdWSkp3N1NQRzVGUjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABAOFeyI4COzPYGbsh2CImEzZDl4gLra8op8i5cM3YsQhUzcg+diOUDBkZ9JJ
X6FBB75Vj0G09M76ayzsR64weslnDL27wwcfspiPKrPs30IkvguGCaIdDIShSneL
Bj6SSAHuVQ0T0f6dwnQQ49pTbSkrPB0DgiZrBobBevq6AQLvC4G8oJiQNFSZ7r2Z
EBy38lxQ9d4xWBy/mJtEA8IRogE+ZD0ZGP+KI7LQeMFJiE6lQKgQMZoKxtdgzFGV
MgAB32q/QSSob/Ym+o9rFC3UW9dybeKl4lF5QvP5FCdJw0B33ncKJS4NCR5AIRtX
RYc36kTxW/zdcqAfk9ao0c3zPA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 13:10:45 2026 by rpki-client