
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft
File: G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft (raw, json)
Hash identifier: fR4ifEaqlWx+zcBTlzk98pG3ATlwuc9SeLtTB+inh0s=
Subject key identifier: 8C:A8:AF:2D:2D:16:0D:F1:07:F5:9A:BE:24:67:EB:59:0D:3C:21:C6
Authority key identifier: 1B:FC:D5:95:AD:5F:FD:B9:C0:43:73:7B:CA:FE:C7:2E:04:6C:6B:EE
Certificate issuer: /CN=A9139322/serialNumber=1BFCD595AD5FFDB9C043737BCAFEC72E046C6BEE
Certificate serial: 0291
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft
Manifest number: 0291
Signing time: Sat 10 Oct 2026 22:46:30 +0000
Manifest this update: Sat 10 Oct 2026 22:46:30 +0000
Manifest next update: Sat 17 Oct 2026 22:46:30 +0000
Files and hashes: 1: G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl (hash: LNNAHUO0yz/9iJv1yONr/Omw9znwYHDDpG8L7rk3+SQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl
rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 22:46:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 657 (0x291)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139322, serialNumber=1BFCD595AD5FFDB9C043737BCAFEC72E046C6BEE
Validity
Not Before: Oct 10 22:46:30 2026 GMT
Not After : Oct 17 22:46:30 2026 GMT
Subject: CN=6acac046-b8b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e1:42:23:5f:22:7d:3b:cb:fe:34:d7:fe:2f:
8c:70:5c:54:14:d3:46:56:92:01:6d:78:00:32:c7:
cf:32:ed:2a:d2:27:83:10:88:b4:57:3b:5f:4b:e3:
63:c7:d7:61:ac:91:03:63:be:4f:3e:80:9d:76:e5:
73:05:8c:d3:bc:7d:b5:44:f4:6d:33:91:9d:ad:2c:
af:59:dc:e7:76:63:58:f8:48:ab:03:da:7c:94:31:
54:69:4c:99:fb:52:b7:5e:b2:b2:93:41:aa:ca:44:
c3:f1:b0:53:df:2e:5d:64:49:52:63:53:63:6e:20:
6d:69:96:bb:91:0b:1d:15:46:f9:b3:ba:45:50:12:
5a:91:80:45:d3:36:b5:00:47:d6:0d:91:11:46:36:
c4:80:8f:aa:f6:72:5e:8c:07:af:c7:5f:e9:60:16:
53:d1:a9:89:ea:02:4d:a9:42:22:49:42:dc:4c:79:
e9:4a:30:50:10:7f:40:e5:72:d8:94:fb:43:52:b7:
b3:22:88:bb:49:55:0b:c3:0a:04:a2:72:d5:ce:11:
d9:ab:ff:17:b7:f4:6d:b2:51:64:d2:37:5a:c6:f6:
ef:f3:21:8f:17:ea:ec:3c:05:15:1b:9e:d8:f8:77:
f6:7c:55:fa:bf:e9:ed:f7:b2:0c:ed:92:06:01:62:
3d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A8:AF:2D:2D:16:0D:F1:07:F5:9A:BE:24:67:EB:59:0D:3C:21:C6
X509v3 Authority Key Identifier:
keyid:1B:FC:D5:95:AD:5F:FD:B9:C0:43:73:7B:CA:FE:C7:2E:04:6C:6B:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:60:66:38:08:08:bd:90:38:d1:f0:1e:de:01:ae:ed:c3:bd:
cf:09:21:de:69:d6:12:80:a9:fb:dc:46:34:1d:4e:bd:67:86:
59:fe:7b:e8:94:74:d4:92:37:28:48:29:7b:5c:61:02:5e:49:
82:fb:2f:39:c6:61:a7:6e:c5:1d:eb:b3:79:9c:79:4b:8c:e6:
9a:8d:d7:28:49:00:5c:90:39:b4:c1:c5:25:dc:c7:c7:96:9d:
b2:54:fa:67:6b:f2:78:f0:b5:b0:b6:52:44:2a:ac:87:f0:fa:
3f:b8:9f:63:a4:f4:61:26:2b:76:e8:47:2d:b8:5a:cb:be:e2:
61:f2:94:79:9c:bd:56:a1:c9:48:8f:13:7a:50:f3:56:00:80:
8a:d6:5c:ae:3e:d6:81:04:e8:7c:82:9b:86:f4:74:8f:4a:ae:
8e:ae:c9:c0:3c:6b:2a:a0:5c:c5:dc:ae:ca:b8:63:71:2b:ff:
42:f8:fa:79:2b:73:e5:0c:2e:27:0e:b1:4b:b6:17:4e:aa:a5:
ec:eb:47:3d:f2:27:c2:63:42:db:9c:9d:07:80:0e:6d:2c:5a:
9a:fe:57:10:15:96:66:7e:6c:6b:2e:a2:9b:ea:80:34:5a:9d:
35:7d:8f:7b:b8:db:08:78:43:03:59:9a:5e:ac:17:04:87:04:
0c:9c:50:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 13:51:55 2026 by rpki-client