
$ rpki-client -vvf rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.mft
File: g4n9Rv74flk96Bz_3N8guiynYB4.mft (raw, json)
Hash identifier: QYw2wcpLhbzaG5pq8CdrgUJDQGAVtEBDLNMj3ZiW2N4=
Subject key identifier: B8:FB:AA:85:35:DE:14:8B:44:C2:63:2D:22:EB:16:72:51:77:C9:0F
Authority key identifier: 83:89:FD:46:FE:F8:7E:59:3D:E8:1C:FF:DC:DF:20:BA:2C:A7:60:1E
Certificate issuer: /CN=A91475BA/serialNumber=8389FD46FEF87E593DE81CFFDCDF20BA2CA7601E
Certificate serial: 08A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4n9Rv74flk96Bz_3N8guiynYB4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.mft
Manifest number: 089E
Signing time: Sat 28 Feb 2026 20:49:16 +0000
Manifest this update: Sat 28 Feb 2026 20:49:15 +0000
Manifest next update: Sat 07 Mar 2026 20:49:15 +0000
Files and hashes: 1: g4n9Rv74flk96Bz_3N8guiynYB4.crl (hash: UdaK5jfGF+P+XyRG0iKMPR2FpgapqNBoVo1bnoncDEk=)
2: 1E1D32C22FF311EC9220256BC4F9AE02.roa (hash: 5OVfpGRRuTVW6RDgKbkbGFesEEqHci4GY8++VBXDTTc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.crl
rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4n9Rv74flk96Bz_3N8guiynYB4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 20:49:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2212 (0x8a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91475BA, serialNumber=8389FD46FEF87E593DE81CFFDCDF20BA2CA7601E
Validity
Not Before: Feb 28 20:49:15 2026 GMT
Not After : Mar 7 20:49:15 2026 GMT
Subject: CN=69a354cc-9a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d3:03:25:bb:45:7b:cc:51:7b:5e:eb:47:77:
f3:b0:11:a3:39:b0:21:6e:81:2d:fc:37:12:34:f0:
27:be:e9:97:df:8b:1b:94:15:33:5b:6a:da:df:7a:
0b:a4:c4:10:f7:13:96:1c:a1:ac:e1:e4:18:e9:2a:
6e:37:a5:63:b3:dd:04:91:e8:53:83:8f:28:5e:fe:
3f:f7:73:f3:d7:e8:d5:5b:43:b1:1c:5f:e2:f6:b9:
fd:84:24:fe:cd:16:7b:bd:97:6e:28:57:e4:86:0f:
d8:40:a6:31:99:19:cb:81:46:4f:48:9e:37:6c:2c:
e8:cc:d3:3f:64:20:da:91:39:f9:fb:58:5c:2b:21:
38:f0:0d:12:13:17:5f:60:fb:d9:27:87:1e:fe:77:
23:09:ea:93:2d:61:6e:cc:ec:18:79:52:f7:cc:1c:
1e:5d:54:3b:e6:e8:77:41:d1:05:99:ce:8a:5d:3c:
00:67:10:58:f0:b3:51:c0:02:e2:27:e8:59:0a:be:
d1:e6:d2:78:4a:1a:b1:f3:7e:6a:3e:52:31:7c:4c:
e9:d0:ae:35:24:c6:e0:4d:3e:15:bd:86:34:f3:c1:
04:44:bf:b7:f5:db:f1:db:9c:0d:e2:5a:87:75:c7:
70:ac:d2:a6:91:0f:7c:94:cc:77:bc:23:8a:ea:7d:
4c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:FB:AA:85:35:DE:14:8B:44:C2:63:2D:22:EB:16:72:51:77:C9:0F
X509v3 Authority Key Identifier:
keyid:83:89:FD:46:FE:F8:7E:59:3D:E8:1C:FF:DC:DF:20:BA:2C:A7:60:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4n9Rv74flk96Bz_3N8guiynYB4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:9a:9f:ed:4e:7d:1a:2b:1b:71:e2:bf:b5:b2:22:86:66:5b:
41:b8:31:df:26:60:1d:48:ae:47:b5:44:eb:40:b5:5e:4a:83:
23:8a:55:9d:22:47:fe:60:86:7b:1f:94:2e:4b:73:7f:62:a0:
d8:20:b9:a2:ff:95:30:b7:12:aa:0c:a1:dc:4e:6b:9a:9c:41:
96:00:0f:6a:aa:57:e8:bd:1d:1f:a9:42:ff:8d:d9:59:89:06:
f6:f9:05:cf:9e:d5:b0:07:f1:fd:ec:45:fa:66:1c:b5:90:d3:
95:2e:76:ed:5b:7d:d3:01:8a:b4:78:a7:17:31:f3:73:a8:3d:
df:87:11:0c:29:e3:d0:6a:88:8b:81:7c:cf:ad:aa:5d:ed:38:
e8:f0:41:32:5d:ad:1d:4f:eb:85:02:46:7d:f4:66:3d:7b:2e:
bb:be:15:70:62:13:07:f1:0f:b5:69:22:4f:4e:fe:b9:26:7d:
85:af:63:f1:a9:15:d1:b2:c6:ad:54:26:24:7f:b2:17:9a:33:
63:ed:d9:2a:a0:75:60:64:1b:0b:7e:c7:b8:a3:b3:34:a3:4f:
26:f3:40:26:63:92:98:66:18:bb:4f:fb:01:b5:6c:27:c8:ea:
fa:32:54:72:a7:88:8a:9b:3f:6c:0e:29:30:3f:e4:2c:af:5c:
95:a9:22:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:24:41 2026 by rpki-client