
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.mft
File: g4n9Rv74flk96Bz_3N8guiynYB4.mft (raw, json)
Hash identifier: nnhdfKf97vzQMOw0i0tIT34/fgkKc6MbXTfrUjG0eac=
Subject key identifier: 6E:8E:E6:AB:9A:26:C2:C9:75:64:BF:74:63:A7:E2:F6:15:94:45:0E
Authority key identifier: 83:89:FD:46:FE:F8:7E:59:3D:E8:1C:FF:DC:DF:20:BA:2C:A7:60:1E
Certificate issuer: /CN=A91475BA/serialNumber=8389FD46FEF87E593DE81CFFDCDF20BA2CA7601E
Certificate serial: 0912
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4n9Rv74flk96Bz_3N8guiynYB4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.mft
Manifest number: 0909
Signing time: Sun 20 Sep 2026 20:11:07 +0000
Manifest this update: Sun 20 Sep 2026 20:11:07 +0000
Manifest next update: Sun 27 Sep 2026 20:11:07 +0000
Files and hashes: 1: g4n9Rv74flk96Bz_3N8guiynYB4.crl (hash: NpAFDOVWKG6hLAr4Kj844yN7UawRqwIfbzY9/5gtypo=)
2: 1E1D32C22FF311EC9220256BC4F9AE02.roa (hash: rQBPOBvkThW7+7E7jubPbgFdB5SrjXafLnjRjSwdJcM=)
3: D8831B4A4E8411F19692FE9BB2833773.roa (hash: AmaSg04K09nhgDvkJFll07EOLr2ig9e1az30iEGIY3w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.crl
rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4n9Rv74flk96Bz_3N8guiynYB4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 20:11:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2322 (0x912)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91475BA, serialNumber=8389FD46FEF87E593DE81CFFDCDF20BA2CA7601E
Validity
Not Before: Sep 20 20:11:07 2026 GMT
Not After : Sep 27 20:11:07 2026 GMT
Subject: CN=6ab03ddb-03f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2b:6f:27:c3:2f:55:b6:b0:b9:f0:bd:7c:99:
00:4d:57:c4:5e:f5:ee:f0:f2:a0:7c:45:06:2c:d7:
40:97:a6:9e:a6:1d:2e:f6:3d:26:bd:e7:b9:8e:7e:
f4:a5:68:41:3b:77:ba:cd:65:48:d5:3a:64:fd:24:
09:fd:6b:9f:97:7c:95:07:62:db:84:5d:6a:45:1b:
eb:66:48:e4:95:e2:37:cd:18:e4:a9:7d:db:17:eb:
f8:ad:5d:a3:65:cb:8b:1c:d6:06:ed:20:e9:dd:1f:
e2:de:df:65:04:5f:18:a9:f6:bb:72:a9:17:0a:92:
52:89:58:fa:c4:29:06:02:b9:31:1c:f9:1f:d0:f0:
5b:d8:fb:4d:bd:22:04:08:12:35:f3:c0:12:e2:d0:
96:0f:10:58:92:b0:00:61:89:0f:65:c0:37:d8:42:
4a:fe:a4:17:a6:e8:a1:54:6d:f8:f4:c7:93:ef:39:
12:38:78:99:68:25:7d:0a:19:a6:30:f2:db:cf:86:
9f:9a:3f:59:86:bb:4f:2a:92:21:5e:89:06:e4:ad:
5c:79:f3:54:f5:26:f4:84:d3:a2:e3:8b:28:d4:8e:
c2:08:e1:cf:49:7e:92:0f:c8:9c:6e:6e:0c:0d:dc:
90:3c:f5:25:82:14:00:6e:b5:fc:25:d5:3e:71:15:
c9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:8E:E6:AB:9A:26:C2:C9:75:64:BF:74:63:A7:E2:F6:15:94:45:0E
X509v3 Authority Key Identifier:
keyid:83:89:FD:46:FE:F8:7E:59:3D:E8:1C:FF:DC:DF:20:BA:2C:A7:60:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4n9Rv74flk96Bz_3N8guiynYB4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:9e:bd:1d:0a:e3:d2:22:4c:cf:59:31:21:e5:ba:e9:bc:7f:
1e:bb:a0:5e:f6:85:d4:ff:5f:cc:1b:9b:47:6f:04:01:4d:12:
f4:2f:46:5d:7b:50:7b:63:6e:b4:4f:4e:d8:c7:6d:81:01:e3:
81:90:08:29:fb:f6:f8:9a:dd:ad:ed:c8:2a:5d:fe:ac:76:40:
e9:a4:1d:2d:8e:01:83:d5:a8:cd:f5:60:d3:73:77:5a:f7:82:
ee:03:79:16:b8:f3:45:cc:b5:2a:76:7d:86:ca:6b:8a:78:84:
a8:e1:5a:5b:c8:88:47:4f:bf:6a:ab:95:2e:57:da:61:87:a0:
65:b8:2f:4e:19:19:c0:d9:70:15:74:a0:33:07:ce:30:d1:9a:
72:f9:f6:86:8e:78:0f:f3:65:e7:7d:46:6b:ec:fc:27:9f:cf:
01:c1:5a:16:44:06:65:39:1a:03:7c:2d:8a:35:c9:22:b7:2f:
d3:16:2d:76:03:09:41:25:84:4c:44:1b:1b:3b:58:e4:88:f6:
97:9d:19:90:ac:8c:f4:65:65:c5:24:a5:32:d4:f5:d0:ad:fb:
cc:55:9d:0f:a7:5b:8e:f3:33:ae:48:7f:4f:8b:52:cd:33:ee:
21:a0:47:27:fe:cb:1a:9e:bc:c3:f5:e8:10:27:76:a2:93:b4:
df:56:67:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:25:45 2026 by rpki-client