
$ rpki-client -vvf rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft
File: g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft (raw, json)
Hash identifier: BE2B5vP2Tvmyr5ykLWF9d2MYtoQhlQAMkurT3xfxJUs=
Subject key identifier: A0:CA:11:07:8E:F8:01:1A:97:55:18:3C:53:58:E2:04:25:91:52:8F
Authority key identifier: 83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E
Certificate issuer: /CN=A91756B7/serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E
Certificate serial: 0845
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft
Manifest number: 07AE
Signing time: Tue 28 Jul 2026 22:38:13 +0000
Manifest this update: Tue 28 Jul 2026 22:38:13 +0000
Manifest next update: Tue 04 Aug 2026 22:38:13 +0000
Files and hashes: 1: g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl (hash: IVa9jtCYt+49YedRMUKc4jhub8aqV9cfCi39S3ODAh0=)
2: 993EAAD4522911EFA600C035C4F9AE02.roa (hash: RHnBGV6zzAX096qelds19ug+GhjfXzLG9IQAG1LM73U=)
3: 3DB131DC86F211F1B8F66003A7EE528E.roa (hash: sUfxM8axC54H/lShffOwTy/FoQUoQiyfwyQ2W0FeNjo=)
4: DEA0CC98F49311F0AD6894B8746F56BC.roa (hash: E1Wma8m3n7Qn18gf288l/1qSE7XCw5a0fYq5hrV8oiI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl
rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 22:36:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2117 (0x845)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91756B7, serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E
Validity
Not Before: Jul 28 22:38:13 2026 GMT
Not After : Aug 4 22:38:13 2026 GMT
Subject: CN=6a692f55-302d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8c:6a:7e:af:72:41:b0:ac:ba:f4:4b:34:64:
c2:6d:72:bd:9f:0c:5e:17:82:fb:f1:15:8c:5f:34:
a4:de:2f:a9:47:85:46:81:99:4f:69:19:3c:09:e9:
b5:a5:d9:f6:0b:af:29:c4:c9:eb:f8:66:0b:0f:4d:
7e:ac:92:23:fa:24:c5:20:ee:33:b4:48:d0:54:7a:
25:23:a5:26:b5:02:dc:36:a4:6f:67:e5:37:d3:5f:
77:7d:fd:e7:86:4e:85:8a:80:39:ac:9e:e1:05:2c:
16:d1:5e:32:f1:b0:10:ca:5b:21:49:8b:9d:e5:97:
b1:bf:7f:98:6c:a5:9a:03:c4:c0:a5:e7:29:07:59:
74:68:38:4a:14:68:aa:91:72:d1:51:f8:39:52:cf:
92:81:40:08:fb:4f:c6:c3:28:e2:19:7d:c4:b9:03:
97:b4:a8:40:6f:bd:7a:4e:63:4e:b1:29:10:91:6f:
70:b1:b7:5c:5e:7e:e7:8a:a0:06:94:e5:35:ed:4c:
00:fe:36:be:d2:5c:99:cb:e2:46:fc:38:24:9f:49:
6a:53:ce:54:97:30:72:44:b3:ae:c5:94:4c:c2:70:
9b:29:5d:2a:08:b2:cb:11:81:22:5c:84:53:8d:6d:
ed:b6:26:9a:49:55:e1:75:7d:87:b7:af:0f:01:69:
82:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:CA:11:07:8E:F8:01:1A:97:55:18:3C:53:58:E2:04:25:91:52:8F
X509v3 Authority Key Identifier:
keyid:83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:2e:51:9e:12:99:b4:34:7a:f4:c6:27:4b:d4:13:02:f8:ae:
cf:17:8a:34:82:6f:e5:9b:5f:84:6d:47:25:e8:34:a6:d7:4e:
1a:71:bb:91:e2:81:76:7a:0e:0d:df:bf:8c:eb:e7:46:70:f9:
10:92:30:07:6c:90:20:42:94:aa:3c:a9:7f:b9:19:ee:a4:f3:
06:d7:3b:4c:23:d0:8a:59:01:3b:5c:e5:74:00:0a:37:f9:4d:
cd:e6:89:b2:1d:2a:25:e9:da:ae:0e:a8:29:b9:10:40:4d:97:
7a:90:d5:a8:5e:ea:35:e8:cd:cf:98:b2:e6:f1:21:2d:40:cb:
86:40:d9:ae:e7:87:61:e0:29:31:53:68:08:ec:86:ac:19:d3:
d8:5b:1a:ed:ce:fc:f8:37:fb:e3:36:b0:32:83:8e:8d:9e:a2:
eb:19:5b:df:c3:45:0f:db:bb:aa:5d:96:d0:a7:d1:e8:f4:e8:
30:9d:ac:6b:46:1d:5e:82:0c:ae:3e:5a:12:c2:2b:fb:6a:6b:
d8:d6:ae:fb:d6:c3:fd:cd:24:77:ca:4c:45:39:40:75:c3:44:
d1:2a:e5:1b:d6:7f:8f:63:cf:28:72:13:09:cc:06:25:07:ff:
73:fe:ad:62:58:8d:c6:b1:6d:16:74:ba:c0:45:24:b3:df:d4:
f8:55:1c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:31:10 2026 by rpki-client