
$ rpki-client -vvf rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft
File: g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft (raw, json)
Hash identifier: D0Ah3OPZOPov/d3y7RjtxiN5Hl/Twwv3pPusMPJCS4U=
Subject key identifier: CC:5A:A3:C5:62:4E:D8:96:68:57:27:F7:E6:4E:C6:5A:D4:A8:98:92
Authority key identifier: 83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E
Certificate issuer: /CN=A91756B7/serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E
Certificate serial: 0809
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft
Manifest number: 0776
Signing time: Thu 16 Apr 2026 22:08:24 +0000
Manifest this update: Thu 16 Apr 2026 22:08:23 +0000
Manifest next update: Thu 23 Apr 2026 22:08:23 +0000
Files and hashes: 1: g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl (hash: ag/7U1F/o+NoWCt3VtRiVEqUypqY9GqpkTgivImvxBk=)
2: 993EAAD4522911EFA600C035C4F9AE02.roa (hash: 3XVBS/fTqlRh6IIe7RzFiy/Wa0ZSlvIPzHLw+7wGdvQ=)
3: DEA0CC98F49311F0AD6894B8746F56BC.roa (hash: AP8Httvv3MXSN3Zbhstxc7Mc+tY+yxqDGflYpBVgTRY=)
4: 756E0BBCEAE711EE88CD8641C4F9AE02.roa (hash: F9qzDXb2ETVj14lcNUq30Z9sFnnvqbyTNgRyrEZdsMI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl
rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:08:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2057 (0x809)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91756B7, serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E
Validity
Not Before: Apr 16 22:08:23 2026 GMT
Not After : Apr 23 22:08:23 2026 GMT
Subject: CN=69e15dd8-5165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c5:70:62:6e:bd:7d:a3:8f:34:35:07:51:a1:
72:96:cc:86:10:40:b6:aa:1e:86:3f:5f:58:72:a7:
ac:af:99:3c:05:56:5c:b8:23:04:ce:31:e7:c4:84:
9e:91:a8:89:8a:f2:58:df:9a:04:50:b6:4e:f4:c3:
98:47:fb:2f:17:e9:15:26:53:2d:9e:0d:87:7c:da:
73:ce:45:84:fb:5c:05:9c:15:0d:d6:14:ed:a9:23:
dd:82:26:40:17:ea:c6:26:ee:6e:cc:66:85:d8:e6:
c0:10:ca:f9:0f:ac:24:36:b2:4c:62:22:62:0d:ca:
1c:1c:0d:8e:5a:11:2f:77:13:2f:fe:88:87:f5:69:
40:19:90:5c:a0:eb:80:c0:3a:81:5f:12:dd:a0:ec:
4a:f1:8d:f8:98:1a:5e:76:9b:e2:32:f0:55:cb:09:
ae:d4:ce:1d:5c:44:c4:d4:69:17:8b:55:3c:bf:45:
cf:9f:34:32:46:63:2e:18:9a:91:ba:93:9c:b4:ac:
d7:1f:fc:0b:f0:dc:2b:02:98:e7:02:68:82:e1:5a:
c0:25:ce:d4:cf:eb:f6:bb:92:f6:08:9b:64:71:6f:
44:39:e6:ef:ca:1b:65:f5:dd:ab:55:2d:65:2a:68:
17:3e:ce:f3:41:87:31:18:44:3a:0d:bc:32:12:e3:
5a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:5A:A3:C5:62:4E:D8:96:68:57:27:F7:E6:4E:C6:5A:D4:A8:98:92
X509v3 Authority Key Identifier:
keyid:83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:4d:a9:c2:28:33:cb:29:9f:43:39:4e:f8:ca:48:51:2b:69:
40:89:af:2c:9d:5d:da:4e:cf:fe:a5:79:4d:af:57:35:0f:cd:
a2:05:98:8b:29:b8:d1:20:fb:70:a2:8a:33:77:25:26:e7:13:
f6:63:92:48:d0:b7:e7:67:a0:df:2c:0d:7c:ea:74:5b:58:b0:
36:bc:19:34:bb:14:a6:77:89:e3:4e:ba:32:2a:64:ad:72:db:
f4:37:b3:92:aa:9d:f4:db:8c:2d:40:1c:20:8a:3a:8b:0c:05:
4c:78:c4:3c:4b:ed:4b:aa:91:13:f3:c5:37:dd:92:b8:02:10:
96:84:08:bf:1e:f7:00:6f:a4:7f:f6:c5:ab:3d:ff:81:aa:c0:
b2:72:03:2d:67:96:3b:3e:a1:56:1b:ac:a8:1a:df:b9:c7:2f:
9a:e0:53:fa:bb:fc:85:00:d9:a6:39:78:d4:2d:26:23:90:e3:
48:dd:e4:5c:e2:37:54:c5:74:7b:09:f0:e4:a3:21:b9:62:91:
3b:0e:8c:51:aa:fa:15:4b:c2:c7:0d:fc:0c:bf:52:18:b9:e7:
a2:9b:0f:4f:aa:95:66:19:bd:3a:99:04:d6:34:0d:be:1b:aa:
ce:5f:76:54:dc:14:21:33:ac:29:29:2c:cd:88:ab:75:6c:da:
ce:62:91:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:08:41 2026 by rpki-client