
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91836E8/239884D2AD0111F18D2EB3A23811F970/gn1qPQ8d6ye8eMrtRNqYfCa30_I.mft
File: gn1qPQ8d6ye8eMrtRNqYfCa30_I.mft (raw, json)
Hash identifier: Pk7rmdiduOZUNUs2Qmvw1+UBkwDVPD15staGLR6y8jE=
Subject key identifier: 9D:1A:1F:19:DC:03:56:3D:4B:48:35:61:00:FF:A4:DD:67:9F:DA:CF
Authority key identifier: 82:7D:6A:3D:0F:1D:EB:27:BC:78:CA:ED:44:DA:98:7C:26:B7:D3:F2
Certificate issuer: /CN=A91836E8/serialNumber=827D6A3D0F1DEB27BC78CAED44DA987C26B7D3F2
Certificate serial: 0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gn1qPQ8d6ye8eMrtRNqYfCa30_I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91836E8/239884D2AD0111F18D2EB3A23811F970/gn1qPQ8d6ye8eMrtRNqYfCa30_I.mft
Manifest number: 0B
Signing time: Sun 27 Sep 2026 09:47:09 +0000
Manifest this update: Sun 27 Sep 2026 09:47:08 +0000
Manifest next update: Sun 04 Oct 2026 09:47:08 +0000
Files and hashes: 1: gn1qPQ8d6ye8eMrtRNqYfCa30_I.crl (hash: bkzXBHycR3/QzXIK+oG1UXqNr5wo4ftUi3IFKFn1mDI=)
2: 685D69B6AD0111F1A96326FB3811F970.roa (hash: LvvIKRLn4rPKFRZbpCVDTbL1kJsWB+XQ6Nuu2eljFkM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91836E8/239884D2AD0111F18D2EB3A23811F970/gn1qPQ8d6ye8eMrtRNqYfCa30_I.crl
rsync://rpki.apnic.net/member_repository/A91836E8/239884D2AD0111F18D2EB3A23811F970/gn1qPQ8d6ye8eMrtRNqYfCa30_I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gn1qPQ8d6ye8eMrtRNqYfCa30_I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 09:47:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91836E8, serialNumber=827D6A3D0F1DEB27BC78CAED44DA987C26B7D3F2
Validity
Not Before: Sep 27 09:47:08 2026 GMT
Not After : Oct 4 09:47:08 2026 GMT
Subject: CN=6ab8e61d-543f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ea:ac:74:c5:96:4a:13:8d:f0:f0:31:86:88:
6e:09:a8:f0:c9:71:5c:92:d1:eb:e3:cc:94:75:c9:
61:c7:7a:4a:e2:4b:4d:d4:cd:2b:36:e1:bd:6b:69:
ea:11:1c:35:9a:ad:8c:82:e1:ef:a5:7b:01:cc:82:
22:09:ba:ec:47:3d:3f:a5:6e:86:5f:75:c4:9a:27:
0d:83:87:28:c6:4b:b4:a0:24:02:15:3f:cd:55:d7:
f7:22:56:82:7d:41:fc:6e:83:a0:aa:33:8b:0d:99:
c7:51:7e:ed:fa:ed:3e:60:c2:c9:8e:e9:4e:8d:5b:
71:6e:a6:95:bb:50:24:ce:cd:1a:01:2d:39:60:32:
7f:7a:d9:04:87:5f:b1:bc:2d:8f:d5:97:c6:86:17:
8f:02:a0:25:ce:d4:9b:1e:53:05:04:8b:25:76:f4:
4b:39:e9:6f:c3:e3:c3:14:34:84:70:3f:cc:47:70:
7f:25:2c:b6:d8:8d:58:67:8d:f0:58:1e:1e:95:ac:
c9:4e:5f:f3:7f:55:a3:a8:f7:82:1b:f1:83:0d:96:
11:92:b4:9c:52:4b:4b:f0:35:36:97:9b:12:c2:5f:
1b:f3:53:ec:e3:ea:9b:72:ce:ae:19:b1:a4:74:3e:
4a:5b:9e:9b:ef:d3:71:75:b8:72:95:cc:61:fa:14:
1d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:1A:1F:19:DC:03:56:3D:4B:48:35:61:00:FF:A4:DD:67:9F:DA:CF
X509v3 Authority Key Identifier:
keyid:82:7D:6A:3D:0F:1D:EB:27:BC:78:CA:ED:44:DA:98:7C:26:B7:D3:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91836E8/239884D2AD0111F18D2EB3A23811F970/gn1qPQ8d6ye8eMrtRNqYfCa30_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gn1qPQ8d6ye8eMrtRNqYfCa30_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91836E8/239884D2AD0111F18D2EB3A23811F970/gn1qPQ8d6ye8eMrtRNqYfCa30_I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:93:4c:65:15:aa:d2:7b:63:5f:55:e1:af:74:07:00:34:40:
58:29:eb:e7:8a:2b:a3:d0:23:25:56:96:69:c9:f5:6b:7f:07:
e8:e9:60:dc:54:e1:bf:d7:13:85:50:98:60:5c:8b:6a:2a:ea:
02:8a:90:96:11:ee:70:7f:05:23:36:7f:77:6e:67:5c:f9:cb:
3b:4b:22:3f:92:e2:66:1f:04:72:c4:d2:0d:6f:1e:0d:c5:ce:
28:69:02:a0:33:63:14:79:88:bb:65:cc:e9:fe:a5:b0:fd:56:
6a:d5:6a:8d:d4:f0:a6:33:30:24:a8:2b:ad:57:ea:32:33:1f:
af:f5:14:34:36:2a:f5:a5:73:b1:35:0a:9b:ad:83:11:a5:98:
b9:0c:2a:50:a6:78:b0:13:6f:f3:73:ce:e3:36:f9:1c:2e:e7:
2b:e0:83:94:6c:77:aa:9d:4b:d5:bd:6d:ef:73:87:a9:d1:cc:
2e:2b:e1:0a:55:24:d9:e1:97:2c:26:42:2f:a4:7c:5f:8c:7c:
01:f9:46:32:bf:68:88:42:74:06:58:6b:a4:b6:33:2e:94:66:
30:2a:0f:b6:5e:12:a8:97:41:d7:57:e0:58:07:88:c5:72:62:
8f:df:f4:d2:de:e6:c4:ce:73:ef:5e:18:49:d4:04:4e:84:99:
d8:35:0e:33
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
MzZFODExMC8GA1UEBRMoODI3RDZBM0QwRjFERUIyN0JDNzhDQUVENDREQTk4N0My
NkI3RDNGMjAeFw0yNjA5MjcwOTQ3MDhaFw0yNjEwMDQwOTQ3MDhaMBgxFjAUBgNV
BAMTDTZhYjhlNjFkLTU0M2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCm6qx0xZZKE43w8DGGiG4JqPDJcVyS0evjzJR1yWHHekriS03UzSs24b1raeoR
HDWarYyC4e+lewHMgiIJuuxHPT+lboZfdcSaJw2DhyjGS7SgJAIVP81V1/ciVoJ9
Qfxug6CqM4sNmcdRfu367T5gwsmO6U6NW3FuppW7UCTOzRoBLTlgMn962QSHX7G8
LY/Vl8aGF48CoCXO1JseUwUEiyV29Es56W/D48MUNIRwP8xHcH8lLLbYjVhnjfBY
Hh6VrMlOX/N/VaOo94Ib8YMNlhGStJxSS0vwNTaXmxLCXxvzU+zj6ptyzq4ZsaR0
Pkpbnpvv03F1uHKVzGH6FB1pAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUnRofGdwD
Vj1LSDVhAP+k3Wef2s8wHwYDVR0jBBgwFoAUgn1qPQ8d6ye8eMrtRNqYfCa30/Iw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgzNkU4LzIzOTg4NEQyQUQw
MTExRjE4RDJFQjNBMjM4MTFGOTcwL2duMXFQUThkNnllOGVNcnRSTnFZZkNhMzBf
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZ24xcVBROGQ2eWU4ZU1ydFJOcVlmQ2EzMF9JLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgz
NkU4LzIzOTg4NEQyQUQwMTExRjE4RDJFQjNBMjM4MTFGOTcwL2duMXFQUThkNnll
OGVNcnRSTnFZZkNhMzBfSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBPk0xlFarSe2NfVeGvdAcANEBYKevniiuj0CMlVpZpyfVrfwfo6WDcVOG/1xOF
UJhgXItqKuoCipCWEe5wfwUjNn93bmdc+cs7SyI/kuJmHwRyxNINbx4Nxc4oaQKg
M2MUeYi7Zczp/qWw/VZq1WqN1PCmMzAkqCutV+oyMx+v9RQ0Nir1pXOxNQqbrYMR
pZi5DCpQpniwE2/zc87jNvkcLucr4IOUbHeqnUvVvW3vc4ep0cwuK+EKVSTZ4Zcs
JkIvpHxfjHwB+UYyv2iIQnQGWGuktjMulGYwKg+2XhKol0HXV+BYB4jFcmKP3/TS
3ubEznPvXhhJ1AROhJnYNQ4z
-----END CERTIFICATE-----
Generated at Mon Sep 28 16:55:47 2026 by rpki-client