
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft
File: gp8PQIhN2ZESEAWwfQmiy_-03sY.mft (raw, json)
Hash identifier: wM3hzRv5dXzcA6jGYBpVR2Wf18TPmv9t5B4OfjlDJI0=
Subject key identifier: 28:C9:9C:16:63:B9:BE:03:DC:D1:70:AF:8E:04:9D:E7:2A:BD:33:26
Authority key identifier: 82:9F:0F:40:88:4D:D9:91:12:10:05:B0:7D:09:A2:CB:FF:B4:DE:C6
Certificate issuer: /CN=A91A16CF/serialNumber=829F0F40884DD991121005B07D09A2CBFFB4DEC6
Certificate serial: 0CFD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft
Manifest number: 0CE3
Signing time: Thu 24 Sep 2026 18:26:09 +0000
Manifest this update: Thu 24 Sep 2026 18:26:09 +0000
Manifest next update: Thu 01 Oct 2026 18:26:09 +0000
Files and hashes: 1: gp8PQIhN2ZESEAWwfQmiy_-03sY.crl (hash: lxr8r9AGpOFbcO/bkx0rixVW1fRGknb8wDNBZxZzFBw=)
2: 2D2322ECF53111F0B165BC265F6F56BC.roa (hash: tZiy66LheF6UARgLL7DjkA4ZOPMuv3MTdVKtCblCRCI=)
3: 46D7B1B468F911EFAB3D9424C4F9AE02.roa (hash: EANYonIlLAQsD77itNqvU5Ar2XS9wRUAE//HQHxkYJ8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.crl
rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 18:26:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3325 (0xcfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A16CF, serialNumber=829F0F40884DD991121005B07D09A2CBFFB4DEC6
Validity
Not Before: Sep 24 18:26:09 2026 GMT
Not After : Oct 1 18:26:09 2026 GMT
Subject: CN=6ab56b41-a380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bc:eb:9b:cf:09:3e:14:bb:e2:c0:75:04:0c:
0a:f4:65:b6:c7:47:57:c4:35:3a:3d:f8:98:fe:bd:
46:65:93:58:51:d3:e3:01:4b:52:83:40:c2:a0:48:
7c:40:50:ff:5a:e1:70:24:d1:fd:14:44:69:69:9d:
9d:b6:e3:49:27:80:aa:9c:93:ee:3d:e2:b2:a3:e6:
83:5e:8b:b0:fa:da:b2:a8:c4:19:f1:fe:d1:d6:22:
06:bf:8c:b1:08:e3:29:37:eb:66:6a:d5:98:e0:0c:
95:59:78:56:f0:2f:1f:1e:39:79:a7:d6:d1:91:e6:
a5:a0:9b:19:39:82:07:a8:d7:da:4b:c4:1a:30:d1:
2a:a8:5d:dd:a9:c9:3b:89:46:3c:1c:fd:c3:a2:c9:
62:4e:1c:c4:be:18:4a:1c:43:72:48:b0:cf:db:48:
bd:9f:6d:aa:b2:6e:89:e1:fa:27:7a:27:88:1e:8f:
c3:47:f2:07:51:9d:56:d4:4d:4c:0e:38:97:16:9e:
3a:c2:65:7c:70:cc:dd:aa:36:58:2e:97:6d:99:5b:
69:04:d9:bd:6a:02:13:a7:e9:ad:f8:e1:35:8b:16:
7e:e9:27:a5:b1:cf:64:51:52:95:5b:3a:85:aa:94:
94:c4:f2:51:78:c1:77:35:1f:e6:a7:58:21:60:b6:
86:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C9:9C:16:63:B9:BE:03:DC:D1:70:AF:8E:04:9D:E7:2A:BD:33:26
X509v3 Authority Key Identifier:
keyid:82:9F:0F:40:88:4D:D9:91:12:10:05:B0:7D:09:A2:CB:FF:B4:DE:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:1d:aa:6f:69:aa:21:1b:3f:28:07:ff:c9:58:63:e9:bd:30:
24:32:3d:31:82:3a:2f:7b:23:cd:29:93:3c:7a:77:5f:44:11:
ed:14:d4:2a:99:04:16:0e:3b:f9:5e:47:bc:1b:aa:c0:1d:41:
e6:68:9e:b6:73:dd:26:14:78:89:fb:51:b8:b9:ac:90:23:30:
33:5b:f6:47:65:86:63:e3:d9:7d:d3:bb:3c:fc:0d:c6:56:0e:
b9:12:6e:c9:e7:99:d5:f0:91:7e:10:b4:44:28:19:65:dc:57:
e9:64:47:44:c8:fc:28:3a:9a:ab:ac:d1:fd:80:dd:1b:e3:38:
2f:a2:cf:82:81:38:b0:f4:75:83:f6:74:7e:3d:9a:3e:fe:e8:
f6:b7:b9:b9:58:f8:0c:47:2d:d3:eb:7e:63:ac:f5:fd:1c:bc:
19:a4:d4:9f:2f:00:ce:09:71:c4:1d:ad:7e:d1:e5:23:6c:a7:
c1:fc:ae:6a:b2:34:9e:56:1c:1c:b6:8b:be:4f:0f:40:cf:f6:
07:69:b1:0f:f9:cc:dc:5b:85:32:2c:13:f3:fc:02:d1:92:f1:
56:6c:9c:1b:a2:62:94:44:9d:24:81:c4:34:62:fd:20:4c:0b:
2f:5a:de:50:34:e2:9d:18:90:61:12:c2:6d:80:f0:e7:5e:c3:
40:16:04:41
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTE2Q0YxMTAvBgNVBAUTKDgyOUYwRjQwODg0REQ5OTExMjEwMDVCMDdEMDlBMkNC
RkZCNERFQzYwHhcNMjYwOTI0MTgyNjA5WhcNMjYxMDAxMTgyNjA5WjAYMRYwFAYD
VQQDEw02YWI1NmI0MS1hMzgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsbzrm88JPhS74sB1BAwK9GW2x0dXxDU6PfiY/r1GZZNYUdPjAUtSg0DCoEh8
QFD/WuFwJNH9FERpaZ2dtuNJJ4CqnJPuPeKyo+aDXouw+tqyqMQZ8f7R1iIGv4yx
COMpN+tmatWY4AyVWXhW8C8fHjl5p9bRkealoJsZOYIHqNfaS8QaMNEqqF3dqck7
iUY8HP3DosliThzEvhhKHENySLDP20i9n22qsm6J4foneieIHo/DR/IHUZ1W1E1M
DjiXFp46wmV8cMzdqjZYLpdtmVtpBNm9agITp+mt+OE1ixZ+6Selsc9kUVKVWzqF
qpSUxPJReMF3NR/mp1ghYLaG4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCjJnBZj
ub4D3NFwr44EnecqvTMmMB8GA1UdIwQYMBaAFIKfD0CITdmREhAFsH0Josv/tN7G
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTZDRi8yQ0FENTA4ODE5
QTIxMUVBQUU4MTFDNzFDNEY5QUUwMi9ncDhQUUloTjJaRVNFQVd3ZlFtaXlfLTAz
c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dwOFBRSWhOMlpFU0VBV3dmUW1peV8tMDNzWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MTZDRi8yQ0FENTA4ODE5QTIxMUVBQUU4MTFDNzFDNEY5QUUwMi9ncDhQUUloTjJa
RVNFQVd3ZlFtaXlfLTAzc1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAah2qb2mqIRs/KAf/yVhj6b0wJDI9MYI6L3sjzSmTPHp3X0QR7RTUKpkEFg47
+V5HvBuqwB1B5mietnPdJhR4iftRuLmskCMwM1v2R2WGY+PZfdO7PPwNxlYOuRJu
yeeZ1fCRfhC0RCgZZdxX6WRHRMj8KDqaq6zR/YDdG+M4L6LPgoE4sPR1g/Z0fj2a
Pv7o9re5uVj4DEct0+t+Y6z1/Ry8GaTUny8AzglxxB2tftHlI2ynwfyuarI0nlYc
HLaLvk8PQM/2B2mxD/nM3FuFMiwT8/wC0ZLxVmycG6JilESdJIHENGL9IEwLL1re
UDTinRiQYRLCbYDw517DQBYEQQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 14:34:25 2026 by rpki-client