
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7CDD/8A23A6F8DD0D11EE9D292D6AC4F9AE02/g4qU7SUkCVmqbxVJEAOsbm0DlX4.mft
File: g4qU7SUkCVmqbxVJEAOsbm0DlX4.mft (raw, json)
Hash identifier: BBvbGGgpWedA9YOnLBJ7QZFfI9kdlzNiZPllHTV7OMc=
Subject key identifier: 96:7D:A4:F4:5B:94:B3:0F:77:40:84:32:77:00:73:10:AC:67:5F:3D
Authority key identifier: 83:8A:94:ED:25:24:09:59:AA:6F:15:49:10:03:AC:6E:6D:03:95:7E
Certificate issuer: /CN=A91A7CDD/serialNumber=838A94ED25240959AA6F15491003AC6E6D03957E
Certificate serial: 01AE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4qU7SUkCVmqbxVJEAOsbm0DlX4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7CDD/8A23A6F8DD0D11EE9D292D6AC4F9AE02/g4qU7SUkCVmqbxVJEAOsbm0DlX4.mft
Manifest number: 01A9
Signing time: Sat 13 Jun 2026 04:06:42 +0000
Manifest this update: Sat 13 Jun 2026 04:06:42 +0000
Manifest next update: Sat 20 Jun 2026 04:06:42 +0000
Files and hashes: 1: g4qU7SUkCVmqbxVJEAOsbm0DlX4.crl (hash: byj4ejTqH7JdxABzVtPrNiRyhCqUbym9QWUkbOK4JHE=)
2: 1E595AE8DD0E11EE9833196BC4F9AE02.roa (hash: e8BrutbzfzM1UUyv17uARTWJ09lINCQWQeDDVfsXfGo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7CDD/8A23A6F8DD0D11EE9D292D6AC4F9AE02/g4qU7SUkCVmqbxVJEAOsbm0DlX4.crl
rsync://rpki.apnic.net/member_repository/A91A7CDD/8A23A6F8DD0D11EE9D292D6AC4F9AE02/g4qU7SUkCVmqbxVJEAOsbm0DlX4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4qU7SUkCVmqbxVJEAOsbm0DlX4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 04:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 430 (0x1ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7CDD, serialNumber=838A94ED25240959AA6F15491003AC6E6D03957E
Validity
Not Before: Jun 13 04:06:42 2026 GMT
Not After : Jun 20 04:06:42 2026 GMT
Subject: CN=6a2cd752-ed89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:50:c4:92:98:c6:49:d8:99:a3:68:d8:44:23:
72:cf:31:2a:c1:ed:e5:8e:6c:22:07:af:6f:02:3c:
84:d5:69:e3:06:57:e5:6f:27:d7:23:64:3e:05:37:
8c:6e:c0:ed:f0:30:b6:0b:7c:2a:e4:f2:2b:e1:81:
d2:2f:f2:f8:e9:2e:c7:8a:7e:ec:96:8d:2e:93:38:
a9:e1:48:6a:9b:5c:81:fa:ce:26:84:c0:d5:e9:99:
02:80:b4:81:5a:67:87:45:15:b5:4a:a2:02:d6:36:
ae:73:2a:39:03:f8:7a:00:1d:d7:3f:4c:dc:f2:39:
9f:72:54:74:81:bd:73:f6:2f:cd:62:96:f9:22:d7:
79:38:2b:c2:f9:3d:6a:7d:30:ee:38:d4:49:1a:44:
ff:14:3f:12:49:52:47:53:ac:78:d0:3c:77:f3:2e:
e5:25:6f:99:b2:5a:24:c3:5b:40:d6:0d:4b:a7:a7:
88:35:ca:6a:45:97:56:96:90:7b:b0:81:72:d0:bd:
aa:dd:1a:49:c6:48:d7:ba:42:29:e8:61:42:9b:c1:
e3:65:77:0d:c4:81:22:1d:9a:41:1b:f2:fd:20:64:
0b:e8:85:4b:64:cd:72:77:f4:1f:e8:93:44:32:6e:
b6:69:e4:63:13:b6:26:e1:85:d5:c4:6c:0b:72:7d:
1c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7D:A4:F4:5B:94:B3:0F:77:40:84:32:77:00:73:10:AC:67:5F:3D
X509v3 Authority Key Identifier:
keyid:83:8A:94:ED:25:24:09:59:AA:6F:15:49:10:03:AC:6E:6D:03:95:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7CDD/8A23A6F8DD0D11EE9D292D6AC4F9AE02/g4qU7SUkCVmqbxVJEAOsbm0DlX4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4qU7SUkCVmqbxVJEAOsbm0DlX4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7CDD/8A23A6F8DD0D11EE9D292D6AC4F9AE02/g4qU7SUkCVmqbxVJEAOsbm0DlX4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:33:ed:8e:dd:d9:6e:49:c7:0f:2a:6f:ec:58:4c:26:d1:71:
3b:8c:8c:07:43:5f:02:9b:5e:06:37:ff:c2:13:56:eb:fb:37:
03:22:33:9b:5f:44:1c:68:31:ba:ad:bd:25:0a:c6:88:a8:e7:
a3:83:16:fd:df:71:c1:57:a7:23:9d:28:5a:c1:f2:e3:f7:a1:
fd:c3:83:10:71:8e:d8:bb:74:d3:4f:45:a7:a1:bd:c4:63:4c:
93:76:23:11:26:de:ea:1d:3d:13:27:e5:72:13:f8:66:9d:aa:
22:d2:e8:3d:59:e1:50:4a:89:5f:e5:6b:22:99:ca:d5:61:5f:
2f:74:fb:d5:37:ad:11:25:09:fe:81:e3:ae:c7:b4:1e:1c:ad:
e4:df:dc:b9:bc:5c:c2:aa:2d:27:a4:0c:da:51:ab:93:1e:37:
23:f4:64:68:cf:a1:35:07:2f:67:bc:f2:c3:80:4b:63:81:e1:
7e:30:48:f0:05:ac:75:7e:4c:88:75:5b:60:30:e9:d2:74:d6:
f2:e8:a2:54:19:d7:9b:ad:90:87:31:03:6d:09:7f:34:c5:7b:
23:6f:eb:10:2d:c1:09:54:07:93:6d:58:b7:86:36:6e:83:36:
d3:ac:d1:42:8c:08:fe:87:47:87:bb:71:65:bd:6c:1b:84:ac:
cd:f5:fe:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:35:31 2026 by rpki-client