
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft
File: -gEnQNykk8ziA6-q3o68cZqsI7Q.mft (raw, json)
Hash identifier: qNKphc9mYeNm8yueCZ8hut11ZkckpM4jPpayoVt5OLk=
Subject key identifier: 99:E9:D5:32:1A:F3:37:3D:CC:44:CF:F3:61:40:63:2E:DC:10:08:F0
Authority key identifier: FA:01:27:40:DC:A4:93:CC:E2:03:AF:AA:DE:8E:BC:71:9A:AC:23:B4
Certificate issuer: /CN=A91AF404/serialNumber=FA012740DCA493CCE203AFAADE8EBC719AAC23B4
Certificate serial: 0277
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gEnQNykk8ziA6-q3o68cZqsI7Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft
Manifest number: 0267
Signing time: Mon 27 Jul 2026 03:43:21 +0000
Manifest this update: Mon 27 Jul 2026 03:43:21 +0000
Manifest next update: Mon 03 Aug 2026 03:43:21 +0000
Files and hashes: 1: -gEnQNykk8ziA6-q3o68cZqsI7Q.crl (hash: WXavZ0OevESzRKNGyr3IFsgYGTg1S+/pRikfl1gPFSE=)
2: 01E26EA86ACF11F191659B0D6B47A888.roa (hash: kM+Vu69NRQ5mEE07A5gTkC6P9QeS9+lMcrdBxgPLcxk=)
3: F081B8F86ACE11F18C007A026B47A888.roa (hash: YDmE7noThzwCREvZQ5J7wO7N+9DX5rqBychNTHFT42A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.crl
rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gEnQNykk8ziA6-q3o68cZqsI7Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 03:43:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 631 (0x277)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF404, serialNumber=FA012740DCA493CCE203AFAADE8EBC719AAC23B4
Validity
Not Before: Jul 27 03:43:21 2026 GMT
Not After : Aug 3 03:43:21 2026 GMT
Subject: CN=6a66d3d9-c3a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b3:eb:07:86:e5:a6:d3:83:41:77:88:00:a4:
e8:72:af:06:e8:6d:f2:5e:e9:bb:0f:3b:90:fc:34:
da:ca:b7:61:80:2a:e2:c5:e3:ae:2e:b7:fe:55:2d:
bf:80:cb:ea:06:8f:06:74:3d:4d:b7:ce:7c:10:1e:
78:c8:c7:d6:ea:07:3d:a2:a1:e9:56:d5:56:40:8f:
c6:93:00:52:7b:fb:c1:ea:44:34:ef:98:4a:eb:34:
cb:bc:3d:86:a2:89:ef:af:44:a8:52:3b:e9:5e:2f:
2b:3b:1c:cd:32:b1:5d:8c:eb:38:91:a5:22:35:92:
89:52:26:b8:d5:90:81:23:62:3f:14:0a:8d:ee:62:
40:c7:a8:55:ab:fa:da:1e:74:48:02:7c:f2:25:25:
84:30:82:8b:fb:74:b0:96:a8:f7:28:e0:ce:6f:16:
f5:69:9a:18:d9:03:bd:b6:1d:5f:2f:1a:3e:b8:4f:
ff:66:3f:a5:cf:3c:26:21:51:cb:ce:c4:30:0b:de:
cc:3c:68:3e:9a:fc:5c:6f:61:b1:54:5e:21:96:2d:
13:15:26:ab:a6:fc:de:8a:cc:50:54:f6:52:59:84:
1e:ea:1d:53:4e:2c:03:61:05:b6:3e:9e:d3:c2:60:
7b:4a:00:73:4e:c0:0e:e8:36:26:99:c7:ae:82:76:
ff:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E9:D5:32:1A:F3:37:3D:CC:44:CF:F3:61:40:63:2E:DC:10:08:F0
X509v3 Authority Key Identifier:
keyid:FA:01:27:40:DC:A4:93:CC:E2:03:AF:AA:DE:8E:BC:71:9A:AC:23:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gEnQNykk8ziA6-q3o68cZqsI7Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:ff:62:07:3e:fc:e0:5a:d4:81:f3:d0:7d:66:88:11:a4:4c:
9c:e9:8e:93:49:20:bd:69:80:7a:6e:aa:41:6e:47:75:e0:4f:
a6:0a:1e:e0:f7:84:46:ec:af:e0:1c:32:e4:56:ac:0b:c1:4d:
3c:fe:e7:e6:1a:87:cb:12:fc:73:c4:d8:c0:bc:23:7c:47:f1:
cf:08:a9:32:31:15:18:44:be:df:f1:40:72:45:9d:9a:a5:5f:
3e:e9:10:2a:3d:4a:4f:d7:c4:3f:72:3e:10:b6:9e:0b:65:56:
24:78:29:4a:0f:14:8a:77:e6:cb:52:8e:ab:d0:04:70:cb:56:
59:ee:a4:83:41:17:0d:29:2a:2f:70:0a:bf:18:96:35:79:69:
7d:28:80:ee:e8:45:0c:f3:af:ae:5d:1a:0f:9f:e1:b9:bd:e3:
59:c8:37:3c:8c:f3:e3:41:07:50:c0:85:8a:8f:c3:13:a5:ef:
28:6a:8e:73:44:15:20:ca:02:b7:33:be:7b:1a:5c:9d:1f:79:
d4:3f:6f:bd:54:20:b2:b5:67:1c:d5:dd:dc:5b:b8:26:bf:83:
c8:2a:e1:1e:60:c5:d9:09:bb:71:b5:1e:5d:94:45:c5:b4:18:
48:c3:35:16:95:d4:19:2c:a6:43:3d:9d:bb:d3:38:85:ac:7d:
9d:e8:23:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:15:19 2026 by rpki-client