
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft
File: G7spe8goFmqkl9N8cmW_tgGuA2A.mft (raw, json)
Hash identifier: q/ppwaKNCYdu2fgY21lym41kRX4OsZY9WxPK+pVPz8M=
Subject key identifier: 6C:8F:80:BC:CF:7E:89:D5:0E:41:64:B8:A3:8A:2A:83:D4:30:5A:8C
Authority key identifier: 1B:BB:29:7B:C8:28:16:6A:A4:97:D3:7C:72:65:BF:B6:01:AE:03:60
Certificate issuer: /CN=A91B49F2/serialNumber=1BBB297BC828166AA497D37C7265BFB601AE0360
Certificate serial: 0F30
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft
Manifest number: 0F22
Signing time: Sun 20 Sep 2026 17:34:35 +0000
Manifest this update: Sun 20 Sep 2026 17:34:35 +0000
Manifest next update: Sun 27 Sep 2026 17:34:35 +0000
Files and hashes: 1: G7spe8goFmqkl9N8cmW_tgGuA2A.crl (hash: 8Xdw5w6KdmHodSy+TyM2GlDaZebznf+yLOZNsHYp4Ec=)
2: BA0CC7060A3D11EB82ECEA4BC4F9AE02.roa (hash: qYFfAzLJ4mEmxJK5ZBfYrrSeoianiaMz/Ln8zWmMrHU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.crl
rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 17:34:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3888 (0xf30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B49F2, serialNumber=1BBB297BC828166AA497D37C7265BFB601AE0360
Validity
Not Before: Sep 20 17:34:35 2026 GMT
Not After : Sep 27 17:34:35 2026 GMT
Subject: CN=6ab0192b-10ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d3:1a:85:71:8f:c4:c7:eb:1d:70:20:75:ce:
f1:c2:ed:1e:9a:83:79:f1:4e:1f:ad:fa:83:fb:75:
38:3e:f5:43:7d:a3:c0:f8:52:64:09:0c:e6:55:20:
ce:d5:f3:c4:10:41:a3:5c:21:fc:d8:0a:9f:d6:fd:
03:5d:6a:75:20:a4:17:c5:6e:b2:b6:cf:ec:f1:eb:
4f:bd:dd:84:d8:cd:5a:98:b5:c6:cf:5d:b9:a8:54:
cb:a1:d0:f2:43:fd:39:67:b3:7b:87:19:5e:e0:32:
2b:15:41:bb:52:b2:2c:64:d0:db:e7:a4:a0:65:23:
a6:06:17:46:78:b3:a9:34:e6:95:80:82:11:1b:6b:
fa:c1:60:da:18:38:e5:99:e6:dd:98:35:df:d6:29:
17:21:0b:b9:66:09:1c:fa:83:25:d5:be:e6:7b:5d:
64:44:19:58:dc:16:f1:ae:f7:98:ec:03:27:11:46:
1e:90:ea:1f:06:0f:21:f9:01:d1:76:b9:25:91:14:
3b:9c:eb:d1:a5:0b:0f:75:bb:c4:77:01:96:70:de:
4a:4b:e9:bd:6b:56:55:5d:57:15:b7:4d:23:1f:6c:
ee:be:0d:1a:ff:8e:6c:a8:d2:32:de:4e:6c:02:6f:
c0:86:08:a1:68:9e:c2:80:fc:8f:c0:ab:12:69:7f:
32:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:8F:80:BC:CF:7E:89:D5:0E:41:64:B8:A3:8A:2A:83:D4:30:5A:8C
X509v3 Authority Key Identifier:
keyid:1B:BB:29:7B:C8:28:16:6A:A4:97:D3:7C:72:65:BF:B6:01:AE:03:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:85:e3:19:6e:d3:1a:a6:d5:4b:5b:d6:10:ef:ea:d6:83:4d:
5c:2d:b5:1a:9d:c7:7f:12:61:e6:82:7b:a2:fa:ce:ef:15:ae:
97:4e:93:35:c1:08:70:36:bb:b0:8f:cc:b7:79:d4:8f:20:bd:
af:8c:71:ae:65:ca:97:ee:34:c9:25:74:7a:88:96:f0:d8:dc:
a3:03:62:62:0a:61:07:bf:fc:2f:a9:d1:39:94:87:fe:d0:5b:
f9:4a:5f:54:62:c5:95:d6:76:a7:68:b5:2c:be:da:0f:bf:21:
aa:ec:d1:3d:4d:15:cb:53:82:c9:90:e0:ef:1a:3e:18:c0:8d:
0b:04:c3:ea:a9:71:58:86:4c:d9:58:28:7f:97:00:ea:84:44:
75:f9:0c:00:17:df:d4:ac:00:df:a8:a3:c7:e4:18:c2:8a:af:
0d:c3:2f:ad:b9:4e:25:a0:01:76:75:82:75:35:43:92:58:1a:
06:25:5a:4a:b2:7e:80:70:50:1c:8b:cb:33:af:5f:96:03:21:
34:49:b6:33:d8:7f:d3:89:6d:2d:17:dc:a9:cf:a8:b6:1b:b8:
79:8d:41:35:2b:8b:72:2d:eb:57:8b:d8:69:08:f3:09:b8:e4:
42:ce:0d:b9:f6:2c:e1:61:db:b9:fb:43:7c:ff:9d:96:e7:6d:
25:a1:e8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:31:50 2026 by rpki-client