
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft
File: -9GoSKH4mo0k2wtoF6CH-y313wg.mft (raw, json)
Hash identifier: pdJ3T9u/PIVV59CiMTDe+qPvJIlBkuzjoPsXIYrHJUo=
Subject key identifier: 13:6F:32:47:CF:B5:A4:78:03:34:8D:E3:20:E5:FB:87:B6:C9:7B:E8
Authority key identifier: FB:D1:A8:48:A1:F8:9A:8D:24:DB:0B:68:17:A0:87:FB:2D:F5:DF:08
Certificate issuer: /CN=A91BAFCE/serialNumber=FBD1A848A1F89A8D24DB0B6817A087FB2DF5DF08
Certificate serial: 02A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9GoSKH4mo0k2wtoF6CH-y313wg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft
Manifest number: 02A1
Signing time: Mon 21 Sep 2026 01:36:27 +0000
Manifest this update: Mon 21 Sep 2026 01:36:26 +0000
Manifest next update: Mon 28 Sep 2026 01:36:26 +0000
Files and hashes: 1: -9GoSKH4mo0k2wtoF6CH-y313wg.crl (hash: xg1iddLNNIh6KysB0mrVJu7lA+FInEjps3k+PhJAPzE=)
2: 37C8FE80B2A211ED9A5C4B53C4F9AE02.roa (hash: 8Y4nrhPY6RsS1NE1gpg04ierg266aCYEgZiZ3ft65yY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.crl
rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9GoSKH4mo0k2wtoF6CH-y313wg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 01:36:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 679 (0x2a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BAFCE, serialNumber=FBD1A848A1F89A8D24DB0B6817A087FB2DF5DF08
Validity
Not Before: Sep 21 01:36:26 2026 GMT
Not After : Sep 28 01:36:26 2026 GMT
Subject: CN=6ab08a1a-5541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:66:01:80:c5:0e:87:46:2b:55:88:38:22:85:
8d:b1:6f:58:e4:5e:88:71:75:d0:3f:72:8f:fe:cd:
8e:4f:1c:a4:a3:0b:11:86:88:34:ea:11:f6:ac:99:
52:37:21:41:41:69:11:51:7c:05:4f:f9:2d:05:85:
13:63:59:7d:81:1f:d4:e8:b0:ee:ac:a0:b1:e0:4b:
b2:52:49:57:b2:66:fa:ac:a4:c5:8f:b6:17:c8:28:
4b:8a:7e:86:8c:c8:1f:45:73:99:f0:84:11:52:8d:
27:20:1d:a6:5d:62:f4:78:2e:0d:2c:e7:21:8f:61:
97:83:9b:18:5e:ad:7a:52:a6:62:69:6d:d7:85:39:
2c:45:96:13:75:b3:cc:13:43:4c:45:76:b1:28:da:
cf:d1:7c:3d:6a:09:56:1f:33:c7:b8:e2:01:28:93:
a6:92:48:11:39:ac:d5:f0:fb:e1:be:81:49:d0:cc:
13:c4:4d:23:f3:9d:71:94:73:9f:0a:c6:fd:a5:46:
9b:37:70:ba:4c:a3:47:69:81:84:db:b5:fa:f6:66:
c8:4d:c3:bd:f5:8b:51:55:50:a4:da:ca:3a:20:1a:
f4:1d:2d:20:fe:58:7d:e0:72:0e:b8:02:e1:12:ba:
85:ae:b0:a3:76:51:5d:08:23:db:1a:2d:58:4a:71:
8c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:6F:32:47:CF:B5:A4:78:03:34:8D:E3:20:E5:FB:87:B6:C9:7B:E8
X509v3 Authority Key Identifier:
keyid:FB:D1:A8:48:A1:F8:9A:8D:24:DB:0B:68:17:A0:87:FB:2D:F5:DF:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9GoSKH4mo0k2wtoF6CH-y313wg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:bc:d7:53:d3:52:29:4d:0a:b1:de:2d:c3:c5:e6:bb:0f:a2:
1d:15:2c:69:82:a8:71:9e:3e:96:96:e6:10:ed:5a:a8:b8:8d:
da:f4:ae:d2:95:83:84:71:33:67:08:49:85:77:68:eb:5f:6f:
90:34:c6:50:a9:e7:0c:db:35:4d:fc:04:4e:27:1c:23:2a:b0:
59:5e:79:e3:96:a0:7c:17:8c:be:a4:0f:17:8c:41:0e:df:67:
7a:b2:1d:f5:fc:e9:7b:be:b6:cf:a8:08:ab:6e:a4:89:e2:72:
8c:f3:4a:cb:e0:26:d0:e7:01:b4:c5:5b:62:28:bb:45:0e:fc:
b8:2e:8f:f0:f3:4c:b7:92:cc:69:96:25:e6:b2:23:58:31:01:
9a:99:0e:21:cf:4f:24:cd:3a:47:42:1a:db:17:c2:fb:88:5c:
c2:80:e3:6f:18:c3:95:a9:75:e2:7a:cd:f2:58:54:0c:d0:ec:
35:ac:2d:1a:56:0a:bb:ab:3a:15:d9:33:5d:33:d5:a1:3b:01:
82:2f:9f:14:04:dd:3c:af:38:a3:19:03:f2:e7:cf:3e:80:29:
d0:37:80:d6:d8:9b:27:33:25:71:e4:ea:0e:f1:b7:24:c6:68:
0e:7b:09:08:ec:50:af:f3:b8:dd:b9:fa:05:9c:07:e7:ca:13:
41:cf:30:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:28:44 2026 by rpki-client