
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C02B3/2C8242AEBED211EB9F409076C4F9AE02/G9yKnBE9vfM_vPHBQblLu31wEno.mft
File: G9yKnBE9vfM_vPHBQblLu31wEno.mft (raw, json)
Hash identifier: 9mldDBAFX+VtQ3wNUbj9przchsWRIr436DCPzdiFhbM=
Subject key identifier: 80:89:93:F3:89:34:33:59:D7:3C:FE:F2:CA:22:6C:B1:77:77:32:F3
Authority key identifier: 1B:DC:8A:9C:11:3D:BD:F3:3F:BC:F1:C1:41:B9:4B:BB:7D:70:12:7A
Certificate issuer: /CN=A91C02B3/serialNumber=1BDC8A9C113DBDF33FBCF1C141B94BBB7D70127A
Certificate serial: 065B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9yKnBE9vfM_vPHBQblLu31wEno.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C02B3/2C8242AEBED211EB9F409076C4F9AE02/G9yKnBE9vfM_vPHBQblLu31wEno.mft
Manifest number: 0656
Signing time: Sat 28 Feb 2026 23:11:23 +0000
Manifest this update: Sat 28 Feb 2026 23:11:23 +0000
Manifest next update: Sat 07 Mar 2026 23:11:23 +0000
Files and hashes: 1: G9yKnBE9vfM_vPHBQblLu31wEno.crl (hash: fX4P86OiLguZ1Wgj5XsJ98b9dMX3BKT+9Ksze2JfuH4=)
2: 7F17B380BED411EBA325CC76C4F9AE02.roa (hash: XDIx2Mu+3w+iq57LYXThCAlha4BzO8LkP4nQjVrOfjc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C02B3/2C8242AEBED211EB9F409076C4F9AE02/G9yKnBE9vfM_vPHBQblLu31wEno.crl
rsync://rpki.apnic.net/member_repository/A91C02B3/2C8242AEBED211EB9F409076C4F9AE02/G9yKnBE9vfM_vPHBQblLu31wEno.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9yKnBE9vfM_vPHBQblLu31wEno.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 23:11:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1627 (0x65b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C02B3, serialNumber=1BDC8A9C113DBDF33FBCF1C141B94BBB7D70127A
Validity
Not Before: Feb 28 23:11:23 2026 GMT
Not After : Mar 7 23:11:23 2026 GMT
Subject: CN=69a3761b-47a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:68:d5:52:7a:b6:e2:cd:7a:88:4e:95:48:52:
4a:f4:f1:ce:43:24:a1:24:ad:5b:07:e5:1a:3b:75:
5f:27:04:2b:50:a1:43:41:2a:1f:37:c8:52:6c:23:
90:a3:d9:4c:54:3b:3b:9e:ed:9b:00:02:eb:e0:a8:
a3:fe:ac:13:1f:49:4c:64:f9:6d:85:7b:54:1e:54:
6b:68:e7:2f:18:03:a5:7d:96:22:90:a3:eb:e6:2a:
73:2d:95:77:24:b3:4b:70:13:89:ca:2f:85:c8:68:
33:ee:51:62:31:4f:ba:98:83:5a:ab:63:6f:4f:7a:
96:cc:22:e9:04:af:6c:11:08:cf:2c:44:34:ce:1e:
ca:ea:a5:63:c2:98:ec:07:0d:07:4f:48:c4:30:7b:
a9:f3:f7:fc:e4:66:60:2f:15:2d:a4:42:94:5e:b3:
72:32:f0:c8:9d:80:25:4f:44:1c:55:f9:55:24:81:
f1:1e:57:58:f7:b5:4b:e9:a0:86:3f:c1:85:6f:71:
e1:68:63:04:d5:0b:7e:9f:3f:db:41:54:f1:d9:ea:
32:f6:e6:8c:1d:c7:a3:14:45:84:c5:0d:05:72:96:
14:dd:13:8b:b8:6a:e9:ba:45:8f:89:6a:9d:16:46:
f0:c4:0a:ca:75:8e:62:25:b7:2d:ef:39:20:d4:77:
1e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:89:93:F3:89:34:33:59:D7:3C:FE:F2:CA:22:6C:B1:77:77:32:F3
X509v3 Authority Key Identifier:
keyid:1B:DC:8A:9C:11:3D:BD:F3:3F:BC:F1:C1:41:B9:4B:BB:7D:70:12:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C02B3/2C8242AEBED211EB9F409076C4F9AE02/G9yKnBE9vfM_vPHBQblLu31wEno.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9yKnBE9vfM_vPHBQblLu31wEno.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C02B3/2C8242AEBED211EB9F409076C4F9AE02/G9yKnBE9vfM_vPHBQblLu31wEno.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:23:6a:21:af:e7:95:f6:5e:99:17:2f:a5:4b:f6:7e:3d:b3:
c0:16:e9:c4:e2:73:c2:c0:6a:c4:c6:87:0b:74:38:15:a9:ae:
4b:bf:1c:52:3d:b7:b5:23:bb:6f:5a:63:3b:a4:37:e0:41:c1:
12:2b:f6:39:8a:e9:1b:87:94:ff:32:39:f7:ce:17:d1:f3:2a:
bc:bc:1d:db:d5:6f:3d:07:46:2b:03:7c:ed:29:ef:33:c2:68:
56:39:b7:ed:da:d6:9c:61:d1:42:7b:53:95:82:e8:fb:d1:6e:
be:51:52:0a:0a:d2:e8:97:ab:34:23:92:40:dc:29:54:58:38:
2b:d5:1b:12:71:ce:18:63:e1:3d:dc:d5:bb:e2:d2:1d:ca:f3:
39:7f:38:35:c0:9f:fc:fa:cd:a0:50:2a:4e:a5:69:a9:a6:9e:
dc:87:4e:c2:3e:7b:1e:10:79:97:13:b4:e3:df:dc:cb:20:d3:
12:57:86:7e:8a:08:f6:66:85:9a:dc:f2:8d:e6:42:5f:12:cf:
35:cf:4a:62:4a:3d:7e:e4:28:d9:d0:86:aa:13:a0:c9:07:4c:
30:1d:1e:cf:3a:5c:34:92:e6:40:b6:41:da:2c:f7:b0:94:ee:
94:d2:9b:9d:54:b7:be:91:24:a8:a0:a2:6a:ff:80:80:20:2a:
5d:87:c4:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:11:19 2026 by rpki-client