
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C02B3/2C8242AEBED211EB9F409076C4F9AE02/G9yKnBE9vfM_vPHBQblLu31wEno.mft
File: G9yKnBE9vfM_vPHBQblLu31wEno.mft (raw, json)
Hash identifier: N+opuZZIlZaJ55iH3jFHC+Tfv1hsKBrToizKXUH3XBQ=
Subject key identifier: 8A:F3:A3:43:1C:0E:7A:C4:AE:70:23:AA:56:15:8F:C4:4E:87:03:13
Authority key identifier: 1B:DC:8A:9C:11:3D:BD:F3:3F:BC:F1:C1:41:B9:4B:BB:7D:70:12:7A
Certificate issuer: /CN=A91C02B3/serialNumber=1BDC8A9C113DBDF33FBCF1C141B94BBB7D70127A
Certificate serial: 0679
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9yKnBE9vfM_vPHBQblLu31wEno.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C02B3/2C8242AEBED211EB9F409076C4F9AE02/G9yKnBE9vfM_vPHBQblLu31wEno.mft
Manifest number: 0672
Signing time: Thu 16 Apr 2026 22:30:12 +0000
Manifest this update: Thu 16 Apr 2026 22:30:11 +0000
Manifest next update: Thu 23 Apr 2026 22:30:11 +0000
Files and hashes: 1: G9yKnBE9vfM_vPHBQblLu31wEno.crl (hash: qfSgSm3NRB12mFfJvQOomv+8IhEldgMLQ5q0313+iQY=)
2: 7F17B380BED411EBA325CC76C4F9AE02.roa (hash: K2XjwQUcwBjQz3JduuHoPDcdQU/IInU/L9zJSSzQVAQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C02B3/2C8242AEBED211EB9F409076C4F9AE02/G9yKnBE9vfM_vPHBQblLu31wEno.crl
rsync://rpki.apnic.net/member_repository/A91C02B3/2C8242AEBED211EB9F409076C4F9AE02/G9yKnBE9vfM_vPHBQblLu31wEno.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9yKnBE9vfM_vPHBQblLu31wEno.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1657 (0x679)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C02B3, serialNumber=1BDC8A9C113DBDF33FBCF1C141B94BBB7D70127A
Validity
Not Before: Apr 16 22:30:11 2026 GMT
Not After : Apr 23 22:30:11 2026 GMT
Subject: CN=69e162f3-eeee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8a:5e:38:dc:0b:e9:0d:c1:fd:9d:06:23:62:
28:f2:15:34:1a:df:ea:07:3a:f9:49:b2:b3:6b:b0:
5c:f0:47:0d:63:8f:71:b5:08:c1:f4:e4:b8:53:58:
79:e1:5c:77:2a:4a:6c:05:1f:ce:f1:c8:8e:93:b2:
14:be:8f:5a:a3:0d:27:a6:ba:51:38:ef:80:52:5d:
b7:db:66:d6:f4:91:f8:98:d0:20:ec:28:d6:80:d6:
e7:87:f4:05:a6:d5:a3:77:e6:bd:c3:35:7a:c7:cc:
1e:f0:f6:bf:02:bb:09:b3:f1:81:2f:ca:71:c7:b9:
e7:b1:d0:b1:6f:9f:08:aa:39:08:9d:1f:f8:66:4f:
73:df:f1:ac:d9:21:79:63:37:85:9e:68:75:13:90:
5f:cd:9c:97:bb:f6:e9:4d:60:8a:d8:d8:b3:c8:e7:
9d:5f:8a:ca:36:12:9f:08:b3:1a:85:8a:a1:12:9a:
e3:db:5d:66:eb:8f:7b:cb:b9:60:92:8e:4a:e4:44:
ac:46:25:fe:ee:af:94:21:41:6d:64:b3:03:98:06:
1b:da:f5:81:f9:04:87:60:38:02:72:38:9f:70:2c:
f4:af:50:a6:d9:37:a4:77:11:ed:b8:3e:1e:65:13:
cd:91:d8:ec:2d:ee:3e:ff:39:ef:a0:ae:66:ec:85:
eb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F3:A3:43:1C:0E:7A:C4:AE:70:23:AA:56:15:8F:C4:4E:87:03:13
X509v3 Authority Key Identifier:
keyid:1B:DC:8A:9C:11:3D:BD:F3:3F:BC:F1:C1:41:B9:4B:BB:7D:70:12:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C02B3/2C8242AEBED211EB9F409076C4F9AE02/G9yKnBE9vfM_vPHBQblLu31wEno.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9yKnBE9vfM_vPHBQblLu31wEno.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C02B3/2C8242AEBED211EB9F409076C4F9AE02/G9yKnBE9vfM_vPHBQblLu31wEno.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:17:65:4f:e2:be:a5:83:cc:c7:23:cf:6f:98:19:71:ab:e8:
42:35:0f:fe:2f:85:a3:67:f0:3d:29:d1:9c:78:90:9a:cc:20:
b2:4f:a4:57:58:21:cc:14:d3:47:bc:85:08:86:43:8a:2b:0c:
83:d3:12:cb:bf:3d:d7:56:32:06:a4:f0:f3:e7:e9:65:05:12:
37:56:92:16:1e:70:23:c9:f7:b1:c1:a5:cf:4a:14:cb:62:27:
6e:ef:3e:f7:a6:6d:bd:1e:a3:d2:6c:54:cc:ad:53:f7:da:a5:
48:35:b5:7e:47:f8:84:a6:90:e1:19:21:14:bc:ba:bf:92:15:
71:a4:c5:71:f6:0b:a1:5a:c1:c9:2e:64:e3:d0:87:63:10:8b:
f3:6a:38:83:f7:38:82:68:9d:20:50:f9:23:4a:86:78:23:aa:
ab:7b:3d:bd:d6:b3:ae:e5:5e:b0:ca:c5:50:75:38:46:04:52:
e2:4d:37:6f:f0:20:9d:49:a0:55:c3:29:e9:80:4a:0b:90:0f:
3a:d6:0a:b1:61:e9:81:28:3a:3c:d9:67:8a:dd:dd:db:e2:57:
d6:08:ac:15:17:e4:3d:57:d0:56:e0:27:ab:5b:2b:03:f6:07:
0d:e4:0c:3e:c1:2f:d7:a6:e8:82:d0:1c:6f:66:76:a3:af:ae:
4c:c8:bd:9a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzAyQjMxMTAvBgNVBAUTKDFCREM4QTlDMTEzREJERjMzRkJDRjFDMTQxQjk0QkJC
N0Q3MDEyN0EwHhcNMjYwNDE2MjIzMDExWhcNMjYwNDIzMjIzMDExWjAYMRYwFAYD
VQQDEw02OWUxNjJmMy1lZWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzopeONwL6Q3B/Z0GI2Io8hU0Gt/qBzr5SbKza7Bc8EcNY49xtQjB9OS4U1h5
4Vx3KkpsBR/O8ciOk7IUvo9aow0nprpROO+AUl2322bW9JH4mNAg7CjWgNbnh/QF
ptWjd+a9wzV6x8we8Pa/ArsJs/GBL8pxx7nnsdCxb58IqjkInR/4Zk9z3/Gs2SF5
YzeFnmh1E5BfzZyXu/bpTWCK2NizyOedX4rKNhKfCLMahYqhEprj211m6497y7lg
ko5K5ESsRiX+7q+UIUFtZLMDmAYb2vWB+QSHYDgCcjifcCz0r1Cm2TekdxHtuD4e
ZRPNkdjsLe4+/znvoK5m7IXrUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIrzo0Mc
DnrErnAjqlYVj8ROhwMTMB8GA1UdIwQYMBaAFBvcipwRPb3zP7zxwUG5S7t9cBJ6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDJCMy8yQzgyNDJBRUJF
RDIxMUVCOUY0MDkwNzZDNEY5QUUwMi9HOXlLbkJFOXZmTV92UEhCUWJsTHUzMXdF
bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0c5eUtuQkU5dmZNX3ZQSEJRYmxMdTMxd0Vuby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MDJCMy8yQzgyNDJBRUJFRDIxMUVCOUY0MDkwNzZDNEY5QUUwMi9HOXlLbkJFOXZm
TV92UEhCUWJsTHUzMXdFbm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhRdlT+K+pYPMxyPPb5gZcavoQjUP/i+Fo2fwPSnRnHiQmswgsk+kV1ghzBTT
R7yFCIZDiisMg9MSy78911YyBqTw8+fpZQUSN1aSFh5wI8n3scGlz0oUy2Inbu8+
96ZtvR6j0mxUzK1T99qlSDW1fkf4hKaQ4RkhFLy6v5IVcaTFcfYLoVrByS5k49CH
YxCL82o4g/c4gmidIFD5I0qGeCOqq3s9vdazruVesMrFUHU4RgRS4k03b/AgnUmg
VcMp6YBKC5APOtYKsWHpgSg6PNlnit3d2+JX1gisFRfkPVfQVuAnq1srA/YHDeQM
PsEv16bogtAcb2Z2o6+uTMi9mg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:36:30 2026 by rpki-client