
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C02B3/2C8242AEBED211EB9F409076C4F9AE02/G9yKnBE9vfM_vPHBQblLu31wEno.mft
File: G9yKnBE9vfM_vPHBQblLu31wEno.mft (raw, json)
Hash identifier: dGgbvnIDR7QMY/3/XOwOJfq8Dwpj6UEEPfKiQptjwi4=
Subject key identifier: B4:48:34:2C:6C:84:97:4B:4F:65:F9:FE:2E:C0:AB:21:B1:48:4D:05
Authority key identifier: 1B:DC:8A:9C:11:3D:BD:F3:3F:BC:F1:C1:41:B9:4B:BB:7D:70:12:7A
Certificate issuer: /CN=A91C02B3/serialNumber=1BDC8A9C113DBDF33FBCF1C141B94BBB7D70127A
Certificate serial: 06CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9yKnBE9vfM_vPHBQblLu31wEno.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C02B3/2C8242AEBED211EB9F409076C4F9AE02/G9yKnBE9vfM_vPHBQblLu31wEno.mft
Manifest number: 06C4
Signing time: Sun 20 Sep 2026 22:14:16 +0000
Manifest this update: Sun 20 Sep 2026 22:14:15 +0000
Manifest next update: Sun 27 Sep 2026 22:14:15 +0000
Files and hashes: 1: G9yKnBE9vfM_vPHBQblLu31wEno.crl (hash: ulj9PArwuG3skBwrjU1h4vtO8v7cXQ3dYlE57WEdBzI=)
2: 7F17B380BED411EBA325CC76C4F9AE02.roa (hash: 9JUpK8Q9kWs1/RuBMledq+AFaWoY8q6Hgv+cHGXLEzo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C02B3/2C8242AEBED211EB9F409076C4F9AE02/G9yKnBE9vfM_vPHBQblLu31wEno.crl
rsync://rpki.apnic.net/member_repository/A91C02B3/2C8242AEBED211EB9F409076C4F9AE02/G9yKnBE9vfM_vPHBQblLu31wEno.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9yKnBE9vfM_vPHBQblLu31wEno.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 22:14:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1740 (0x6cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C02B3, serialNumber=1BDC8A9C113DBDF33FBCF1C141B94BBB7D70127A
Validity
Not Before: Sep 20 22:14:15 2026 GMT
Not After : Sep 27 22:14:15 2026 GMT
Subject: CN=6ab05ab8-bb28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c0:51:2c:1a:8c:7d:1c:a8:1c:25:4d:d4:2d:
50:dc:24:84:7d:15:c7:03:a4:06:25:73:73:3a:61:
0b:28:b8:b5:50:af:a4:e4:b5:38:cd:63:61:eb:74:
dc:57:ae:28:fc:95:61:04:a0:cb:fe:6c:ff:67:a0:
28:ba:fe:8f:e7:c1:bf:39:ea:95:50:61:44:4e:41:
0a:ed:e2:71:5d:72:b1:ae:de:da:d1:49:d7:dd:a0:
4a:c7:ad:c6:85:04:6d:c0:3f:b9:4a:c8:6e:d6:62:
6a:33:78:35:d1:cf:81:9c:25:4d:fc:19:04:3a:56:
c3:3a:39:04:d3:89:57:83:8d:07:25:0f:88:bb:38:
a8:cd:e2:37:7b:ed:88:50:6c:a0:16:bc:8d:6a:48:
43:df:63:08:cb:6c:e0:80:dd:b0:99:4e:6c:94:82:
49:bb:88:b1:69:db:66:9d:bf:09:b3:c7:10:0e:4a:
21:66:19:4b:45:21:cc:35:82:30:13:ff:bd:86:84:
8f:4b:8f:0e:7a:7f:21:29:cc:05:36:95:c1:e3:da:
51:a0:80:92:54:52:66:b5:f6:82:69:d5:d4:7f:d7:
78:20:bc:aa:bb:af:d6:73:13:af:f0:71:a6:59:23:
9a:c2:df:bf:2e:e6:17:4a:b8:51:ed:6b:b6:2e:f6:
31:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:48:34:2C:6C:84:97:4B:4F:65:F9:FE:2E:C0:AB:21:B1:48:4D:05
X509v3 Authority Key Identifier:
keyid:1B:DC:8A:9C:11:3D:BD:F3:3F:BC:F1:C1:41:B9:4B:BB:7D:70:12:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C02B3/2C8242AEBED211EB9F409076C4F9AE02/G9yKnBE9vfM_vPHBQblLu31wEno.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9yKnBE9vfM_vPHBQblLu31wEno.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C02B3/2C8242AEBED211EB9F409076C4F9AE02/G9yKnBE9vfM_vPHBQblLu31wEno.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:dd:a7:6b:d1:a2:d4:2a:66:32:15:46:70:a3:9d:27:37:af:
b6:9f:4f:22:d0:69:e4:c4:d7:69:58:83:61:7d:b1:da:7a:58:
8a:14:fa:b7:0e:b8:c2:c7:17:8e:b5:c3:c6:64:f4:24:e0:02:
d9:b2:5d:76:e3:4e:8c:cc:18:91:25:b2:d5:45:ce:44:7b:10:
86:a2:86:dd:dd:db:a1:8c:47:87:5a:ef:1b:da:81:59:9a:f9:
b5:c0:a0:15:7b:a3:7a:9b:0c:69:cb:fc:c5:43:ac:7c:2c:7f:
b4:53:c6:cf:49:76:42:da:5a:12:62:cd:e1:e7:f8:9f:bb:43:
16:3e:c8:8f:3a:56:82:5a:69:49:0c:37:bc:77:5f:5c:f4:0f:
b0:6b:21:02:6b:7f:1a:4c:7f:11:60:18:48:57:72:7d:b2:41:
89:1e:ed:4b:b4:41:fe:9d:6e:59:01:0c:d9:aa:7d:db:d6:34:
ec:24:fe:4f:5b:7f:b2:b3:ee:43:6a:c1:3e:87:fa:e9:d3:ae:
0a:76:4a:6b:5e:fa:28:a4:5d:ef:e5:31:c5:2f:54:c5:20:86:
65:f4:65:d7:86:d2:33:af:dd:01:31:2f:61:b1:99:bb:8f:27:
9d:c9:22:e0:f2:65:6a:1f:8f:b0:85:b5:39:12:77:cf:5d:30:
16:f8:09:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:06:59 2026 by rpki-client