
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
File: G1Zt71944xm_wNFADedV4mSoK7w.mft (raw, json)
Hash identifier: LO5ZdPyz+3dBHfCF8NDzSFFHXw7yzPpfkkMWFECal40=
Subject key identifier: 57:AF:0B:D5:7D:0E:EE:06:60:B7:D8:73:0F:B9:DD:CE:25:B4:87:5A
Authority key identifier: 1B:56:6D:EF:5F:78:E3:19:BF:C0:D1:40:0D:E7:55:E2:64:A8:2B:BC
Certificate issuer: /CN=A91C20AB/serialNumber=1B566DEF5F78E319BFC0D1400DE755E264A82BBC
Certificate serial: 09CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
Manifest number: 09B1
Signing time: Tue 28 Jul 2026 20:17:29 +0000
Manifest this update: Tue 28 Jul 2026 20:17:29 +0000
Manifest next update: Tue 04 Aug 2026 20:17:29 +0000
Files and hashes: 1: G1Zt71944xm_wNFADedV4mSoK7w.crl (hash: w9YrdHO/BjdqRKuUlUlyeBliD/le62ivAvOxhYsg54k=)
2: AB659244056211EBAE3DBC4CC4F9AE02.roa (hash: 6SFxnAYtEmDY0FSpqWSl0msvr8nqW/ZhQvTYvJBPZWo=)
3: 2979BC38B09411EAA964465EC4F9AE02.roa (hash: 3TgfJcKtVv25yE8b/IOKhDazNbjHxuANTNvhbFUhyMk=)
4: 28D36892B09411EAA964465EC4F9AE02.roa (hash: uB90XoJd0h+ZsfjSZb2jo0kKEK2zlo/T12QD2KhR6to=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.crl
rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 20:17:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2508 (0x9cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C20AB, serialNumber=1B566DEF5F78E319BFC0D1400DE755E264A82BBC
Validity
Not Before: Jul 28 20:17:29 2026 GMT
Not After : Aug 4 20:17:29 2026 GMT
Subject: CN=6a690e59-c999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4d:3a:20:b7:60:8f:19:a3:10:fa:aa:03:f3:
cf:24:c5:d2:5c:51:39:6c:a9:e5:2c:8f:75:5e:f8:
0c:1b:51:2a:25:fa:6e:ef:dd:16:a2:81:57:28:92:
60:b5:f0:a1:04:3e:c6:70:00:b8:a2:42:34:d0:86:
6a:c6:0e:03:4c:4d:92:d9:98:ec:1e:bd:e3:21:16:
f2:5c:00:62:bc:4e:ac:82:aa:10:0e:e5:ff:db:d8:
34:86:9e:ff:62:b2:d0:04:02:90:35:98:41:ca:3c:
df:12:ca:21:82:a1:9f:f6:2a:a5:aa:7e:7a:22:79:
99:a3:0f:d8:6a:65:2c:46:2d:7b:b3:04:2d:f3:8e:
a9:45:61:ac:e7:2f:09:3c:5f:83:ac:b8:c9:ad:41:
31:dd:55:72:d7:a0:c3:b0:33:ab:a0:15:5b:21:72:
91:fc:ce:32:8a:38:7d:1a:64:c8:e7:c6:a8:4e:42:
8d:5d:52:55:06:cd:7d:68:16:14:41:cc:bd:55:49:
29:c4:da:81:8d:02:b2:1f:bb:9d:09:21:5c:5e:be:
16:b6:77:68:3e:c3:c2:2c:5d:f6:38:3f:86:90:f7:
2f:0e:3e:4a:07:c1:c3:14:86:77:fd:c4:3e:79:79:
91:a8:d2:cc:d2:e6:14:d2:d9:dd:77:fa:ff:fd:ff:
9f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:AF:0B:D5:7D:0E:EE:06:60:B7:D8:73:0F:B9:DD:CE:25:B4:87:5A
X509v3 Authority Key Identifier:
keyid:1B:56:6D:EF:5F:78:E3:19:BF:C0:D1:40:0D:E7:55:E2:64:A8:2B:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:9a:35:ad:53:ad:54:3c:24:7a:df:78:12:f6:56:58:9b:e5:
56:ce:1d:f7:22:b7:f2:78:7f:61:8b:bd:6d:ec:45:e2:84:dc:
7b:11:05:12:b1:eb:ef:28:4b:67:bb:1c:15:5c:c3:9c:55:54:
88:f3:4f:2e:d7:f3:a3:53:f8:fb:7a:c9:e6:69:90:f9:fb:fe:
28:62:8d:c0:08:54:2f:8c:b0:07:f0:97:1a:0f:d6:4a:ce:98:
f4:8b:49:d6:29:55:ef:84:02:2b:70:9b:1b:17:dc:bd:1f:4d:
fe:40:8c:15:7d:cc:2b:05:c0:b8:b4:5c:da:c3:aa:22:23:ca:
ec:ec:68:d8:2d:80:12:37:e8:a9:59:cc:63:5c:89:37:d5:ce:
9a:2b:9e:cb:36:00:32:0d:7a:66:fa:55:a1:43:bc:2a:f3:13:
05:2d:84:0b:58:84:b1:96:d7:cc:d3:2f:0e:59:cf:37:4f:85:
0d:2b:98:52:ff:44:8a:35:4d:a8:bb:4f:9c:2f:85:38:d0:bd:
34:f3:53:0d:07:70:d8:fe:f5:b4:b4:1b:66:6c:69:90:32:02:
c3:4f:77:5a:01:90:af:78:cd:49:ea:38:8d:db:d9:bc:90:f5:
56:cd:3b:5a:11:2f:6a:a8:36:0f:59:3e:d7:a1:30:b9:a8:61:
92:0e:7d:27
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzIwQUIxMTAvBgNVBAUTKDFCNTY2REVGNUY3OEUzMTlCRkMwRDE0MDBERTc1NUUy
NjRBODJCQkMwHhcNMjYwNzI4MjAxNzI5WhcNMjYwODA0MjAxNzI5WjAYMRYwFAYD
VQQDEw02YTY5MGU1OS1jOTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxU06ILdgjxmjEPqqA/PPJMXSXFE5bKnlLI91XvgMG1EqJfpu790WooFXKJJg
tfChBD7GcAC4okI00IZqxg4DTE2S2ZjsHr3jIRbyXABivE6sgqoQDuX/29g0hp7/
YrLQBAKQNZhByjzfEsohgqGf9iqlqn56InmZow/YamUsRi17swQt846pRWGs5y8J
PF+DrLjJrUEx3VVy16DDsDOroBVbIXKR/M4yijh9GmTI58aoTkKNXVJVBs19aBYU
Qcy9VUkpxNqBjQKyH7udCSFcXr4WtndoPsPCLF32OD+GkPcvDj5KB8HDFIZ3/cQ+
eXmRqNLM0uYU0tndd/r//f+fqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFevC9V9
Du4GYLfYcw+53c4ltIdaMB8GA1UdIwQYMBaAFBtWbe9feOMZv8DRQA3nVeJkqCu8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjBBQi82QkU1NTBCMEIw
OTMxMUVBOEFGMzE3NUVDNEY5QUUwMi9HMVp0NzE5NDR4bV93TkZBRGVkVjRtU29L
N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0cxWnQ3MTk0NHhtX3dORkFEZWRWNG1Tb0s3dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MjBBQi82QkU1NTBCMEIwOTMxMUVBOEFGMzE3NUVDNEY5QUUwMi9HMVp0NzE5NDR4
bV93TkZBRGVkVjRtU29LN3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXpo1rVOtVDwket94EvZWWJvlVs4d9yK38nh/YYu9bexF4oTcexEFErHr7yhL
Z7scFVzDnFVUiPNPLtfzo1P4+3rJ5mmQ+fv+KGKNwAhUL4ywB/CXGg/WSs6Y9ItJ
1ilV74QCK3CbGxfcvR9N/kCMFX3MKwXAuLRc2sOqIiPK7Oxo2C2AEjfoqVnMY1yJ
N9XOmiueyzYAMg16ZvpVoUO8KvMTBS2EC1iEsZbXzNMvDlnPN0+FDSuYUv9EijVN
qLtPnC+FONC9NPNTDQdw2P71tLQbZmxpkDICw093WgGQr3jNSeo4jdvZvJD1Vs07
WhEvaqg2D1k+16Ewuahhkg59Jw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:56:15 2026 by rpki-client