
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft
File: G0cdrc2RIJM1E26s9syYiChlSyo.mft (raw, json)
Hash identifier: dCkqILje2ang75b15gzl1RHp6YrL432O+00yVHjSCdg=
Subject key identifier: F6:F4:A6:77:DC:57:54:9C:85:18:8B:60:F3:7F:FE:60:7B:75:1A:50
Authority key identifier: 1B:47:1D:AD:CD:91:20:93:35:13:6E:AC:F6:CC:98:88:28:65:4B:2A
Certificate issuer: /CN=A91C9606/serialNumber=1B471DADCD91209335136EACF6CC988828654B2A
Certificate serial: 0E11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft
Manifest number: 0DF4
Signing time: Tue 28 Jul 2026 17:59:12 +0000
Manifest this update: Tue 28 Jul 2026 17:59:11 +0000
Manifest next update: Tue 04 Aug 2026 17:59:11 +0000
Files and hashes: 1: G0cdrc2RIJM1E26s9syYiChlSyo.crl (hash: mkyndQjv9GXBX0ysGwP/zSZ1A3IOV6FfIzGNd8FihU8=)
2: 7A9CD75E23E311F0BB28EA29C4F9AE02.roa (hash: VZEltJw0vEDbOnRvRf9ELAdzaAN+QgrjbGf4Pt5gMhA=)
3: 645EF9CADB9311E988E56C33C4F9AE02.roa (hash: giSaWoz0kPjXm5QgA1jXt8OZKatJUwxEOdzcbQiRQwI=)
4: 06370CB2DB9211E9B70EDD2EC4F9AE02.roa (hash: QJuobED8AIYNaA07H0l+GwSOVK0e9Xo+0hZGeA9Tr5g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.crl
rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3601 (0xe11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9606, serialNumber=1B471DADCD91209335136EACF6CC988828654B2A
Validity
Not Before: Jul 28 17:59:11 2026 GMT
Not After : Aug 4 17:59:11 2026 GMT
Subject: CN=6a68edef-0b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:77:62:56:87:ca:f0:ea:f1:c6:4e:38:f4:e7:
cc:80:4e:96:a6:1c:28:08:94:1c:92:e1:c8:fe:91:
d3:db:6a:5a:b1:d8:b4:a9:09:58:c0:ca:60:bb:46:
df:a4:2b:ee:7d:15:14:12:d2:bb:aa:0d:44:ae:ee:
bf:c7:ef:72:df:aa:94:e7:61:41:e8:6d:cd:dd:f5:
eb:5d:ef:d9:97:8d:d6:46:77:75:85:e6:84:8a:5a:
0a:c0:95:6f:bb:e1:2c:cb:58:03:28:fd:2a:0a:1c:
59:49:ff:af:2b:d4:9b:93:52:a4:8a:70:3d:6c:98:
c9:4e:08:6a:67:a1:92:16:a9:0a:66:2a:9f:70:14:
12:ef:4f:ac:83:35:24:8f:68:87:28:90:95:77:1c:
bd:7f:2d:5e:c9:83:d1:bb:ab:96:b3:fd:1d:75:de:
a0:38:2f:7e:ed:5c:cb:9a:8d:04:40:9b:0d:40:f1:
1b:0c:d7:a2:54:59:43:1c:a4:28:73:f6:ca:59:3f:
d0:8b:77:84:05:32:29:c9:ed:a6:41:1e:db:87:7b:
d7:14:7d:5c:64:8f:2c:97:62:6e:90:da:9f:b1:58:
e4:ba:81:7d:24:d3:71:b7:c1:7c:9c:3c:90:d2:c8:
fb:9a:93:01:59:40:fd:54:4b:37:c1:f6:15:b6:3b:
bf:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F4:A6:77:DC:57:54:9C:85:18:8B:60:F3:7F:FE:60:7B:75:1A:50
X509v3 Authority Key Identifier:
keyid:1B:47:1D:AD:CD:91:20:93:35:13:6E:AC:F6:CC:98:88:28:65:4B:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:7e:68:a4:60:b9:f3:6e:6b:68:72:a9:8a:58:88:fa:69:22:
ea:c4:3b:dc:2f:69:b8:89:ce:f1:7b:13:33:33:0a:b1:4e:2c:
88:1a:dd:f8:7e:a6:1b:79:81:c2:d9:b1:d4:7b:12:c5:70:ee:
8f:7a:5d:63:7f:dc:d2:b9:19:90:a6:03:f4:c3:21:95:2c:74:
e1:64:02:7b:00:39:fa:6e:7d:69:3e:38:8e:33:57:9f:2d:85:
68:0e:28:a1:2a:25:b0:1a:b8:59:fa:6b:39:35:bd:af:eb:07:
80:67:37:88:9c:69:6b:93:94:d9:9b:ed:7f:4c:17:31:92:19:
e4:9d:ea:61:07:a6:1d:e9:6e:a3:36:a4:5e:0c:97:ad:f9:08:
27:4c:81:81:9b:ac:00:8b:10:7d:55:2d:dd:ee:7b:9f:f1:06:
6a:c3:f5:e0:30:68:85:97:06:eb:ff:f4:80:28:b5:65:a8:b8:
21:dc:fc:7a:41:73:38:68:17:6b:eb:4e:e6:7b:41:00:97:30:
a7:b8:77:ef:8e:f4:84:22:4e:35:ac:2f:e7:20:08:00:60:90:
36:d1:af:92:ce:b4:43:90:7a:21:87:04:47:d6:ed:79:0a:ce:
2c:87:7f:07:b9:23:1e:67:db:04:e9:99:8b:7a:ab:ec:c5:12:
c8:45:79:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:42:10 2026 by rpki-client