
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft
File: Gq0AphpkkECrUmoUK1173uWgHL8.mft (raw, json)
Hash identifier: YeMatW+C/47eW/hbNHdikE1VrU+HseoIk6L/Po6onJI=
Subject key identifier: 4C:97:92:E8:95:25:EA:46:11:AC:F1:BC:9F:14:2E:C7:96:86:F2:8E
Authority key identifier: 1A:AD:00:A6:1A:64:90:40:AB:52:6A:14:2B:5D:7B:DE:E5:A0:1C:BF
Certificate issuer: /CN=A91CCE54/serialNumber=1AAD00A61A649040AB526A142B5D7BDEE5A01CBF
Certificate serial: 06A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft
Manifest number: 0682
Signing time: Sun 20 Sep 2026 22:23:30 +0000
Manifest this update: Sun 20 Sep 2026 22:23:29 +0000
Manifest next update: Sun 27 Sep 2026 22:23:29 +0000
Files and hashes: 1: Gq0AphpkkECrUmoUK1173uWgHL8.crl (hash: IKgrmMYzUDKuvel1JIDrH+JX3xC5SIytkH6oJkyvbo0=)
2: 956B1C7AD81111EB8C3ACC5DC4F9AE02.roa (hash: G6iya46vlEQxXzbvqDbW4DK4nSfKAqlJ0GQSPlu04mw=)
3: B62A6E82D7F511EB82D62F73C4F9AE02.roa (hash: MOXNPP0Z5FDw+7dHenMPVPHPJqhtHn3B3TzOutXmyJQ=)
4: B3394AE0D7F511EB82D62F73C4F9AE02.roa (hash: +b28DC3M8noSBj1HATRUiJdTviNU2GCdVTBihwET6Yg=)
5: 9659D3F6D81111EB8C3ACC5DC4F9AE02.roa (hash: /lzYlyTLMVfaGt+Jef9OOqRfUsRdfvmKL6qV7+rtCAM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.crl
rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 22:23:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1705 (0x6a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCE54, serialNumber=1AAD00A61A649040AB526A142B5D7BDEE5A01CBF
Validity
Not Before: Sep 20 22:23:29 2026 GMT
Not After : Sep 27 22:23:29 2026 GMT
Subject: CN=6ab05ce2-b768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:85:f3:ad:c6:ef:47:7e:d9:47:25:d9:07:d6:
7f:a6:07:96:16:c4:b9:c5:76:3b:9d:81:89:75:c3:
72:61:4d:ac:b8:18:18:cf:b8:29:3c:82:8b:5a:02:
aa:e7:5a:03:9e:d6:07:e7:e9:bb:78:44:07:19:85:
9a:f9:c9:89:5b:a9:a2:2b:f2:9d:d2:32:35:cd:c6:
31:7c:87:7d:6a:6f:35:de:cd:94:58:9b:84:45:50:
5d:f1:e6:bd:44:07:33:ad:43:7f:85:d2:18:c1:4a:
63:e8:89:89:de:80:f1:d7:d0:08:1a:3c:24:0b:28:
e6:fa:ed:31:8a:49:a9:32:fb:f5:e6:65:52:c7:49:
2e:f1:91:c3:3f:7e:6f:bd:4c:28:00:b3:7e:d9:5e:
fb:3f:43:d8:d3:1a:06:b1:cb:a0:9d:84:06:93:4a:
77:8d:c0:8b:b9:f4:16:9f:5a:7a:f1:32:74:52:9b:
c1:39:36:f6:52:2f:c7:a0:15:64:ba:6e:ae:70:2c:
c8:d2:16:05:b7:9c:92:a1:cc:2c:03:6d:c9:8b:6c:
98:24:fb:b4:f6:36:53:83:33:79:4b:4a:fa:29:ea:
91:24:67:67:82:f9:cc:cb:da:72:ed:f3:9c:67:f4:
74:a4:36:41:60:e9:03:e4:de:4c:3b:e6:0b:dd:86:
ce:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:97:92:E8:95:25:EA:46:11:AC:F1:BC:9F:14:2E:C7:96:86:F2:8E
X509v3 Authority Key Identifier:
keyid:1A:AD:00:A6:1A:64:90:40:AB:52:6A:14:2B:5D:7B:DE:E5:A0:1C:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:73:74:ca:47:12:69:e1:65:f3:48:87:c8:a4:20:4b:ad:8c:
9e:91:27:4e:fb:9d:f4:ec:04:da:36:2a:32:57:3d:ce:23:69:
68:3b:8c:d5:ea:8e:8d:bc:e6:6b:fe:9c:09:63:14:75:0b:60:
74:c6:96:f2:44:9a:f1:35:c1:54:cb:4c:40:3a:9b:92:ac:2b:
d8:a6:bd:79:b7:3e:32:74:00:18:95:f9:b6:84:7d:1f:0b:69:
15:e9:19:97:7f:93:b8:7d:eb:84:d1:28:17:f1:cc:76:ae:f4:
04:ec:cc:13:56:13:37:8b:95:db:f7:d8:86:62:da:95:eb:81:
f7:f7:a1:c7:cb:4c:ea:d3:3d:b5:59:c5:8c:d9:4c:a2:82:f5:
2b:1b:cb:54:87:f9:95:f8:95:c4:34:c2:5c:ed:59:8f:49:23:
7c:8e:a8:22:44:9d:fb:b5:9f:bc:9c:e3:bb:9d:df:09:88:4a:
64:96:9a:45:ab:d3:61:a0:02:80:e0:19:4f:68:f6:e5:aa:63:
fa:07:6d:34:6d:f9:97:d8:b8:d8:96:bb:c9:63:51:d0:98:13:
00:b5:c2:12:f7:39:a8:4c:56:20:50:5c:59:71:01:91:0d:ae:
67:35:bd:eb:cd:70:e9:51:b0:8e:c6:51:3f:98:3b:65:0d:21:
bf:9f:7c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:53:40 2026 by rpki-client