
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.mft
File: Gg0L-hkZEfhVtbq9-gO5wH_dIoI.mft (raw, json)
Hash identifier: f8uJfOwM+jkB428MtjGKQ8h9Qm32fBBg6zjy9nC8rEo=
Subject key identifier: 37:48:22:AE:E9:48:D7:17:49:B2:2C:A1:5A:26:99:E9:65:10:3E:0F
Authority key identifier: 1A:0D:0B:FA:19:19:11:F8:55:B5:BA:BD:FA:03:B9:C0:7F:DD:22:82
Certificate issuer: /CN=A91D3834/serialNumber=1A0D0BFA191911F855B5BABDFA03B9C07FDD2282
Certificate serial: 0835
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.mft
Manifest number: 081F
Signing time: Sun 20 Sep 2026 21:06:58 +0000
Manifest this update: Sun 20 Sep 2026 21:06:57 +0000
Manifest next update: Sun 27 Sep 2026 21:06:57 +0000
Files and hashes: 1: Gg0L-hkZEfhVtbq9-gO5wH_dIoI.crl (hash: 8tU2UxrG9rTbpQR7IPB0q9uPfqTO6YQi4f3ffDQNy7s=)
2: F26505A6A7EA11EF8CBCCF2CC4F9AE02.roa (hash: gFpOQJ7daM5uiSgk6tlT5tpNz4O4jsVXIh/45TS6lk4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.crl
rsync://rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 21:06:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2101 (0x835)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3834, serialNumber=1A0D0BFA191911F855B5BABDFA03B9C07FDD2282
Validity
Not Before: Sep 20 21:06:57 2026 GMT
Not After : Sep 27 21:06:57 2026 GMT
Subject: CN=6ab04af2-f2d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ca:96:20:50:9b:23:33:3a:34:72:3c:bd:ee:
e6:a2:16:27:d3:49:3d:73:ed:cd:60:bb:df:95:b4:
fb:5e:8e:ca:df:0f:1e:84:6f:d1:35:c2:8e:c5:55:
e0:4c:30:72:e2:5d:53:67:32:1d:de:13:4d:ae:83:
c7:8f:d2:ff:be:57:29:7e:0c:7a:41:14:17:6d:d1:
4c:fa:86:fa:f5:81:1e:ba:a1:89:a7:0e:04:74:92:
0b:99:f0:28:97:18:0a:74:40:16:1a:4d:5c:2d:ff:
34:ee:67:ce:e5:10:b7:2c:46:f0:a5:f1:e9:48:37:
38:96:a4:4a:7f:03:01:e6:be:9a:f8:a6:81:cb:8d:
87:6c:8b:ba:0d:75:88:9e:8f:6a:9d:40:b5:48:9f:
03:03:5e:8f:75:30:56:f1:a0:cf:de:4c:25:b5:82:
b1:d3:48:e3:69:2a:33:a8:ee:de:c8:01:0a:7d:a3:
f9:71:2c:e2:20:d2:5c:3d:91:40:c1:22:15:b2:62:
58:e8:b8:17:d9:6c:f9:20:ef:54:48:1b:fc:84:37:
2e:a7:3f:56:f5:3c:dd:99:af:15:20:37:f0:10:5b:
5a:0a:28:9d:53:e7:bd:ec:d0:60:06:1f:96:ef:7b:
77:cd:98:28:15:b4:cc:5d:66:04:e5:86:c2:03:c4:
57:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:48:22:AE:E9:48:D7:17:49:B2:2C:A1:5A:26:99:E9:65:10:3E:0F
X509v3 Authority Key Identifier:
keyid:1A:0D:0B:FA:19:19:11:F8:55:B5:BA:BD:FA:03:B9:C0:7F:DD:22:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:1c:06:40:4d:fa:ea:f1:82:c6:1c:15:35:cf:25:05:a9:f9:
09:b7:ac:8f:36:5d:cb:17:99:f9:98:9a:69:bc:c8:80:6e:04:
a5:da:65:da:8c:96:84:3b:65:54:47:a5:8e:64:13:42:f2:52:
92:60:fb:58:95:1e:d8:dc:4c:bb:6b:a2:88:19:a2:0a:b7:e0:
9f:bd:a5:c9:a8:2c:5d:b7:ad:80:3c:15:ec:e4:3a:ba:c3:f8:
79:c3:dd:99:62:cb:e1:d3:7c:d9:b2:3a:e2:af:4b:1c:a9:35:
9c:e0:53:3a:71:9a:a0:3e:0b:97:fd:85:30:ec:52:19:ec:5e:
22:c0:36:48:24:74:22:ed:cb:7e:e8:a0:9a:7f:79:8f:54:73:
46:99:33:84:e3:9a:9c:dd:d6:6c:f8:d8:22:22:01:96:03:95:
7b:02:2c:28:5c:65:61:a1:8e:c6:92:d0:5a:25:ba:16:7d:d4:
69:72:6d:cb:c6:f0:7c:63:6d:0f:af:05:b3:91:ec:98:d8:56:
26:8a:85:45:60:8f:59:5a:cf:ca:b1:f4:28:5d:33:cd:65:4f:
64:cc:5b:ba:e4:6a:89:21:72:9f:66:88:f6:ee:86:73:f9:8f:
be:16:f4:28:14:93:00:a5:26:a0:96:12:50:35:c5:9d:01:6e:
dd:01:30:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:51:42 2026 by rpki-client