
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4D3D/A70A8FEED8B911EBABC1F485C4F9AE02/aGr0G8M9rvgo-rSuSjoNWHutDT8.mft
File: aGr0G8M9rvgo-rSuSjoNWHutDT8.mft (raw, json)
Hash identifier: 0UftObAnKdp/f708flhQVLVnKGdMormIHDFLwDx7qg8=
Subject key identifier: 38:66:E4:E3:02:3F:F9:0C:C1:A0:5A:10:38:4B:87:A0:69:B6:4C:C0
Authority key identifier: 68:6A:F4:1B:C3:3D:AE:F8:28:FA:B4:AE:4A:3A:0D:58:7B:AD:0D:3F
Certificate issuer: /CN=A91E4D3D/serialNumber=686AF41BC33DAEF828FAB4AE4A3A0D587BAD0D3F
Certificate serial: 06A8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aGr0G8M9rvgo-rSuSjoNWHutDT8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4D3D/A70A8FEED8B911EBABC1F485C4F9AE02/aGr0G8M9rvgo-rSuSjoNWHutDT8.mft
Manifest number: 0691
Signing time: Thu 24 Sep 2026 22:24:08 +0000
Manifest this update: Thu 24 Sep 2026 22:24:08 +0000
Manifest next update: Thu 01 Oct 2026 22:24:08 +0000
Files and hashes: 1: aGr0G8M9rvgo-rSuSjoNWHutDT8.crl (hash: 12PeN8cSBWZSnZDb1AWJSEKg6zFxscdPGMfDukPmpGY=)
2: 40310456D8D211EB97FF5586C4F9AE02.roa (hash: ljhzAAAHOEbQtw8/O2WirKoWv6XtLYHxhjuJKY3iiZM=)
3: 63FEB4F8D97411EBB8CC3F40C4F9AE02.roa (hash: GBummmykHnsRNOp2UTZVHW61aelGglaz1bE3tCnWo5M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4D3D/A70A8FEED8B911EBABC1F485C4F9AE02/aGr0G8M9rvgo-rSuSjoNWHutDT8.crl
rsync://rpki.apnic.net/member_repository/A91E4D3D/A70A8FEED8B911EBABC1F485C4F9AE02/aGr0G8M9rvgo-rSuSjoNWHutDT8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aGr0G8M9rvgo-rSuSjoNWHutDT8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 14:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1704 (0x6a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4D3D, serialNumber=686AF41BC33DAEF828FAB4AE4A3A0D587BAD0D3F
Validity
Not Before: Sep 24 22:24:08 2026 GMT
Not After : Oct 1 22:24:08 2026 GMT
Subject: CN=6ab5a308-7e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1d:68:bc:de:ef:2e:d2:a7:7f:a4:3a:77:cd:
c9:b0:d5:f8:0f:97:ac:f9:c2:b8:1f:2b:3d:da:0d:
2b:37:6e:44:24:11:53:70:d8:5e:5b:99:86:46:65:
8c:ab:e6:73:1b:0c:dc:ea:bc:a1:3a:9f:cb:a1:1b:
0e:93:88:e6:72:c2:8d:9e:f6:c8:9f:cc:77:8e:b5:
50:50:93:d1:b5:e8:2a:fe:f5:fe:12:a3:64:10:31:
3c:6d:03:8a:8c:8b:07:bd:0c:59:f5:84:8a:89:35:
5a:90:e8:d6:0e:8b:09:b7:9f:41:0b:30:64:a2:0e:
9b:8c:2b:8f:55:71:26:9d:5b:40:fa:02:a0:a9:6e:
82:5e:8d:e8:71:4c:25:ce:81:bb:a2:d4:9b:0c:b4:
fc:2b:04:30:31:e5:79:47:1e:e8:59:3a:95:b0:cf:
c8:8e:a4:80:03:74:36:53:5d:de:95:7c:58:4f:ec:
8e:6f:68:1f:6c:24:25:86:03:4f:1d:16:6a:9d:5a:
ee:e4:52:68:b6:e6:21:63:71:f9:21:b5:4a:94:b5:
27:98:94:ae:5d:b4:b9:3a:da:09:ee:e7:17:a5:07:
e1:d7:66:20:52:62:f3:57:e9:f6:b2:a2:7b:b5:15:
cd:3d:00:89:a8:3d:a2:93:ca:c7:70:26:df:cf:3b:
9d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:66:E4:E3:02:3F:F9:0C:C1:A0:5A:10:38:4B:87:A0:69:B6:4C:C0
X509v3 Authority Key Identifier:
keyid:68:6A:F4:1B:C3:3D:AE:F8:28:FA:B4:AE:4A:3A:0D:58:7B:AD:0D:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4D3D/A70A8FEED8B911EBABC1F485C4F9AE02/aGr0G8M9rvgo-rSuSjoNWHutDT8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aGr0G8M9rvgo-rSuSjoNWHutDT8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4D3D/A70A8FEED8B911EBABC1F485C4F9AE02/aGr0G8M9rvgo-rSuSjoNWHutDT8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:62:37:28:1b:28:42:79:e9:c3:c3:ce:1b:20:38:56:89:2a:
59:fe:56:b1:b9:d7:e6:4a:93:75:0d:9b:be:e2:19:65:d4:a3:
5d:2a:b5:35:7f:de:db:80:31:97:4d:ee:2c:03:33:8e:a4:20:
91:a1:a4:f0:4b:9e:ac:50:80:55:55:cf:e4:93:75:9b:b2:a1:
1c:d6:74:7b:08:d5:72:52:2a:86:1d:89:bf:c8:e3:d3:6d:9a:
c0:d8:cc:16:0a:f8:d8:01:82:6c:8c:04:1a:ce:f5:78:3e:0f:
68:6a:86:40:7b:d9:5c:d0:6a:ae:b0:fa:d6:93:b8:1b:fe:7c:
bc:61:86:93:c0:2c:58:b8:e3:85:77:a9:73:82:b2:9b:8a:56:
3e:ad:11:28:53:4f:b8:d5:66:dd:2d:4a:13:71:4a:be:4c:91:
fb:ec:44:22:a1:a8:d7:4a:db:9e:b4:9b:86:51:75:02:78:3c:
30:65:de:07:ca:f3:b1:43:ca:b5:ce:ab:0e:61:c8:64:e0:25:
5b:ce:4a:7a:1e:e3:79:ae:23:18:df:ca:37:76:e2:28:84:5f:
ed:07:3c:5f:11:69:e5:8e:f0:e7:db:bf:a6:6e:62:50:44:01:
c1:52:1b:0a:42:b1:5e:2b:64:c2:76:41:26:e0:29:bc:2b:de:
bd:b6:ae:8c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTREM0QxMTAvBgNVBAUTKDY4NkFGNDFCQzMzREFFRjgyOEZBQjRBRTRBM0EwRDU4
N0JBRDBEM0YwHhcNMjYwOTI0MjIyNDA4WhcNMjYxMDAxMjIyNDA4WjAYMRYwFAYD
VQQDEw02YWI1YTMwOC03ZTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqx1ovN7vLtKnf6Q6d83JsNX4D5es+cK4Hys92g0rN25EJBFTcNheW5mGRmWM
q+ZzGwzc6ryhOp/LoRsOk4jmcsKNnvbIn8x3jrVQUJPRtegq/vX+EqNkEDE8bQOK
jIsHvQxZ9YSKiTVakOjWDosJt59BCzBkog6bjCuPVXEmnVtA+gKgqW6CXo3ocUwl
zoG7otSbDLT8KwQwMeV5Rx7oWTqVsM/IjqSAA3Q2U13elXxYT+yOb2gfbCQlhgNP
HRZqnVru5FJotuYhY3H5IbVKlLUnmJSuXbS5OtoJ7ucXpQfh12YgUmLzV+n2sqJ7
tRXNPQCJqD2ik8rHcCbfzzudXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDhm5OMC
P/kMwaBaEDhLh6BptkzAMB8GA1UdIwQYMBaAFGhq9BvDPa74KPq0rko6DVh7rQ0/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEQzRC9BNzBBOEZFRUQ4
QjkxMUVCQUJDMUY0ODVDNEY5QUUwMi9hR3IwRzhNOXJ2Z28tclN1U2pvTldIdXRE
VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2FHcjBHOE05cnZnby1yU3VTam9OV0h1dERUOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NEQzRC9BNzBBOEZFRUQ4QjkxMUVCQUJDMUY0ODVDNEY5QUUwMi9hR3IwRzhNOXJ2
Z28tclN1U2pvTldIdXREVDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcmI3KBsoQnnpw8POGyA4VokqWf5WsbnX5kqTdQ2bvuIZZdSjXSq1NX/e24Ax
l03uLAMzjqQgkaGk8EuerFCAVVXP5JN1m7KhHNZ0ewjVclIqhh2Jv8jj022awNjM
Fgr42AGCbIwEGs71eD4PaGqGQHvZXNBqrrD61pO4G/58vGGGk8AsWLjjhXepc4Ky
m4pWPq0RKFNPuNVm3S1KE3FKvkyR++xEIqGo10rbnrSbhlF1Ang8MGXeB8rzsUPK
tc6rDmHIZOAlW85Keh7jea4jGN/KN3biKIRf7Qc8XxFp5Y7w59u/pm5iUEQBwVIb
CkKxXitkwnZBJuApvCvevbaujA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 00:17:28 2026 by rpki-client