
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft
File: gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft (raw, json)
Hash identifier: H9kBFOmCkr3VYwSJSfr5CQNl4h6PrDcVM9eKUBW+D/w=
Subject key identifier: 3B:79:AF:0B:78:B2:EE:DC:A7:3D:1F:01:15:DA:01:D9:C1:88:00:52
Authority key identifier: 81:1D:E1:1E:7E:DC:1C:10:76:05:59:EE:B3:9B:FD:66:D6:9A:EA:46
Certificate issuer: /CN=A91E6BEF/serialNumber=811DE11E7EDC1C10760559EEB39BFD66D69AEA46
Certificate serial: 0E9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gR3hHn7cHBB2BVnus5v9Ztaa6kY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft
Manifest number: 0E92
Signing time: Sat 10 Oct 2026 17:45:14 +0000
Manifest this update: Sat 10 Oct 2026 17:45:13 +0000
Manifest next update: Sat 17 Oct 2026 17:45:13 +0000
Files and hashes: 1: gR3hHn7cHBB2BVnus5v9Ztaa6kY.crl (hash: Rp0uv+8AVFLMChzconLqDLITbY+0e5avwhMJbFiT2OQ=)
2: FEBD6C62C4B511E9B7D53A7FC4F9AE02.roa (hash: hq+tKlDXD0cr1+NNnQhRcgkOsx9XsBg1fiLnYmKzsUw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.crl
rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gR3hHn7cHBB2BVnus5v9Ztaa6kY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 17:45:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3743 (0xe9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6BEF, serialNumber=811DE11E7EDC1C10760559EEB39BFD66D69AEA46
Validity
Not Before: Oct 10 17:45:13 2026 GMT
Not After : Oct 17 17:45:13 2026 GMT
Subject: CN=6aca79a9-0dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2f:96:70:e5:8b:a6:32:18:2d:2f:eb:c7:37:
d9:bd:5d:ba:d7:8c:63:51:9c:f4:ce:14:f8:39:27:
42:7a:b5:92:25:16:4b:40:24:6b:d4:b9:12:48:9a:
4f:fa:9d:74:82:41:69:a0:ae:35:88:70:13:01:51:
a9:ca:8b:4f:70:16:b3:13:94:ca:04:a2:32:05:38:
14:34:27:67:1b:4c:f3:f4:90:a2:6e:e0:db:bc:36:
7d:2c:e3:71:9b:05:e6:5a:14:f3:59:81:7e:64:51:
97:40:78:dc:f3:14:a4:b9:35:c6:4f:98:e5:de:8a:
0c:d5:74:fb:ad:3a:e9:39:55:8e:9c:f4:fd:35:fa:
14:a2:1c:75:dc:7f:0f:4e:9f:4b:60:9f:fa:36:f4:
90:85:e4:b1:14:6d:b8:29:33:40:d8:9a:7b:16:e0:
a9:d3:ea:2a:09:6c:e3:7d:af:55:36:98:b9:c7:80:
83:8c:2f:86:90:ff:41:eb:d4:b1:77:18:ae:68:e4:
b2:65:ce:9c:f6:e0:81:d7:11:f1:b4:d6:6d:1a:d2:
0d:f2:03:c9:78:9f:9d:69:67:c2:f3:95:5b:27:27:
6d:95:19:62:db:0a:18:4c:0f:d9:8f:fb:1f:28:a6:
4c:8e:82:f0:fb:8c:9c:a4:b1:26:32:24:b7:15:02:
5e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:79:AF:0B:78:B2:EE:DC:A7:3D:1F:01:15:DA:01:D9:C1:88:00:52
X509v3 Authority Key Identifier:
keyid:81:1D:E1:1E:7E:DC:1C:10:76:05:59:EE:B3:9B:FD:66:D6:9A:EA:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gR3hHn7cHBB2BVnus5v9Ztaa6kY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:5e:96:57:3d:38:d1:9c:74:90:d8:80:6f:b7:12:6c:be:2a:
e4:5c:80:d1:24:39:81:05:7d:d6:ab:e5:fc:f1:02:ed:6c:4f:
e8:cb:5b:5e:3f:b6:89:c3:e7:44:10:27:fe:10:ff:08:70:a6:
01:b5:6f:a6:69:22:11:36:32:15:83:d8:6e:e9:1c:c1:4d:1c:
cd:ed:38:0d:b0:3d:2f:6c:77:7a:f4:bd:bd:e0:7a:9d:b7:39:
09:58:68:65:16:e1:1a:5a:a0:c1:19:72:71:5a:5c:2c:d7:0e:
66:e1:c3:d7:82:68:fe:b9:14:b3:49:33:3d:5f:ae:96:48:06:
76:bc:9e:a7:5c:33:4d:1a:9a:9e:ad:d8:67:e2:5f:2b:88:6e:
63:f6:56:4e:f7:43:19:ee:75:33:a4:0e:3b:e4:64:99:8c:b8:
5e:20:e9:02:e8:68:c4:9e:4f:ee:a1:d9:37:60:cd:86:b5:7c:
7d:dd:9a:12:ba:23:54:d0:2a:f1:d7:86:a6:8e:91:71:3b:60:
d6:2c:56:01:f5:3f:f5:61:e9:82:1f:d6:ad:30:2d:6e:9c:ca:
dd:b3:43:c4:ec:38:dc:f9:a8:2c:16:ea:27:7b:d4:76:89:97:
7e:03:ad:06:cb:d4:b7:42:73:9c:81:02:20:0c:61:8a:29:31:
e2:c2:1d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:14:08 2026 by rpki-client