
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.mft
File: gsoQTcXyr_Uz-_aM8pj0D71IHwQ.mft (raw, json)
Hash identifier: F1DIO78q2sV3ugpC0wYI/wPJC7lSk0Ctzb9Srq1o7bA=
Subject key identifier: 30:01:7F:C4:B9:6F:90:27:82:45:7A:A7:13:65:A4:B4:23:C8:2B:66
Authority key identifier: 82:CA:10:4D:C5:F2:AF:F5:33:FB:F6:8C:F2:98:F4:0F:BD:48:1F:04
Certificate issuer: /CN=A91EA0F7/serialNumber=82CA104DC5F2AFF533FBF68CF298F40FBD481F04
Certificate serial: 010C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.mft
Manifest number: F4
Signing time: Sat 19 Sep 2026 06:48:28 +0000
Manifest this update: Sat 19 Sep 2026 06:48:27 +0000
Manifest next update: Sat 26 Sep 2026 06:48:27 +0000
Files and hashes: 1: gsoQTcXyr_Uz-_aM8pj0D71IHwQ.crl (hash: 0uAVyt8JQv87ZAATiVxQWNq0UZ6R9H9FXOOlkc/SbSE=)
2: EC5F60DE06AD11F1867726090C3D8C67.roa (hash: VTpoI2guLq437kVCDfWE+6xBdUMZG9YGPiTEp6Ng2tk=)
3: kPpcLrhT2ICXz0GPJgGOWg80xys.asa (hash: fnTKIGAKJuSqtnpuMZClfY6oNwsx/JyXbMCeYU2jlJs=)
4: D9D5455006AD11F1A15422A90B3D8C67.roa (hash: dDJLmsT6mCgZl2ards1bhCoMOym6cbSGTZ2B9OcwQzE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.crl
rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 268 (0x10c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA0F7, serialNumber=82CA104DC5F2AFF533FBF68CF298F40FBD481F04
Validity
Not Before: Sep 19 06:48:27 2026 GMT
Not After : Sep 26 06:48:27 2026 GMT
Subject: CN=6aae303c-ad70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:49:09:26:3d:22:e3:6d:49:f2:18:f0:35:13:
ce:79:26:9b:7a:8f:85:7c:75:2c:de:68:12:ba:49:
4c:79:e2:4e:ea:96:05:09:7a:cd:f7:ad:f3:47:ef:
67:7d:ad:5d:68:c4:73:db:58:54:15:a8:6a:37:2d:
a5:3d:e8:d6:67:e5:67:6d:65:a6:8a:9a:7a:e0:80:
36:08:21:72:cd:cf:3e:8e:10:ac:15:96:ce:52:87:
08:1b:00:9f:61:b5:89:1b:0e:92:84:48:21:34:10:
83:55:8d:bd:21:7d:fb:c5:57:2a:3d:fc:ec:50:ad:
10:41:98:db:dd:46:28:6d:2b:25:9e:4d:28:49:9f:
c0:26:ff:75:a4:9d:99:de:0b:21:9d:c2:fd:2d:38:
2d:20:14:72:60:f1:0a:3a:69:37:35:e8:cf:1f:38:
d3:65:c6:97:a2:ca:df:03:ea:50:79:08:3a:c6:a8:
99:59:b2:69:ff:d8:24:1b:34:4c:20:90:85:3b:d9:
33:ef:ac:e2:2c:d7:e8:20:8c:bc:48:5d:b5:15:aa:
6d:56:dc:38:ef:92:c7:ea:fb:b3:92:7a:26:54:32:
9b:7d:fb:5f:42:9e:c2:31:c3:33:00:52:4a:60:96:
85:b8:23:ab:fe:3d:be:e3:f4:56:9a:8b:81:e5:d5:
f1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:01:7F:C4:B9:6F:90:27:82:45:7A:A7:13:65:A4:B4:23:C8:2B:66
X509v3 Authority Key Identifier:
keyid:82:CA:10:4D:C5:F2:AF:F5:33:FB:F6:8C:F2:98:F4:0F:BD:48:1F:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
dd:76:63:98:66:0e:29:07:0c:72:b0:4f:4f:c3:f4:71:a3:a4:
3c:55:d0:55:1c:2f:8a:8b:ed:e9:94:77:5f:34:08:c6:f6:80:
57:c6:2d:8e:e6:3c:75:f6:18:78:bf:d3:c5:af:8d:9f:62:ac:
c0:4e:46:5a:86:ad:11:25:c8:2a:ff:2b:90:70:11:00:2e:a0:
6a:ab:61:49:d8:08:2e:60:02:40:87:f4:74:77:3f:21:22:7b:
16:fb:ba:5a:dc:eb:1e:69:96:dc:1f:b6:db:0e:9f:b2:a8:c6:
1e:bc:95:b0:ff:74:65:cf:1e:30:09:81:c5:1f:4d:fc:a0:9d:
9b:ce:b2:de:9e:23:38:fc:36:88:b8:5b:86:f9:3f:dd:bf:25:
83:eb:b8:5c:76:c1:cd:39:01:35:40:97:7d:8f:c6:cf:83:81:
10:10:0e:c0:0a:7c:02:e3:92:da:a6:c4:72:8e:d6:e3:8c:06:
0d:86:4c:c0:f3:49:c0:e4:d7:90:5f:a7:ee:db:78:7a:e5:7d:
9e:d2:21:43:07:1b:42:a8:95:49:26:39:ba:c4:f1:49:07:cf:
cc:db:11:85:8c:be:2b:5d:c0:cb:5a:56:cb:65:73:22:f8:8b:
3a:93:99:f2:c0:1b:86:39:94:24:47:c6:62:d8:32:29:c9:6b:
6a:37:5e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:51:47 2026 by rpki-client