
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft
File: g3nXR_dKVe3HOg4EIcebXsDk3nY.mft (raw, json)
Hash identifier: J58SLoHlzGHihCa1xovQYiv6W4DIJTg7r57hxzhLcnk=
Subject key identifier: 6F:1F:33:7F:BD:52:6C:F6:4F:A1:F7:C1:B8:2B:E9:AB:31:12:CC:A7
Authority key identifier: 83:79:D7:47:F7:4A:55:ED:C7:3A:0E:04:21:C7:9B:5E:C0:E4:DE:76
Certificate issuer: /CN=A91F9C42/serialNumber=8379D747F74A55EDC73A0E0421C79B5EC0E4DE76
Certificate serial: 0255
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft
Manifest number: 0245
Signing time: Wed 29 Jul 2026 03:35:19 +0000
Manifest this update: Wed 29 Jul 2026 03:35:19 +0000
Manifest next update: Wed 05 Aug 2026 03:35:19 +0000
Files and hashes: 1: g3nXR_dKVe3HOg4EIcebXsDk3nY.crl (hash: ufpx6szJubr9k68xCZx0aX36dauJnaQ+R5+QjxD5IIM=)
2: 79FC546E326611F08478D72AC4F9AE02.roa (hash: mp6UKxB2b1zXxB5aLbTsGKHkEwH64+Ff1FghIf0l4Tc=)
3: 3A7527ECC1F711EF8B510B86C4F9AE02.roa (hash: GIPpL/Qhb4Qtf8Jweh0Fb+71Qryjl3QLZMDyDcTBZeo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.crl
rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 03:35:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 597 (0x255)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9C42, serialNumber=8379D747F74A55EDC73A0E0421C79B5EC0E4DE76
Validity
Not Before: Jul 29 03:35:19 2026 GMT
Not After : Aug 5 03:35:19 2026 GMT
Subject: CN=6a6974f7-0532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ac:21:f2:8f:39:23:2e:f9:1b:d8:57:4b:8c:
ef:64:65:b5:7b:b3:37:9a:12:93:9f:df:6a:f9:96:
80:9d:87:9a:7b:17:0c:53:c5:58:68:9f:57:8e:01:
7e:9d:15:fb:9f:50:2d:30:12:00:39:e5:3e:d9:85:
45:84:38:f0:03:c2:b5:10:31:b0:61:c9:b7:c0:7f:
d5:01:33:c2:bc:ad:bd:e9:e4:09:92:87:fe:ea:34:
b6:b6:84:cf:20:1a:4a:2c:74:85:5c:58:7c:0b:66:
e7:18:b2:95:51:1e:dd:af:24:f7:34:0d:88:d9:91:
7a:3b:f8:fb:d7:94:f8:f0:33:44:1d:88:04:25:20:
ca:01:d2:26:1f:8f:a2:0f:48:ec:63:81:6d:83:9b:
f7:69:d3:bd:2d:78:c4:4d:cd:10:b4:0b:48:19:97:
bf:9d:bb:b1:92:c4:0d:10:0d:6f:15:db:06:20:12:
3d:59:72:96:3f:f8:b8:71:de:68:5a:cf:c0:42:b5:
d5:92:69:fc:b8:a5:30:f8:d5:6c:cf:4f:55:d7:32:
a1:4a:57:e3:ca:24:09:32:f4:fb:3f:8f:bf:9d:8a:
cc:20:26:04:18:33:11:4a:b6:db:1f:16:ff:4c:9a:
9a:7f:89:a2:09:53:68:3c:bb:3a:97:90:01:68:f0:
cf:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:1F:33:7F:BD:52:6C:F6:4F:A1:F7:C1:B8:2B:E9:AB:31:12:CC:A7
X509v3 Authority Key Identifier:
keyid:83:79:D7:47:F7:4A:55:ED:C7:3A:0E:04:21:C7:9B:5E:C0:E4:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ca:c9:b1:65:af:b9:3c:0c:c1:e5:d7:c4:2b:13:49:79:45:04:
bf:04:71:a4:a1:7c:ce:65:a9:b5:12:ae:fa:ab:1b:5b:bd:8b:
3e:d5:e6:2a:85:4b:57:60:44:4b:6a:42:1a:66:f4:cd:df:3d:
5a:4f:0b:fa:66:a7:f4:78:48:a3:6b:41:26:a1:6c:98:2d:3c:
95:62:0c:08:92:d1:59:8b:29:90:0e:03:f6:be:b6:4d:04:3a:
06:3c:b9:ac:6d:a1:80:5c:16:10:9a:a3:d8:cb:9a:df:b6:70:
5e:f4:d8:9d:a3:97:43:91:e1:5c:d5:4e:8b:d1:7d:88:d6:1d:
a2:c9:ea:96:8b:24:d3:01:38:e6:3b:06:32:a0:a5:14:bc:44:
15:fc:98:95:d4:45:70:02:68:78:91:88:d6:c5:08:41:5f:3c:
42:58:42:4a:6c:cb:3a:f8:ec:e7:ed:20:c0:94:e8:26:0f:41:
d0:5a:84:34:d2:3b:94:1c:0f:6b:b2:5f:2e:02:8a:db:6a:94:
a3:f9:67:41:16:7e:69:87:70:93:fa:9e:21:d1:d6:75:77:78:
ca:94:3e:28:22:b5:01:bb:a0:3e:da:1b:72:75:48:22:6b:a7:
b2:37:9a:9d:aa:41:ff:99:b3:78:8e:02:3a:f0:90:ab:c5:62:
ff:e2:8f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:55:18 2026 by rpki-client