
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.mft
File: G4nCebixZmmNK-SGc-zMKwgTPjk.mft (raw, json)
Hash identifier: tKQxnP2qB8zXgs5g8wbPPG3gGQPaxGQRdzEm4U7qKb8=
Subject key identifier: 71:12:C4:20:ED:48:65:03:41:3C:57:45:56:48:F0:7C:B5:C1:B9:4C
Authority key identifier: 1B:89:C2:79:B8:B1:66:69:8D:2B:E4:86:73:EC:CC:2B:08:13:3E:39
Certificate issuer: /CN=A91FCEB1/serialNumber=1B89C279B8B166698D2BE48673ECCC2B08133E39
Certificate serial: 0800
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4nCebixZmmNK-SGc-zMKwgTPjk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.mft
Manifest number: 2986
Signing time: Sat 26 Sep 2026 15:56:45 +0000
Manifest this update: Sat 26 Sep 2026 15:56:44 +0000
Manifest next update: Sat 03 Oct 2026 15:56:44 +0000
Files and hashes: 1: G4nCebixZmmNK-SGc-zMKwgTPjk.crl (hash: pWRgNaikwhIgtE/5Oi8/ODi7vI4Ayfnc1iLFeziDH2s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.crl
rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4nCebixZmmNK-SGc-zMKwgTPjk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 15:56:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2048 (0x800)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FCEB1, serialNumber=1B89C279B8B166698D2BE48673ECCC2B08133E39
Validity
Not Before: Sep 26 15:56:44 2026 GMT
Not After : Oct 3 15:56:44 2026 GMT
Subject: CN=6ab7eb3d-1d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4c:06:b2:93:df:f8:7a:e9:66:10:ad:06:bd:
0d:2c:48:41:af:cb:6d:f6:2b:d9:d8:6b:fa:8d:fd:
23:ae:27:46:eb:80:0f:fa:8a:d4:13:32:58:80:1e:
9d:e6:5a:b2:ae:15:1a:d2:30:74:8b:6c:e6:ec:6c:
97:77:05:47:06:3a:9b:f8:33:ac:7a:45:68:af:34:
d7:e2:f2:ef:77:80:ce:02:b3:24:ff:5d:93:2d:5b:
66:0e:f7:4e:7a:e3:93:5b:de:aa:79:c2:a8:f9:c8:
0f:9e:b0:e1:07:29:cd:9f:25:4a:b0:b1:16:6c:d4:
58:5f:48:98:1d:8b:72:19:ea:15:1c:af:bb:e7:ae:
21:7e:46:aa:dd:1e:89:8a:d5:a8:b7:9b:d2:92:6d:
dc:bd:c2:d3:76:fe:67:78:98:da:ca:af:0e:57:0f:
f6:fb:9b:51:e0:12:bb:6b:42:71:34:37:d7:fe:7e:
74:7d:f3:97:75:18:02:58:b4:64:fc:0c:00:4e:0c:
22:5a:d4:e8:8f:4d:5c:6a:1c:24:dd:42:82:37:e4:
18:54:ef:5e:f0:0a:bf:c1:c7:20:e9:d2:73:1a:a9:
fe:09:38:e2:07:99:03:69:cf:06:f8:63:a4:e1:53:
e9:e0:46:1b:2b:69:db:9b:50:7f:db:47:c9:dd:b3:
35:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:12:C4:20:ED:48:65:03:41:3C:57:45:56:48:F0:7C:B5:C1:B9:4C
X509v3 Authority Key Identifier:
keyid:1B:89:C2:79:B8:B1:66:69:8D:2B:E4:86:73:EC:CC:2B:08:13:3E:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4nCebixZmmNK-SGc-zMKwgTPjk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:d8:b9:97:07:f3:18:59:54:a5:c7:37:42:c2:63:2b:4e:4e:
09:6e:df:47:fb:ce:16:2b:ff:da:0a:66:f5:72:c3:f3:9c:9c:
a0:b2:1b:18:5d:36:93:14:09:0a:ca:62:98:7a:2d:5e:eb:d8:
02:2e:6d:9d:df:f5:60:89:9a:e3:da:ee:e8:b0:66:90:9d:6e:
e8:75:d9:0f:87:3e:6c:26:07:59:81:c1:7b:5e:c4:a0:a8:f1:
5c:36:cd:d2:eb:7a:b9:0d:e8:bb:a8:d3:ff:98:cf:4a:51:28:
6d:40:ea:09:9c:11:24:74:f7:31:e8:82:61:06:e3:45:9d:ff:
f5:bb:b7:2f:8a:0c:cc:58:82:df:01:0f:f2:86:c5:32:f6:7c:
17:3d:b6:0e:b1:94:00:5d:ef:ee:e5:d2:91:96:07:a2:6b:b1:
33:c6:e7:df:9c:50:d9:8c:61:83:6f:97:9b:5e:13:68:82:52:
11:06:c6:76:42:76:97:98:19:82:e8:8b:33:89:79:5a:7c:e6:
cc:23:b5:17:00:e6:df:3a:68:17:f1:3f:25:d0:23:26:52:da:
df:4e:37:c9:1f:98:68:8e:dc:97:ca:d9:1e:ea:62:02:cb:b8:
1e:30:21:ff:1f:85:87:44:23:47:e2:62:b0:45:84:b0:6a:73:
4c:94:d1:e0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCAAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkNFQjExMTAvBgNVBAUTKDFCODlDMjc5QjhCMTY2Njk4RDJCRTQ4NjczRUNDQzJC
MDgxMzNFMzkwHhcNMjYwOTI2MTU1NjQ0WhcNMjYxMDAzMTU1NjQ0WjAYMRYwFAYD
VQQDEw02YWI3ZWIzZC0xZDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxUwGspPf+HrpZhCtBr0NLEhBr8tt9ivZ2Gv6jf0jridG64AP+orUEzJYgB6d
5lqyrhUa0jB0i2zm7GyXdwVHBjqb+DOsekVorzTX4vLvd4DOArMk/12TLVtmDvdO
euOTW96qecKo+cgPnrDhBynNnyVKsLEWbNRYX0iYHYtyGeoVHK+7564hfkaq3R6J
itWot5vSkm3cvcLTdv5neJjayq8OVw/2+5tR4BK7a0JxNDfX/n50ffOXdRgCWLRk
/AwATgwiWtToj01cahwk3UKCN+QYVO9e8Aq/wccg6dJzGqn+CTjiB5kDac8G+GOk
4VPp4EYbK2nbm1B/20fJ3bM1YwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHESxCDt
SGUDQTxXRVZI8Hy1wblMMB8GA1UdIwQYMBaAFBuJwnm4sWZpjSvkhnPszCsIEz45
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0VCMS9FRkI4NzVDODA4
QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9HNG5DZWJpeFptbU5LLVNHYy16TUt3Z1RQ
amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0c0bkNlYml4Wm1tTkstU0djLXpNS3dnVFBqay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
Q0VCMS9FRkI4NzVDODA4QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9HNG5DZWJpeFpt
bU5LLVNHYy16TUt3Z1RQamsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAY9i5lwfzGFlUpcc3QsJjK05OCW7fR/vOFiv/2gpm9XLD85ycoLIbGF02kxQJ
CspimHotXuvYAi5tnd/1YIma49ru6LBmkJ1u6HXZD4c+bCYHWYHBe17EoKjxXDbN
0ut6uQ3ou6jT/5jPSlEobUDqCZwRJHT3MeiCYQbjRZ3/9bu3L4oMzFiC3wEP8obF
MvZ8Fz22DrGUAF3v7uXSkZYHomuxM8bn35xQ2Yxhg2+Xm14TaIJSEQbGdkJ2l5gZ
guiLM4l5WnzmzCO1FwDm3zpoF/E/JdAjJlLa3043yR+YaI7cl8rZHupiAsu4HjAh
/x+Fh0QjR+JisEWEsGpzTJTR4A==
-----END CERTIFICATE-----
Generated at Sat Sep 26 22:39:57 2026 by rpki-client