
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.mft
File: gJihpKZXp3CvvWalja3gGT9aHog.mft (raw, json)
Hash identifier: 1M1GFUI73aDZ481W4ljPV0LZZuQQcRyKnLJaRzg47l8=
Subject key identifier: B9:CF:7E:9A:49:A1:BB:27:50:23:D5:CF:E3:FB:71:AE:0D:BF:70:DD
Authority key identifier: 80:98:A1:A4:A6:57:A7:70:AF:BD:66:A5:8D:AD:E0:19:3F:5A:1E:88
Certificate issuer: /CN=A916A6D2/serialNumber=8098A1A4A657A770AFBD66A58DADE0193F5A1E88
Certificate serial: 0676
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJihpKZXp3CvvWalja3gGT9aHog.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.mft
Manifest number: 0666
Signing time: Wed 28 Oct 2026 22:49:15 +0000
Manifest this update: Wed 28 Oct 2026 22:49:15 +0000
Manifest next update: Wed 04 Nov 2026 22:49:15 +0000
Files and hashes: 1: gJihpKZXp3CvvWalja3gGT9aHog.crl (hash: ZgzOzlU6g8gVQoUygktFU1/xScskmSgxRhw3IngHii8=)
2: 9718BA74EA9E11EB8575F62AC4F9AE02.roa (hash: m3HEhEwWSLfKtQb2ikmT/BSylxepHuo5uXczBb4yR7g=)
3: 81C83A9ADD9711ECB450D332C4F9AE02.roa (hash: 9EVY6/bljSmGk69kgq+cWH0JVAlXlHuEraH6jeuw/7c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.crl
rsync://rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJihpKZXp3CvvWalja3gGT9aHog.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 22:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1654 (0x676)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A6D2, serialNumber=8098A1A4A657A770AFBD66A58DADE0193F5A1E88
Validity
Not Before: Oct 28 22:49:15 2026 GMT
Not After : Nov 4 22:49:15 2026 GMT
Subject: CN=6ae27beb-cb8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:09:a1:81:a0:4b:db:cd:2a:49:25:b1:3a:57:
55:86:94:82:19:b6:49:a9:9e:e6:f2:2b:bb:7b:dc:
fa:60:4f:f0:e6:16:55:b2:8f:c5:65:ca:a2:31:89:
65:c6:14:f5:a8:c4:f9:ee:a5:cf:e1:ef:c6:bb:e8:
e8:45:a7:d8:30:3c:a6:72:84:fe:12:44:9b:d6:e1:
c5:58:df:1a:b0:27:f3:3a:1c:bd:a0:7a:ef:55:af:
25:06:22:94:ad:3c:31:df:3f:6f:e7:f4:2a:8d:35:
4b:83:df:10:bb:11:0c:e3:24:6f:ec:3d:9e:43:65:
a1:43:96:6c:82:ba:04:10:97:99:76:8b:e4:c6:31:
bd:26:78:4a:30:90:27:fe:0e:16:b0:b7:eb:42:ef:
d8:74:46:21:0a:58:39:0f:61:66:62:22:3f:a6:07:
cc:ef:3e:93:e4:a6:7a:e8:ab:32:54:81:ac:77:cf:
d3:7e:3a:34:c4:fd:c1:c2:e3:60:76:45:3d:10:a0:
62:66:cb:e2:50:1b:78:d0:f2:06:be:ec:d3:f4:55:
2b:7c:96:f3:58:b9:b8:5b:7a:d8:c4:56:f4:21:23:
4e:08:bb:ae:e3:0c:c5:ec:09:00:52:db:83:1d:bc:
d8:78:e0:3b:9c:46:2a:64:11:71:55:86:43:1f:b6:
a5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CF:7E:9A:49:A1:BB:27:50:23:D5:CF:E3:FB:71:AE:0D:BF:70:DD
X509v3 Authority Key Identifier:
keyid:80:98:A1:A4:A6:57:A7:70:AF:BD:66:A5:8D:AD:E0:19:3F:5A:1E:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJihpKZXp3CvvWalja3gGT9aHog.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:97:0d:38:05:98:41:61:69:70:a3:a4:5e:78:d2:36:57:0a:
8f:59:82:a4:1d:b7:ba:cd:d8:5a:80:ca:42:67:62:3e:df:91:
74:0a:7f:8d:95:e8:77:a4:c0:41:ba:16:63:ad:e4:90:16:a8:
16:3d:3e:ff:1f:85:dd:65:ce:e9:2a:0d:d2:0f:55:33:fd:f5:
da:c5:c6:6c:e3:48:cb:29:5d:ce:71:d9:62:ae:e1:5f:4e:22:
7c:04:f6:d8:84:0d:09:9d:bf:e6:28:49:3c:06:bc:55:8d:c8:
8e:d6:54:d1:e3:52:ed:4e:bb:f8:f7:8c:fe:95:af:28:17:0c:
8b:ae:8b:19:38:3a:f4:fe:97:cc:bb:f3:eb:42:ea:54:a0:ae:
f6:59:2e:c2:e9:a6:4b:e7:52:58:06:3f:7a:35:d8:31:ac:e5:
2c:9c:61:76:ae:35:91:24:c9:ec:c7:a1:d0:fb:82:6c:ac:c7:
4c:56:2a:7e:eb:e2:6a:c7:99:df:52:cc:a9:2f:ad:21:ce:59:
42:8a:30:d5:07:6e:7b:d2:09:59:e9:d3:63:0c:57:c7:af:5b:
b5:37:88:43:0b:1c:c2:29:69:1e:60:4c:7e:2e:46:a0:35:ee:
56:2e:ca:ab:8b:93:4f:3b:83:f1:a6:14:8e:12:61:90:8b:6f:
51:9a:ce:44
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBnYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkE2RDIxMTAvBgNVBAUTKDgwOThBMUE0QTY1N0E3NzBBRkJENjZBNThEQURFMDE5
M0Y1QTFFODgwHhcNMjYxMDI4MjI0OTE1WhcNMjYxMTA0MjI0OTE1WjAYMRYwFAYD
VQQDEw02YWUyN2JlYi1jYjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsAmhgaBL280qSSWxOldVhpSCGbZJqZ7m8iu7e9z6YE/w5hZVso/FZcqiMYll
xhT1qMT57qXP4e/Gu+joRafYMDymcoT+EkSb1uHFWN8asCfzOhy9oHrvVa8lBiKU
rTwx3z9v5/QqjTVLg98QuxEM4yRv7D2eQ2WhQ5ZsgroEEJeZdovkxjG9JnhKMJAn
/g4WsLfrQu/YdEYhClg5D2FmYiI/pgfM7z6T5KZ66KsyVIGsd8/Tfjo0xP3BwuNg
dkU9EKBiZsviUBt40PIGvuzT9FUrfJbzWLm4W3rYxFb0ISNOCLuu4wzF7AkAUtuD
HbzYeOA7nEYqZBFxVYZDH7alpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLnPfppJ
obsnUCPVz+P7ca4Nv3DdMB8GA1UdIwQYMBaAFICYoaSmV6dwr71mpY2t4Bk/Wh6I
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTZEMi83RDU3QUVFRUVB
OUMxMUVCQTMxMkE5MjZDNEY5QUUwMi9nSmlocEtaWHAzQ3Z2V2FsamEzZ0dUOWFI
b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dKaWhwS1pYcDNDdnZXYWxqYTNnR1Q5YUhvZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QTZEMi83RDU3QUVFRUVBOUMxMUVCQTMxMkE5MjZDNEY5QUUwMi9nSmlocEtaWHAz
Q3Z2V2FsamEzZ0dUOWFIb2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWZcNOAWYQWFpcKOkXnjSNlcKj1mCpB23us3YWoDKQmdiPt+RdAp/jZXod6TA
QboWY63kkBaoFj0+/x+F3WXO6SoN0g9VM/312sXGbONIyyldznHZYq7hX04ifAT2
2IQNCZ2/5ihJPAa8VY3IjtZU0eNS7U67+PeM/pWvKBcMi66LGTg69P6XzLvz60Lq
VKCu9lkuwummS+dSWAY/ejXYMazlLJxhdq41kSTJ7Meh0PuCbKzHTFYqfuviaseZ
31LMqS+tIc5ZQoow1Qdue9IJWenTYwxXx69btTeIQwscwilpHmBMfi5GoDXuVi7K
q4uTTzuD8aYUjhJhkItvUZrORA==
-----END CERTIFICATE-----
Generated at Fri Oct 30 16:09:12 2026 by rpki-client