
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91259CA/A9F2722E08A011F0B158565AC4F9AE02/G7ThccrEGeYWe6On1yU8dhYxoo0.mft
File: G7ThccrEGeYWe6On1yU8dhYxoo0.mft (raw, json)
Hash identifier: rScePjYk35aq06wEUAbWGX1CD7h/zP1Rk7MsIyJHrhc=
Subject key identifier: 3D:DB:B2:D8:26:29:FE:64:5D:F0:A8:74:7A:17:2F:92:B0:58:A1:F3
Authority key identifier: 1B:B4:E1:71:CA:C4:19:E6:16:7B:A3:A7:D7:25:3C:76:16:31:A2:8D
Certificate issuer: /CN=A91259CA/serialNumber=1BB4E171CAC419E6167BA3A7D7253C761631A28D
Certificate serial: 0126
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G7ThccrEGeYWe6On1yU8dhYxoo0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91259CA/A9F2722E08A011F0B158565AC4F9AE02/G7ThccrEGeYWe6On1yU8dhYxoo0.mft
Manifest number: 0122
Signing time: Sat 03 Oct 2026 06:32:43 +0000
Manifest this update: Sat 03 Oct 2026 06:32:43 +0000
Manifest next update: Sat 10 Oct 2026 06:32:43 +0000
Files and hashes: 1: G7ThccrEGeYWe6On1yU8dhYxoo0.crl (hash: oNajcB9zwTv1/ytuBjoGUaeOGCq1YvEo+opDqXzpglE=)
2: 2031308808A111F09B131E5BC4F9AE02.roa (hash: bfZHmy0//lzWJ0TH2iq1RiILBXFH7y1Z1TmJFXwbV9c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91259CA/A9F2722E08A011F0B158565AC4F9AE02/G7ThccrEGeYWe6On1yU8dhYxoo0.crl
rsync://rpki.apnic.net/member_repository/A91259CA/A9F2722E08A011F0B158565AC4F9AE02/G7ThccrEGeYWe6On1yU8dhYxoo0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G7ThccrEGeYWe6On1yU8dhYxoo0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 06:32:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 294 (0x126)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91259CA, serialNumber=1BB4E171CAC419E6167BA3A7D7253C761631A28D
Validity
Not Before: Oct 3 06:32:43 2026 GMT
Not After : Oct 10 06:32:43 2026 GMT
Subject: CN=6ac0a18b-e9d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ff:d1:de:9b:70:2e:89:a7:92:25:48:e6:a1:
4d:02:54:9b:d8:8d:7d:ac:a7:9f:d7:eb:78:92:d4:
dc:92:7b:1f:1d:bf:96:9f:5d:6a:a2:e6:55:9f:14:
34:54:cd:05:11:4e:07:ae:8c:cd:97:e3:4d:ba:d1:
c5:cf:83:08:c9:1b:3f:a5:e7:57:33:f5:9e:31:f9:
2e:02:74:41:d5:7a:83:e2:d9:d5:11:02:61:46:b2:
39:86:92:b2:65:e7:eb:a7:cb:04:4d:b2:35:e8:4f:
7f:7d:1f:fe:cf:4b:bb:62:04:fc:91:99:87:1e:aa:
11:df:10:06:e3:f0:3d:e2:1f:3f:3e:b6:c5:97:ce:
aa:f1:68:df:b6:b0:43:25:9f:d3:6b:2d:71:0f:0f:
4e:5a:88:79:f1:42:49:79:67:69:57:0d:70:79:c6:
7f:1d:1b:77:3e:20:cb:14:3d:a5:30:5c:c2:bc:23:
a3:1a:b9:94:dd:a0:a4:c4:28:a3:7d:54:7f:b2:4e:
b2:f8:51:01:36:98:3d:9f:8d:b5:6e:bd:08:27:9e:
a8:7e:4d:08:1e:ee:17:07:16:24:fb:5e:37:84:4e:
45:34:0d:d6:81:dd:4b:d4:99:34:51:22:8f:c3:76:
fb:f5:8a:c4:32:1b:4f:17:3b:1d:34:29:7a:d8:89:
ba:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:DB:B2:D8:26:29:FE:64:5D:F0:A8:74:7A:17:2F:92:B0:58:A1:F3
X509v3 Authority Key Identifier:
keyid:1B:B4:E1:71:CA:C4:19:E6:16:7B:A3:A7:D7:25:3C:76:16:31:A2:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91259CA/A9F2722E08A011F0B158565AC4F9AE02/G7ThccrEGeYWe6On1yU8dhYxoo0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G7ThccrEGeYWe6On1yU8dhYxoo0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91259CA/A9F2722E08A011F0B158565AC4F9AE02/G7ThccrEGeYWe6On1yU8dhYxoo0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:aa:47:f3:e1:d3:13:c6:4e:92:e7:fc:31:81:73:06:91:fb:
66:73:d9:53:ec:ad:6f:f8:11:d9:66:f2:b2:56:a9:9e:72:77:
3b:59:57:92:23:21:f6:10:7b:9f:1d:60:4d:69:ab:d6:cb:7f:
86:ca:01:c4:fb:ac:47:80:d7:0a:23:22:4b:e9:46:68:b3:76:
08:bb:d9:b6:2c:b8:4e:55:0f:29:20:cd:26:39:b3:9b:77:37:
7e:eb:78:1f:34:ca:0f:5b:b3:89:32:af:38:05:63:aa:c9:43:
ea:aa:f2:c4:57:86:71:4a:6b:d5:b5:6a:8b:03:b3:7d:ff:73:
44:4c:89:26:73:82:bd:ac:47:65:12:49:4e:d3:92:83:c0:bc:
3d:e7:31:eb:ba:5d:2e:f8:2c:75:d3:d3:97:a8:b3:72:e3:73:
97:3b:30:04:8b:88:e6:f1:2e:65:5c:44:d0:86:24:c1:5b:36:
77:ea:33:64:7b:db:b5:7b:8e:84:2b:fc:4e:57:af:89:19:6d:
27:64:23:90:48:c6:2e:15:ef:50:48:ba:ad:b7:71:15:b8:7e:
97:dd:01:a8:7f:df:23:30:f5:1f:00:69:7b:1e:d0:a3:b2:d3:
30:57:5d:dd:3b:03:6d:f2:aa:8c:f2:b0:37:77:0a:34:3b:75:
7e:6e:34:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:20:29 2026 by rpki-client