
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft
File: G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft (raw, json)
Hash identifier: u7gME8muuHtcYIyWp5WOgs8xZXC/PXH6DGRSt5puSSo=
Subject key identifier: EE:DC:E4:22:D4:F2:79:75:DA:03:9A:5F:B2:D7:B6:42:EF:BC:5F:43
Authority key identifier: 1B:FC:D5:95:AD:5F:FD:B9:C0:43:73:7B:CA:FE:C7:2E:04:6C:6B:EE
Certificate issuer: /CN=A9139322/serialNumber=1BFCD595AD5FFDB9C043737BCAFEC72E046C6BEE
Certificate serial: 0296
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft
Manifest number: 0296
Signing time: Tue 20 Oct 2026 22:48:42 +0000
Manifest this update: Tue 20 Oct 2026 22:48:41 +0000
Manifest next update: Tue 27 Oct 2026 22:48:41 +0000
Files and hashes: 1: G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl (hash: bKRfa1ZUCjnVwthmhRGA5b5yKaoitMsiQxyJfPikBbU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl
rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Oct 2026 22:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 662 (0x296)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139322, serialNumber=1BFCD595AD5FFDB9C043737BCAFEC72E046C6BEE
Validity
Not Before: Oct 20 22:48:41 2026 GMT
Not After : Oct 27 22:48:41 2026 GMT
Subject: CN=6ad7efca-da15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e1:b7:ce:97:83:57:67:b4:b8:19:e5:57:40:
04:67:a9:6f:a8:73:2b:ee:e0:c0:5d:c3:cb:07:a3:
b7:98:e5:4e:11:9f:d2:3c:41:bc:04:e8:41:62:0f:
f0:68:4e:c3:b7:2c:c6:f6:39:b2:65:a3:6e:aa:4e:
3a:09:fe:93:c4:f7:8f:8a:d7:9b:71:7e:f5:1a:03:
09:7f:b9:87:3a:6b:53:a3:16:67:8e:58:90:66:70:
8a:71:e9:72:ec:2b:db:fe:77:4a:f9:bf:39:8b:42:
25:50:f0:c1:58:0e:8c:5b:5b:ac:15:76:ab:6e:80:
25:0d:9f:0a:ad:aa:8e:c7:4a:f7:e8:f4:59:ac:65:
5f:8d:e8:49:ba:03:11:70:38:7b:9f:26:05:30:61:
e4:4b:7c:4c:28:e2:92:a2:dc:10:6e:1a:41:95:ba:
c5:e6:ab:98:90:65:4d:05:d8:05:31:a5:d6:e8:76:
23:92:d1:14:37:11:b4:76:a4:b7:90:86:00:82:d8:
9d:f9:bc:48:56:3b:72:c7:a4:d1:0b:77:4a:f3:c7:
d5:5a:54:6d:77:a6:de:15:16:31:46:6d:ec:6e:b3:
ee:15:45:23:20:78:3d:e7:45:0b:2e:e5:85:d5:61:
7e:3f:44:38:a1:c9:00:ea:1a:8a:63:25:39:96:7f:
46:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:DC:E4:22:D4:F2:79:75:DA:03:9A:5F:B2:D7:B6:42:EF:BC:5F:43
X509v3 Authority Key Identifier:
keyid:1B:FC:D5:95:AD:5F:FD:B9:C0:43:73:7B:CA:FE:C7:2E:04:6C:6B:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:1f:2b:de:4c:b1:da:8d:52:d4:ab:22:67:cc:fa:0f:9d:b7:
3d:06:f1:38:56:e0:75:a4:e6:5e:f6:35:38:45:b7:f0:1e:6d:
fd:6b:40:2f:a0:fa:2f:93:d0:6a:37:af:fa:76:a4:08:e1:1b:
d3:5b:b1:71:91:e7:69:c6:dc:15:bd:b9:99:aa:e0:4c:86:cd:
93:15:1a:13:1f:36:ac:5b:d1:29:22:a8:46:b7:af:2c:7d:86:
df:fd:e3:c1:72:f6:6f:7d:b0:7a:30:b0:0b:4d:48:5a:a2:ed:
f6:b9:b7:66:91:14:b1:e9:21:6b:cb:86:5e:e3:92:ab:62:31:
e4:a5:13:bd:0f:c9:0c:3f:17:65:8a:f4:69:ac:03:90:e9:d0:
c9:41:11:27:08:12:86:66:f0:d4:91:45:73:d6:2a:fe:55:a5:
de:f9:47:66:fc:6e:dd:ce:c0:a2:b8:ea:30:80:76:9c:c0:14:
0e:c8:26:8e:08:5d:a8:c2:d6:56:7a:52:b8:eb:e6:b5:58:df:
c6:ec:09:b8:be:5e:43:2f:8a:f3:4a:73:69:35:8f:41:1b:9f:
37:f6:c5:73:e8:08:6d:3e:aa:b0:41:79:59:97:0a:c7:51:df:
74:4e:ea:f5:e8:3a:34:74:51:50:f0:85:b8:a9:c8:db:b3:52:
2b:f7:a3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 07:24:55 2026 by rpki-client