
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.mft
File: g4n9Rv74flk96Bz_3N8guiynYB4.mft (raw, json)
Hash identifier: 80WoDYUPE94bjji6YSXxomYVE9DK1f2ABoeaaulRsP4=
Subject key identifier: 0C:E3:96:A7:69:82:CD:3D:43:8F:2B:33:6F:B4:E8:BA:49:FF:09:3E
Authority key identifier: 83:89:FD:46:FE:F8:7E:59:3D:E8:1C:FF:DC:DF:20:BA:2C:A7:60:1E
Certificate issuer: /CN=A91475BA/serialNumber=8389FD46FEF87E593DE81CFFDCDF20BA2CA7601E
Certificate serial: 090A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4n9Rv74flk96Bz_3N8guiynYB4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.mft
Manifest number: 0901
Signing time: Fri 04 Sep 2026 20:09:38 +0000
Manifest this update: Fri 04 Sep 2026 20:09:38 +0000
Manifest next update: Fri 11 Sep 2026 20:09:38 +0000
Files and hashes: 1: g4n9Rv74flk96Bz_3N8guiynYB4.crl (hash: DGDRvE7NHPvc/8NotCCb2vy0jEBfgA3RK0I4+4YTNfE=)
2: 1E1D32C22FF311EC9220256BC4F9AE02.roa (hash: rQBPOBvkThW7+7E7jubPbgFdB5SrjXafLnjRjSwdJcM=)
3: D8831B4A4E8411F19692FE9BB2833773.roa (hash: AmaSg04K09nhgDvkJFll07EOLr2ig9e1az30iEGIY3w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.crl
rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4n9Rv74flk96Bz_3N8guiynYB4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 20:09:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2314 (0x90a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91475BA, serialNumber=8389FD46FEF87E593DE81CFFDCDF20BA2CA7601E
Validity
Not Before: Sep 4 20:09:38 2026 GMT
Not After : Sep 11 20:09:38 2026 GMT
Subject: CN=6a9b2582-98e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a7:09:c7:6c:1b:e8:84:27:03:49:1f:30:60:
ed:f0:82:bc:76:9c:1b:9f:e6:09:89:d2:86:26:5a:
c7:a8:63:84:da:71:c5:6e:15:09:ae:2d:6a:fa:da:
f6:7b:75:b4:87:33:a7:12:88:09:ec:c2:80:fd:15:
0a:9b:d2:88:fb:de:f5:5c:0f:f8:01:03:14:39:1d:
86:33:fe:75:d7:e8:a9:3e:90:1c:8a:14:3b:77:18:
4d:25:bf:dc:e1:f1:3e:f2:c7:dd:d5:bc:2f:6b:ba:
da:19:ac:c7:5c:06:a0:19:77:08:a0:49:f1:b7:b8:
d5:df:6a:c6:bd:ab:a3:12:a0:16:60:9f:50:15:a3:
a2:76:9a:41:da:db:bf:10:f8:d8:59:5c:5f:ee:0f:
c3:ed:be:fc:5c:d8:33:24:b5:a1:98:2b:25:e1:83:
e7:37:b4:8a:7b:84:f0:e9:e4:55:e0:2b:46:7f:9f:
7b:7e:bd:f3:26:a0:74:73:86:80:79:82:85:fd:bd:
cf:f5:70:85:69:e8:98:f7:f2:c8:1a:26:36:6f:ea:
83:6d:ad:67:fe:0e:1d:d1:9a:ae:7d:a5:c0:5c:44:
2a:f9:bb:fc:66:07:bf:6d:44:fe:e4:73:83:a8:08:
e3:8e:b3:a1:a3:a9:a1:d5:07:53:70:a1:10:05:e0:
b2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E3:96:A7:69:82:CD:3D:43:8F:2B:33:6F:B4:E8:BA:49:FF:09:3E
X509v3 Authority Key Identifier:
keyid:83:89:FD:46:FE:F8:7E:59:3D:E8:1C:FF:DC:DF:20:BA:2C:A7:60:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4n9Rv74flk96Bz_3N8guiynYB4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:8e:fc:29:ff:6c:2c:d7:a9:69:4d:5c:a6:8c:5a:9d:ce:e3:
4d:0c:f4:9e:6e:9f:79:f6:64:e8:64:f3:7f:9f:a3:40:f1:9b:
57:7e:6d:8a:bc:5c:7b:5b:a2:04:43:9a:f9:af:86:95:f7:b1:
79:d9:44:24:09:f0:d5:63:e2:53:89:b6:f8:76:73:ec:83:40:
c0:82:6e:75:9b:94:54:f2:25:15:e4:c7:fa:18:59:93:27:de:
99:0d:cb:ed:de:13:c1:2e:b5:75:0c:ca:28:69:a2:10:98:be:
38:08:8b:c1:43:7f:43:ba:53:20:2e:c4:a3:85:b5:cb:7a:72:
7f:b3:35:96:f4:6e:9d:32:e2:0e:79:89:d1:1f:46:b3:83:0c:
75:a2:0b:95:4c:e2:fe:66:fb:46:42:b6:33:27:66:1c:5f:8a:
86:70:c7:2a:b1:43:bc:53:88:d2:1f:5f:8c:d1:74:1b:1c:f5:
4a:4c:2e:f4:04:8b:ce:b6:ba:5f:42:d5:40:5e:44:82:1b:a5:
e2:5e:28:23:65:21:59:e4:45:d8:60:6a:ef:15:b6:70:3a:4f:
b3:08:b8:8c:06:f6:02:ae:86:f2:4d:65:14:0f:59:b2:f3:9d:
ee:ef:a1:7a:b9:01:1d:39:a6:af:d0:87:ab:38:d0:d1:ee:cb:
6e:9c:ec:7c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDc1QkExMTAvBgNVBAUTKDgzODlGRDQ2RkVGODdFNTkzREU4MUNGRkRDREYyMEJB
MkNBNzYwMUUwHhcNMjYwOTA0MjAwOTM4WhcNMjYwOTExMjAwOTM4WjAYMRYwFAYD
VQQDEw02YTliMjU4Mi05OGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvKcJx2wb6IQnA0kfMGDt8IK8dpwbn+YJidKGJlrHqGOE2nHFbhUJri1q+tr2
e3W0hzOnEogJ7MKA/RUKm9KI+971XA/4AQMUOR2GM/511+ipPpAcihQ7dxhNJb/c
4fE+8sfd1bwva7raGazHXAagGXcIoEnxt7jV32rGvaujEqAWYJ9QFaOidppB2tu/
EPjYWVxf7g/D7b78XNgzJLWhmCsl4YPnN7SKe4Tw6eRV4CtGf597fr3zJqB0c4aA
eYKF/b3P9XCFaeiY9/LIGiY2b+qDba1n/g4d0ZqufaXAXEQq+bv8Zge/bUT+5HOD
qAjjjrOho6mh1QdTcKEQBeCyrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAzjlqdp
gs09Q48rM2+06LpJ/wk+MB8GA1UdIwQYMBaAFIOJ/Ub++H5ZPegc/9zfILosp2Ae
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzVCQS9ENEYwOEVFNkRB
RTkxMUVBOTJDRTM0NUFDNEY5QUUwMi9nNG45UnY3NGZsazk2QnpfM044Z3VpeW5Z
QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2c0bjlSdjc0ZmxrOTZCel8zTjhndWl5bllCNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NzVCQS9ENEYwOEVFNkRBRTkxMUVBOTJDRTM0NUFDNEY5QUUwMi9nNG45UnY3NGZs
azk2QnpfM044Z3VpeW5ZQjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAO478Kf9sLNepaU1cpoxanc7jTQz0nm6fefZk6GTzf5+jQPGbV35tirxce1ui
BEOa+a+GlfexedlEJAnw1WPiU4m2+HZz7INAwIJudZuUVPIlFeTH+hhZkyfemQ3L
7d4TwS61dQzKKGmiEJi+OAiLwUN/Q7pTIC7Eo4W1y3pyf7M1lvRunTLiDnmJ0R9G
s4MMdaILlUzi/mb7RkK2MydmHF+KhnDHKrFDvFOI0h9fjNF0Gxz1Skwu9ASLzra6
X0LVQF5Eghul4l4oI2UhWeRF2GBq7xW2cDpPswi4jAb2Aq6G8k1lFA9ZsvOd7u+h
erkBHTmmr9CHqzjQ0e7LbpzsfA==
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:00:17 2026 by rpki-client