
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.mft
File: g1KnNOghRPMixQtyik92WjPXIlY.mft (raw, json)
Hash identifier: /+kK/lgFTFt37Os8ABWXWG1vp0R7FGU3mqCtOb+gGPA=
Subject key identifier: 25:7D:22:6F:2E:89:62:3E:AD:19:13:E0:A6:67:E8:F5:11:BB:5A:54
Authority key identifier: 83:52:A7:34:E8:21:44:F3:22:C5:0B:72:8A:4F:76:5A:33:D7:22:56
Certificate issuer: /CN=A917357E/serialNumber=8352A734E82144F322C50B728A4F765A33D72256
Certificate serial: 0342
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1KnNOghRPMixQtyik92WjPXIlY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.mft
Manifest number: 085F
Signing time: Wed 28 Oct 2026 23:41:04 +0000
Manifest this update: Wed 28 Oct 2026 23:41:03 +0000
Manifest next update: Wed 04 Nov 2026 23:41:03 +0000
Files and hashes: 1: g1KnNOghRPMixQtyik92WjPXIlY.crl (hash: 72S5Cf8ButESn+JyUayc3JFPuA9MxLIK/XNgh3B4UMw=)
2: D89FDE783D9611F1B175AB4BC4833773.roa (hash: I6vEAiKk2iqA5O1Fu2fdZ+iFRdW869TGPWWGjxLAqTY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.crl
rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1KnNOghRPMixQtyik92WjPXIlY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 23:41:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 834 (0x342)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917357E, serialNumber=8352A734E82144F322C50B728A4F765A33D72256
Validity
Not Before: Oct 28 23:41:03 2026 GMT
Not After : Nov 4 23:41:03 2026 GMT
Subject: CN=6ae28810-bb29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ee:95:08:cd:92:aa:b6:24:70:ec:f7:4b:68:
0f:5f:8c:3a:dc:62:dd:fc:b1:40:b2:9f:0e:6a:15:
13:3b:b9:f8:3a:80:b1:7b:ef:5b:9d:5f:51:91:f5:
6c:7e:46:44:8d:54:de:04:35:d9:06:d8:d6:2a:d6:
ea:7d:2e:19:92:17:d1:47:77:3e:ec:c8:68:9a:18:
e0:31:d3:db:41:3d:d4:43:6e:38:a9:82:7e:1d:63:
2d:c1:b8:0f:20:86:71:ad:a0:08:97:a7:3c:21:38:
ef:f8:cc:09:59:8a:a5:d7:04:02:1f:5f:5d:ad:8e:
84:65:64:13:26:d9:97:63:78:8d:4e:9b:15:b5:3e:
dc:4f:3f:85:fe:c9:a3:58:7f:91:d0:42:bc:c2:61:
bd:1b:0b:6e:15:20:5c:1a:2e:49:e7:36:b2:78:d3:
d2:40:ef:b3:2d:f6:37:3e:3a:c5:44:a9:16:ef:b8:
99:a2:6f:eb:e6:64:56:42:b1:7e:da:c3:58:ce:7b:
92:6a:ce:ee:17:9a:36:23:bb:b0:28:fc:d4:2d:c0:
8e:1d:7e:1f:ff:5d:36:e8:a1:1d:b3:fc:dc:89:04:
cc:29:33:0c:ba:a4:1f:35:7c:73:2a:eb:a7:fc:df:
2a:85:98:aa:1b:c3:48:81:99:5e:02:a2:34:df:f6:
b8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:7D:22:6F:2E:89:62:3E:AD:19:13:E0:A6:67:E8:F5:11:BB:5A:54
X509v3 Authority Key Identifier:
keyid:83:52:A7:34:E8:21:44:F3:22:C5:0B:72:8A:4F:76:5A:33:D7:22:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1KnNOghRPMixQtyik92WjPXIlY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:99:8f:f1:da:8d:33:42:30:e2:7a:ac:43:fc:35:e9:e7:16:
17:35:6b:41:f0:e8:a5:e0:d4:fa:45:a2:a6:d4:12:10:5b:a0:
b2:ce:97:99:bf:6b:2c:e7:8c:e6:94:0c:39:11:4d:4f:6e:e3:
2e:84:e3:45:a3:48:d0:20:9e:ef:b4:9c:db:ca:b4:a1:a9:3f:
a8:94:93:a1:2b:8b:98:f8:fe:f7:d8:27:f1:53:02:7a:31:d5:
38:18:19:60:89:f6:9c:bf:eb:91:b7:3b:22:8c:24:2c:7d:48:
71:2b:0a:3f:3c:51:66:61:11:1e:bc:d7:fe:43:45:82:25:3f:
89:45:1d:8e:d9:a1:c3:05:e7:ff:d9:f1:80:c7:77:94:03:34:
2e:e0:28:4c:39:71:04:ff:05:a4:e4:8f:71:c7:ef:38:65:99:
db:a9:d6:34:94:95:7a:90:6e:39:39:d4:64:09:ae:3e:ae:63:
c7:70:41:b2:10:ee:89:1b:91:0d:14:6f:37:be:b5:26:02:99:
df:58:d4:1d:d1:1e:9a:fb:9d:63:ea:75:bb:43:2e:13:de:de:
55:51:29:03:ac:7d:b5:af:73:1e:1b:94:0e:5e:64:7f:f6:3c:
da:ad:06:f3:29:4c:6d:fb:0b:ef:8e:ba:90:1b:15:2f:65:dc:
90:7f:7c:cf
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA0IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzM1N0UxMTAvBgNVBAUTKDgzNTJBNzM0RTgyMTQ0RjMyMkM1MEI3MjhBNEY3NjVB
MzNENzIyNTYwHhcNMjYxMDI4MjM0MTAzWhcNMjYxMTA0MjM0MTAzWjAYMRYwFAYD
VQQDEw02YWUyODgxMC1iYjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt+6VCM2SqrYkcOz3S2gPX4w63GLd/LFAsp8OahUTO7n4OoCxe+9bnV9RkfVs
fkZEjVTeBDXZBtjWKtbqfS4ZkhfRR3c+7MhomhjgMdPbQT3UQ244qYJ+HWMtwbgP
IIZxraAIl6c8ITjv+MwJWYql1wQCH19drY6EZWQTJtmXY3iNTpsVtT7cTz+F/smj
WH+R0EK8wmG9GwtuFSBcGi5J5zayeNPSQO+zLfY3PjrFRKkW77iZom/r5mRWQrF+
2sNYznuSas7uF5o2I7uwKPzULcCOHX4f/1026KEds/zciQTMKTMMuqQfNXxzKuun
/N8qhZiqG8NIgZleAqI03/a4DQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCV9Im8u
iWI+rRkT4KZn6PURu1pUMB8GA1UdIwQYMBaAFINSpzToIUTzIsULcopPdloz1yJW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzU3RS82MDJENzZEODVE
NzMxMUVDQTMyNDg4NTNDNEY5QUUwMi9nMUtuTk9naFJQTWl4UXR5aWs5MldqUFhJ
bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2cxS25OT2doUlBNaXhRdHlpazkyV2pQWElsWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MzU3RS82MDJENzZEODVENzMxMUVDQTMyNDg4NTNDNEY5QUUwMi9nMUtuTk9naFJQ
TWl4UXR5aWs5MldqUFhJbFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjJmP8dqNM0Iw4nqsQ/w16ecWFzVrQfDopeDU+kWiptQSEFugss6Xmb9rLOeM
5pQMORFNT27jLoTjRaNI0CCe77Sc28q0oak/qJSToSuLmPj+99gn8VMCejHVOBgZ
YIn2nL/rkbc7IowkLH1IcSsKPzxRZmERHrzX/kNFgiU/iUUdjtmhwwXn/9nxgMd3
lAM0LuAoTDlxBP8FpOSPccfvOGWZ26nWNJSVepBuOTnUZAmuPq5jx3BBshDuiRuR
DRRvN761JgKZ31jUHdEemvudY+p1u0MuE97eVVEpA6x9ta9zHhuUDl5kf/Y82q0G
8ylMbfsL7466kBsVL2XckH98zw==
-----END CERTIFICATE-----
Generated at Thu Oct 29 05:49:53 2026 by rpki-client