
$ rpki-client -vvf rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft
File: g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft (raw, json)
Hash identifier: W+ZhJ1kDIx8BCTY/Xyx8Lkd/o2oK1D/wF/LKsTOqhE4=
Subject key identifier: D0:69:FF:E0:7E:6B:FB:EF:35:5F:89:09:CE:25:6E:8C:4B:16:E6:CD
Authority key identifier: 83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E
Certificate issuer: /CN=A91756B7/serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E
Certificate serial: 0803
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft
Manifest number: 0770
Signing time: Sat 04 Apr 2026 22:01:51 +0000
Manifest this update: Sat 04 Apr 2026 22:01:50 +0000
Manifest next update: Sat 11 Apr 2026 22:01:50 +0000
Files and hashes: 1: g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl (hash: Wxj3npiOp4MOex8KFtwo5ecktTCLWf4gIGs+Q/45tWA=)
2: DEA0CC98F49311F0AD6894B8746F56BC.roa (hash: AP8Httvv3MXSN3Zbhstxc7Mc+tY+yxqDGflYpBVgTRY=)
3: 756E0BBCEAE711EE88CD8641C4F9AE02.roa (hash: F9qzDXb2ETVj14lcNUq30Z9sFnnvqbyTNgRyrEZdsMI=)
4: 993EAAD4522911EFA600C035C4F9AE02.roa (hash: 3XVBS/fTqlRh6IIe7RzFiy/Wa0ZSlvIPzHLw+7wGdvQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl
rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 22:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2051 (0x803)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91756B7, serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E
Validity
Not Before: Apr 4 22:01:50 2026 GMT
Not After : Apr 11 22:01:50 2026 GMT
Subject: CN=69d18a4f-6b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:63:b1:0f:21:b1:ce:64:4e:ba:6e:e6:09:c6:
f2:49:a0:cf:71:28:9b:00:92:a0:22:b9:22:4f:42:
7d:70:81:ff:c9:a7:4c:d6:18:26:c2:07:58:fd:91:
fa:8e:2b:c3:a0:2c:b5:9c:29:d3:04:96:57:75:04:
37:5e:ea:db:5f:e3:93:6a:5a:80:7d:6b:8e:74:72:
a5:60:ab:e3:71:0e:b8:22:6b:89:7a:2e:9d:76:4d:
de:67:db:fd:7a:b3:26:32:b6:1a:16:b2:55:88:18:
92:96:b5:7b:2f:2f:a6:1f:06:4f:31:35:e8:25:77:
84:80:50:7d:6b:16:5e:0f:66:70:45:d4:a2:6c:78:
72:aa:6f:d6:5f:82:80:5d:10:f2:e3:06:ef:f7:50:
62:12:45:7e:cb:4b:9e:c5:5d:91:83:17:2a:c0:ac:
84:81:4e:41:eb:f9:f9:81:da:c0:42:0a:8e:3b:1a:
c0:3d:28:78:4c:fd:cd:c4:b1:71:b1:17:b4:8e:61:
d9:59:6c:29:77:ae:d1:d6:03:64:fb:88:91:04:6f:
b5:1a:7d:f7:e2:10:bb:a1:eb:9f:e1:2b:3b:d1:f9:
96:3c:3d:e3:aa:4c:cb:23:77:0c:83:84:01:58:04:
3d:ba:b5:2d:8f:31:46:7b:ba:f4:37:61:83:5c:f0:
26:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:69:FF:E0:7E:6B:FB:EF:35:5F:89:09:CE:25:6E:8C:4B:16:E6:CD
X509v3 Authority Key Identifier:
keyid:83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:38:b8:47:aa:79:10:7e:e2:b9:ea:a0:4f:19:79:52:27:1b:
76:b2:38:c5:61:76:51:e3:eb:04:42:7f:1a:56:ae:9d:26:3e:
8a:7b:70:fe:5b:c2:a4:26:4f:07:58:cb:0b:e5:a5:d6:f2:cb:
e5:28:f4:3e:e1:37:bf:79:ae:af:10:78:72:26:53:48:28:d0:
c9:46:49:25:26:9a:22:a2:c9:a0:7a:76:2c:ee:18:0f:aa:f0:
40:4d:8b:68:e4:10:30:ea:cc:bb:eb:af:a7:12:ae:69:c8:a2:
19:d5:bf:76:d9:19:fe:6a:68:4b:e0:9b:dc:df:b0:fb:51:a7:
23:c2:66:56:5e:58:95:89:86:c5:00:4e:8c:5f:28:7d:59:df:
04:5e:b1:16:e2:d3:bf:c1:f7:a3:99:7c:3b:1d:0d:36:b1:f8:
83:3d:07:b8:6c:1f:2a:dd:f1:38:7a:0c:99:6a:0d:d0:63:cd:
f4:c8:74:4f:6d:68:2f:86:70:ff:7c:29:6d:ff:a7:b8:d5:61:
e6:20:9b:ed:51:87:cb:64:eb:a4:69:26:f6:80:bb:b6:db:d6:
a9:1f:b0:7e:43:5b:05:a6:56:16:a0:84:75:1f:a2:29:b8:70:
97:b4:99:01:ac:8c:e4:76:76:8c:8e:0c:64:91:23:0f:8d:20:
a8:bb:96:30
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCAMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzU2QjcxMTAvBgNVBAUTKDgzRDk2RjFERUE3MkE5OUQyMzRCNDQ1NkQ2RjY2NzVE
QzdFNjA2MUUwHhcNMjYwNDA0MjIwMTUwWhcNMjYwNDExMjIwMTUwWjAYMRYwFAYD
VQQDEw02OWQxOGE0Zi02YjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3GOxDyGxzmROum7mCcbySaDPcSibAJKgIrkiT0J9cIH/yadM1hgmwgdY/ZH6
jivDoCy1nCnTBJZXdQQ3XurbX+OTalqAfWuOdHKlYKvjcQ64ImuJei6ddk3eZ9v9
erMmMrYaFrJViBiSlrV7Ly+mHwZPMTXoJXeEgFB9axZeD2ZwRdSibHhyqm/WX4KA
XRDy4wbv91BiEkV+y0uexV2RgxcqwKyEgU5B6/n5gdrAQgqOOxrAPSh4TP3NxLFx
sRe0jmHZWWwpd67R1gNk+4iRBG+1Gn334hC7oeuf4Ss70fmWPD3jqkzLI3cMg4QB
WAQ9urUtjzFGe7r0N2GDXPAmNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNBp/+B+
a/vvNV+JCc4lboxLFubNMB8GA1UdIwQYMBaAFIPZbx3qcqmdI0tEVtb2Z13H5gYe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTZCNy85NUVGN0RCQTk2
N0QxMUVCQURENTBEMkNDNEY5QUUwMi9nOWx2SGVweXFaMGpTMFJXMXZablhjZm1C
aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2c5bHZIZXB5cVowalMwUlcxdlpuWGNmbUJoNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NTZCNy85NUVGN0RCQTk2N0QxMUVCQURENTBEMkNDNEY5QUUwMi9nOWx2SGVweXFa
MGpTMFJXMXZablhjZm1CaDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqDi4R6p5EH7iueqgTxl5UicbdrI4xWF2UePrBEJ/GlaunSY+intw/lvCpCZP
B1jLC+Wl1vLL5Sj0PuE3v3murxB4ciZTSCjQyUZJJSaaIqLJoHp2LO4YD6rwQE2L
aOQQMOrMu+uvpxKuaciiGdW/dtkZ/mpoS+Cb3N+w+1GnI8JmVl5YlYmGxQBOjF8o
fVnfBF6xFuLTv8H3o5l8Ox0NNrH4gz0HuGwfKt3xOHoMmWoN0GPN9Mh0T21oL4Zw
/3wpbf+nuNVh5iCb7VGHy2TrpGkm9oC7ttvWqR+wfkNbBaZWFqCEdR+iKbhwl7SZ
AayM5HZ2jI4MZJEjD40gqLuWMA==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:50:35 2026 by rpki-client