
$ rpki-client -vvf rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft
File: g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft (raw, json)
Hash identifier: JhNOGevZRs4n1/dnEEtjG5JoFEIi4JLO6kzEKRNn9og=
Subject key identifier: E6:5B:82:70:46:20:31:23:4D:DB:BA:DD:CE:E7:F8:BE:D9:9B:FC:A4
Authority key identifier: 83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E
Certificate issuer: /CN=A91756B7/serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E
Certificate serial: 083C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft
Manifest number: 07A6
Signing time: Thu 16 Jul 2026 22:32:06 +0000
Manifest this update: Thu 16 Jul 2026 22:32:06 +0000
Manifest next update: Thu 23 Jul 2026 22:32:06 +0000
Files and hashes: 1: g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl (hash: bGtT/vmw4PnzpIPRzF1Wbj+BcYeN9a119B23zMwE1GE=)
2: 756E0BBCEAE711EE88CD8641C4F9AE02.roa (hash: mEjk2Pk9woi+pPgo0RiqSj7ndxUZNk/b2xcKwDxNp3g=)
3: 993EAAD4522911EFA600C035C4F9AE02.roa (hash: RHnBGV6zzAX096qelds19ug+GhjfXzLG9IQAG1LM73U=)
4: DEA0CC98F49311F0AD6894B8746F56BC.roa (hash: E1Wma8m3n7Qn18gf288l/1qSE7XCw5a0fYq5hrV8oiI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl
rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 22:32:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2108 (0x83c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91756B7, serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E
Validity
Not Before: Jul 16 22:32:06 2026 GMT
Not After : Jul 23 22:32:06 2026 GMT
Subject: CN=6a595be6-0a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:94:f8:7d:29:c6:4d:a3:62:f2:e7:64:9f:0c:
96:65:25:91:b0:e5:36:18:f8:ce:37:4f:e1:33:32:
54:94:5c:34:ac:fc:29:9c:8e:23:e1:9c:eb:ed:7f:
d6:bf:52:95:0f:d8:b3:fa:b4:16:d9:85:32:0e:1a:
9e:55:dd:e5:8b:2e:bc:2c:9a:46:78:4b:b5:bd:d6:
7e:b1:7a:4b:bb:9b:e7:a6:af:ea:c8:3d:61:ae:30:
a3:0a:7b:83:1c:e9:6c:38:e9:34:79:09:c4:49:2f:
67:79:0d:53:3c:9c:15:33:50:11:cf:5e:c4:6c:75:
c2:b5:18:3e:3b:fc:9b:76:14:8a:bb:b9:e7:4c:9c:
cf:a9:f6:f8:6c:3c:51:95:f7:45:7a:56:e8:64:b7:
93:b5:35:75:6e:14:22:ce:1d:37:56:42:61:64:91:
5a:d3:6e:2d:d1:a4:57:13:76:cc:cd:f3:60:f9:d5:
86:fc:4e:38:9d:6b:8f:bd:28:94:46:6d:e5:43:29:
12:b7:ae:d3:cc:c0:a8:6e:0a:b6:90:00:38:e8:a5:
53:03:52:91:a0:6f:eb:fe:34:4c:70:79:71:e0:cb:
67:a0:0f:a3:5c:78:33:63:b1:1b:8f:e7:a2:df:2f:
38:f6:20:ce:02:95:dd:a4:94:30:2b:09:6f:8c:85:
95:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:5B:82:70:46:20:31:23:4D:DB:BA:DD:CE:E7:F8:BE:D9:9B:FC:A4
X509v3 Authority Key Identifier:
keyid:83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:f0:a2:75:81:83:de:9e:b3:08:29:10:aa:9a:2d:46:9d:65:
f4:40:d3:89:2c:02:aa:e6:37:ee:21:ee:48:2b:11:4a:61:b7:
64:49:8d:39:b4:76:9e:5a:6f:09:c4:a1:1c:ed:cd:82:22:50:
dc:8a:76:3c:cd:29:33:ae:17:1d:c5:f6:29:f4:27:5f:e3:fe:
d7:8e:28:df:49:88:8a:8b:e7:0e:ed:9a:a8:69:d7:1d:2a:03:
ab:e6:32:6c:ec:1a:a6:11:dd:8d:43:12:eb:67:1a:bd:d9:90:
42:be:32:3d:32:7e:47:09:48:e8:ff:83:29:c5:ef:c5:76:f6:
68:80:18:15:d6:a1:a4:23:aa:6d:c1:94:39:4d:ca:bd:3b:4b:
69:f6:e9:56:7e:3b:c7:3c:48:20:2a:64:ff:23:6e:87:e4:72:
e5:e7:6d:bf:13:bc:55:12:e6:2f:fa:49:89:b7:f2:df:94:49:
a0:e9:86:c2:c2:5b:89:e4:a2:a7:1a:17:ed:7a:a3:4d:91:0a:
c5:2b:3b:01:53:9c:7b:a5:c3:c0:03:62:76:91:20:2c:30:c0:
15:00:34:8a:f7:4f:b3:54:b6:8d:20:94:e8:f2:7c:56:79:83:
ba:fe:70:09:c3:b2:6c:f6:5e:29:52:dc:b0:be:f2:d3:3b:36:
e1:9f:79:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 11:25:24 2026 by rpki-client