
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91836E8/239884D2AD0111F18D2EB3A23811F970/gn1qPQ8d6ye8eMrtRNqYfCa30_I.mft
File: gn1qPQ8d6ye8eMrtRNqYfCa30_I.mft (raw, json)
Hash identifier: FpMFap/Xr7zfF/uDbD7H9tYo5uXuxG0UqxGI/kA6Ydc=
Subject key identifier: A0:94:0B:C9:45:71:CE:AF:FC:0C:76:83:32:42:23:6E:09:58:F4:14
Authority key identifier: 82:7D:6A:3D:0F:1D:EB:27:BC:78:CA:ED:44:DA:98:7C:26:B7:D3:F2
Certificate issuer: /CN=A91836E8/serialNumber=827D6A3D0F1DEB27BC78CAED44DA987C26B7D3F2
Certificate serial: 07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gn1qPQ8d6ye8eMrtRNqYfCa30_I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91836E8/239884D2AD0111F18D2EB3A23811F970/gn1qPQ8d6ye8eMrtRNqYfCa30_I.mft
Manifest number: 06
Signing time: Thu 17 Sep 2026 09:37:06 +0000
Manifest this update: Thu 17 Sep 2026 09:37:06 +0000
Manifest next update: Thu 24 Sep 2026 09:37:06 +0000
Files and hashes: 1: gn1qPQ8d6ye8eMrtRNqYfCa30_I.crl (hash: t/Jv8dfx/m4/ZPOKYRcyaaYePeYt46xnczQib+Dw4o4=)
2: 685D69B6AD0111F1A96326FB3811F970.roa (hash: LvvIKRLn4rPKFRZbpCVDTbL1kJsWB+XQ6Nuu2eljFkM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91836E8/239884D2AD0111F18D2EB3A23811F970/gn1qPQ8d6ye8eMrtRNqYfCa30_I.crl
rsync://rpki.apnic.net/member_repository/A91836E8/239884D2AD0111F18D2EB3A23811F970/gn1qPQ8d6ye8eMrtRNqYfCa30_I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gn1qPQ8d6ye8eMrtRNqYfCa30_I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 09:33:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91836E8, serialNumber=827D6A3D0F1DEB27BC78CAED44DA987C26B7D3F2
Validity
Not Before: Sep 17 09:37:06 2026 GMT
Not After : Sep 24 09:37:06 2026 GMT
Subject: CN=6aabb4c2-ad07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:db:46:aa:3b:ca:24:81:8a:1a:d2:ba:dc:fd:
0d:07:31:17:3b:42:10:19:f6:c5:96:b2:76:87:cf:
0b:5d:ae:4a:2a:cb:6d:12:5a:47:46:25:6c:56:1b:
90:b9:27:d2:35:00:43:8d:b7:c0:a4:99:c9:7a:df:
dd:4b:57:d3:f2:fe:9c:fc:45:ee:31:62:95:12:f1:
a4:1a:21:84:57:2b:3c:51:97:1b:9b:9b:15:9b:2e:
55:74:3f:9c:04:ca:df:ab:91:26:24:be:c5:b6:c3:
09:05:af:37:9e:fd:8c:e2:a9:fc:5e:91:c5:c4:83:
a7:07:97:df:c8:53:24:fd:9e:cb:c2:57:73:7c:27:
b6:51:8d:cc:a3:a4:8c:b3:db:af:e6:42:20:11:c0:
31:95:b8:2f:69:c5:9b:74:61:5e:96:08:48:cb:76:
8c:20:d9:4f:d1:c0:d2:f3:5e:37:0a:8f:a4:ca:0e:
77:0a:9b:50:69:b9:8f:91:3f:cf:8d:48:93:ad:09:
3d:b1:40:06:c5:61:4f:e1:d2:e0:c9:cb:a4:b5:d4:
7d:01:aa:dc:82:5e:84:4e:2e:1f:53:5a:3c:7f:4c:
e0:80:e8:08:ad:eb:19:bb:66:29:17:8b:c7:52:a2:
58:cd:30:0b:36:40:46:4e:ae:df:ee:7f:bf:cc:6d:
a9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:94:0B:C9:45:71:CE:AF:FC:0C:76:83:32:42:23:6E:09:58:F4:14
X509v3 Authority Key Identifier:
keyid:82:7D:6A:3D:0F:1D:EB:27:BC:78:CA:ED:44:DA:98:7C:26:B7:D3:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91836E8/239884D2AD0111F18D2EB3A23811F970/gn1qPQ8d6ye8eMrtRNqYfCa30_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gn1qPQ8d6ye8eMrtRNqYfCa30_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91836E8/239884D2AD0111F18D2EB3A23811F970/gn1qPQ8d6ye8eMrtRNqYfCa30_I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:fb:29:d6:42:eb:a6:07:db:f9:55:4d:04:f2:95:24:ff:d0:
7c:52:25:f2:1d:9a:f2:63:c3:34:e8:b0:0d:19:67:e3:2f:27:
16:b3:6d:e4:4d:90:db:3b:12:b6:ae:49:c5:4a:90:91:47:3c:
5f:30:a8:7c:63:ce:dc:99:2b:72:a6:af:e8:e5:81:73:17:2f:
e4:a0:48:b6:63:7f:3b:69:3d:cc:3e:b4:13:3b:16:a1:66:08:
27:08:1f:6e:52:08:49:03:09:58:17:aa:05:0b:31:14:fe:46:
fa:76:ad:e4:2d:7e:72:bd:aa:12:87:58:24:6b:e7:da:05:eb:
1c:b3:69:33:67:98:35:06:ba:e8:1c:cc:00:f1:9a:59:fa:a3:
50:32:99:09:3d:ca:14:15:76:04:c7:29:1c:07:e6:d2:d2:40:
1e:0d:22:bf:13:8d:88:ba:6e:32:a0:03:ca:2f:17:0c:49:09:
c4:de:0e:4e:f3:c1:42:b1:9c:37:54:ad:97:f3:2c:ae:15:c2:
b6:74:9b:80:ee:6b:b9:e0:b4:b4:93:a2:50:b2:cf:7b:53:ad:
72:0d:b0:67:ed:f7:cb:06:79:ab:74:f1:10:d8:63:ea:f7:c4:
3b:db:8f:b7:81:c2:fe:72:d0:e6:f6:1c:58:b6:34:48:75:b9:
6a:cc:b7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 12:16:52 2026 by rpki-client