
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft
File: -gRcYwK4c-iDZfqaAhSZtPPFhog.mft (raw, json)
Hash identifier: Jw+nptAaNOTOyB7xJWV1Ahf6iuEYSz/k+PAY0kthAT8=
Subject key identifier: D8:E7:BF:F5:49:D9:05:0C:D5:BE:EC:05:63:59:6D:6A:26:F3:2A:67
Authority key identifier: FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88
Certificate issuer: /CN=A91853D3/serialNumber=FA045C6302B873E88365FA9A021499B4F3C58688
Certificate serial: 0672
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft
Manifest number: 0651
Signing time: Mon 26 Oct 2026 22:40:00 +0000
Manifest this update: Mon 26 Oct 2026 22:39:59 +0000
Manifest next update: Mon 02 Nov 2026 22:39:59 +0000
Files and hashes: 1: -gRcYwK4c-iDZfqaAhSZtPPFhog.crl (hash: 7GNyjmy7QZLXn0G66KPtGLs+ALT6bmZ17fs/2qfaFFc=)
2: 52A1A77A6ECF11F0B2785815C4F9AE02.roa (hash: 99SBr5WJIbWwpgEc6hwr9lvi4BLubRre2gvekG03kuo=)
3: 5C9E3A00E83111F0B570A08B79EE528E.roa (hash: ME2B8uuD8K+ZGXPv64QmrsnI4TiGRtKbpWpIh4aJJVc=)
4: 36C4FAAAA9FC11EEBEF3E64AC4F9AE02.roa (hash: sXo/EfCy1P1hXgj+XVBKjDkQi4E974lDfTItj2KXQOc=)
5: 2DE8D714BB0911F18830CCDB6011F970.roa (hash: 2cb3SSldaYWDRnhkOr8hlJrkJU5y1sh3r/v03ZTIcrE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.crl
rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 22:39:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1650 (0x672)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91853D3, serialNumber=FA045C6302B873E88365FA9A021499B4F3C58688
Validity
Not Before: Oct 26 22:39:59 2026 GMT
Not After : Nov 2 22:39:59 2026 GMT
Subject: CN=6adfd6c0-7690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:66:4d:4f:c2:e2:0a:2b:1f:17:51:e8:59:ea:
66:24:10:18:d8:cc:d1:5b:17:96:f8:5e:33:10:25:
d2:7b:fe:62:8f:fe:43:93:62:7b:b7:06:60:18:be:
f9:cf:2c:60:04:8a:9b:fe:80:8b:a7:22:ca:39:92:
dd:c1:17:5c:56:07:8f:7f:a0:8c:12:36:ff:14:c7:
5f:dd:2a:7f:db:0e:cb:8e:a4:47:7e:52:05:29:23:
c0:da:0f:38:57:55:ec:ed:9c:38:c9:54:98:b8:5c:
61:f0:5f:29:c9:61:69:d6:b3:f9:18:5d:32:54:07:
6b:a2:ab:ec:e4:2b:aa:5b:ad:18:76:fc:ab:9b:f3:
b7:63:b0:47:10:c9:b1:e9:ce:e0:98:43:08:2b:c4:
fa:74:18:f4:59:8e:0c:a5:7a:34:30:27:8a:a2:b0:
ab:92:a7:65:a1:db:c0:8b:4b:78:0b:47:b2:6d:ae:
9e:06:3d:70:80:46:41:3b:9c:14:85:a4:eb:c7:2f:
69:59:4a:cc:32:64:46:d4:0a:66:68:0b:cb:e1:3d:
53:62:cc:6d:79:c8:5d:e1:32:78:27:bd:03:3d:78:
fd:37:8a:a2:20:df:76:88:12:42:1c:45:a8:98:41:
a5:bc:49:6b:1e:0d:65:9c:d9:bb:03:87:b3:4a:8c:
14:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E7:BF:F5:49:D9:05:0C:D5:BE:EC:05:63:59:6D:6A:26:F3:2A:67
X509v3 Authority Key Identifier:
keyid:FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:50:8d:ca:39:22:4b:40:69:42:aa:8b:49:12:f7:88:18:ae:
47:76:09:b1:17:54:08:b2:a4:31:11:f2:7e:51:8d:43:b3:10:
3e:03:7b:73:e8:88:cd:52:7c:72:2a:cc:e1:fa:30:36:36:99:
f4:28:f4:9c:9f:b2:f9:21:47:2b:f5:88:c6:68:05:31:81:61:
31:d1:61:b4:79:5d:f5:90:24:0a:65:fc:fc:f4:fd:08:fe:c1:
3d:cd:6d:e1:7b:49:bc:95:c3:d2:dd:67:38:7e:d7:d1:32:b3:
86:74:ef:7a:82:20:92:21:62:be:fa:7b:db:2c:be:80:98:69:
37:d0:e8:fe:2a:6b:a5:64:f0:a3:1c:31:70:50:23:58:d5:be:
1e:09:dc:9e:da:5d:2a:2e:b3:65:1a:a7:66:45:84:bf:ee:44:
32:8c:b3:fa:17:a9:b1:55:76:32:34:b8:33:f7:f7:69:4b:db:
5c:58:5a:d8:5c:72:c5:b1:00:18:2f:12:d5:41:4f:4e:96:5b:
d4:69:99:36:96:bb:3c:1f:cd:4f:b0:a9:68:87:de:f5:91:7b:
87:22:14:5c:53:6a:23:13:6d:0f:73:0b:eb:e2:af:0e:d6:b3:
3d:0f:b4:38:2d:c2:44:8b:94:71:b5:37:63:7b:55:34:28:3a:
dc:f8:50:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:14:31 2026 by rpki-client