
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft
File: 509GTECGWe0lidtmTOjvamxgDEc.mft (raw, json)
Hash identifier: 6j8NJnoRuSx/8nBajz3SAAi2SNmZus5MATVvrxkW+tU=
Subject key identifier: A9:48:FA:40:55:4E:87:81:8D:94:8C:FE:D9:27:4A:4B:C6:99:15:2F
Authority key identifier: E7:4F:46:4C:40:86:59:ED:25:89:DB:66:4C:E8:EF:6A:6C:60:0C:47
Certificate issuer: /CN=A91A06F2/serialNumber=E74F464C408659ED2589DB664CE8EF6A6C600C47
Certificate serial: 0C26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft
Manifest number: 0C13
Signing time: Fri 04 Sep 2026 18:46:23 +0000
Manifest this update: Fri 04 Sep 2026 18:46:23 +0000
Manifest next update: Fri 11 Sep 2026 18:46:23 +0000
Files and hashes: 1: 509GTECGWe0lidtmTOjvamxgDEc.crl (hash: oHUeTnLgfRA+tiXEMkCtDUAXt5P80hEExnarxznEKGY=)
2: D40428EC3D5511F18320D810A8833773.roa (hash: GiqC1fPItzwUUjM6WaOHq6c0vxZNE0S017OV+sd3TxQ=)
3: 8B37D2C40D2511EFA2E4D985C4F9AE02.roa (hash: Nnnq4X2pr12xKRIifzfba52zTnL3E4FSIZx5q2aHomI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.crl
rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 18:46:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3110 (0xc26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A06F2, serialNumber=E74F464C408659ED2589DB664CE8EF6A6C600C47
Validity
Not Before: Sep 4 18:46:23 2026 GMT
Not After : Sep 11 18:46:23 2026 GMT
Subject: CN=6a9b11ff-f00a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f7:b1:b9:e1:f3:4c:1b:63:ff:d1:4d:0b:cc:
ba:44:db:2e:6f:40:76:91:24:cd:72:ed:fb:8b:75:
72:56:77:10:d4:cd:e8:83:34:28:e6:7b:7e:b5:ca:
84:97:d6:a9:7f:47:6a:1c:79:f6:08:d2:ac:5f:27:
79:ef:58:12:04:c7:42:1d:86:a1:e8:93:d6:5e:3d:
7c:30:a5:bb:77:8d:5e:ec:64:51:25:4a:da:6d:91:
bb:ba:14:91:49:f1:52:54:97:b1:e5:a9:6b:ca:14:
eb:5e:59:37:35:eb:7d:5f:3b:12:24:d1:0a:54:a0:
2c:76:68:3d:64:ce:7f:52:d8:f0:31:58:c3:fd:3c:
4c:b5:8f:9f:d5:96:3a:b1:2a:3b:5a:16:18:25:0b:
b4:07:17:fc:96:a6:88:c4:72:8e:6c:83:bd:9a:6b:
51:b9:d7:1c:52:00:4e:ac:86:af:a4:ff:aa:55:7b:
37:b9:75:a7:24:37:49:d0:62:e0:83:d7:29:8e:19:
d4:75:0a:93:9c:0c:8c:d0:e1:95:48:86:56:ff:e1:
e3:b0:07:15:19:68:7b:d3:86:63:37:24:5d:e2:12:
a1:9f:e5:0c:78:91:6a:4f:e7:dc:47:b6:3a:b9:61:
4b:9b:6f:0a:0f:b3:2a:87:b0:c3:c4:85:31:bc:99:
48:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:48:FA:40:55:4E:87:81:8D:94:8C:FE:D9:27:4A:4B:C6:99:15:2F
X509v3 Authority Key Identifier:
keyid:E7:4F:46:4C:40:86:59:ED:25:89:DB:66:4C:E8:EF:6A:6C:60:0C:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cc:00:2d:a2:b0:1c:4e:f6:cb:7f:9a:12:84:d7:19:10:d2:4a:
ae:6d:b5:6a:45:60:68:ee:1a:af:bd:1c:b1:f0:a3:a2:7a:7c:
02:6c:c9:cf:d3:a5:b8:8a:a9:b6:50:62:f9:b9:79:18:74:58:
a7:32:2e:f3:44:89:c6:1d:4f:6d:eb:02:3b:1a:97:87:de:11:
c0:5c:d4:52:dc:65:40:91:7c:09:26:bc:8d:f3:ae:2b:37:1d:
a6:6a:94:0b:b9:43:bd:04:0f:77:bd:f8:fe:d7:08:49:90:66:
5c:af:fb:53:5b:7a:4a:1b:44:98:6d:ed:02:69:f8:3d:f7:d7:
84:a9:fd:35:b5:5a:5c:0d:55:08:9f:9c:32:4d:21:25:39:3b:
54:c2:72:1a:ea:d5:84:d4:7e:b4:f2:e1:cc:f2:bb:42:6c:52:
de:23:c4:88:6b:dd:61:55:1d:e1:c1:75:d6:1c:59:bc:05:2d:
4e:f2:29:9d:e4:2d:fe:ca:2e:68:f2:a6:d2:c1:96:42:c8:3f:
a1:2c:81:42:79:2a:2a:f2:cd:db:bc:49:7d:89:7c:3d:2b:61:
bf:c6:28:4b:47:15:57:99:d6:7f:e0:08:dd:92:1b:54:d1:00:
d1:e0:23:7e:2f:cd:c1:44:6e:53:fc:5e:df:d2:4a:0d:48:67:
c4:a3:10:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 11:40:56 2026 by rpki-client