
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft
File: g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft (raw, json)
Hash identifier: 0nAULtviFiRx0qr8sux2RhhfA6zpzWRLFS7+REWLJR0=
Subject key identifier: 8C:DD:B2:08:2A:50:C1:16:9F:37:7D:95:C7:9E:A8:E2:24:CE:C8:88
Authority key identifier: 83:B6:E7:EA:23:BD:C3:A3:8D:60:B4:FF:A2:EF:F5:A1:8F:1D:CD:68
Certificate issuer: /CN=A91AB4BA/serialNumber=83B6E7EA23BDC3A38D60B4FFA2EFF5A18F1DCD68
Certificate serial: 02C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7bn6iO9w6ONYLT_ou_1oY8dzWg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft
Manifest number: 02C0
Signing time: Thu 29 Oct 2026 01:52:41 +0000
Manifest this update: Thu 29 Oct 2026 01:52:40 +0000
Manifest next update: Thu 05 Nov 2026 01:52:40 +0000
Files and hashes: 1: g7bn6iO9w6ONYLT_ou_1oY8dzWg.crl (hash: KmBQvr1SHWoKQ/Zs707v/6hsVCOlByW1qG3NVqcwGNM=)
2: 93E8AC909CA111ED97E7FC20C4F9AE02.roa (hash: Enlt1m5fMgJylVSd5+EcRhxkwS2mrK3Dcl4exqYwjbg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.crl
rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7bn6iO9w6ONYLT_ou_1oY8dzWg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 01:52:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 710 (0x2c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB4BA, serialNumber=83B6E7EA23BDC3A38D60B4FFA2EFF5A18F1DCD68
Validity
Not Before: Oct 29 01:52:40 2026 GMT
Not After : Nov 5 01:52:40 2026 GMT
Subject: CN=6ae2a6e9-75ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:71:03:3b:a5:19:a9:0e:b4:9b:6d:1c:b7:81:
61:db:31:cf:30:f1:c8:25:8d:e4:de:c2:d4:fd:e2:
6e:fb:94:6c:24:77:a4:9e:dc:da:1a:2e:1b:5c:95:
05:d8:e9:b8:2d:e7:67:f5:c0:31:8e:90:e8:b1:6f:
32:b5:a4:3e:87:97:a9:2b:98:1e:ef:8d:e5:53:f6:
87:97:63:04:a8:5b:e7:38:36:77:2b:0e:e9:eb:76:
0d:44:74:d7:36:f1:a0:b4:40:40:fb:eb:dc:27:d5:
07:e3:7e:e5:ed:a0:fa:7d:44:17:0e:90:76:64:41:
84:76:72:c0:55:ca:4a:49:26:d8:0a:bf:6e:fe:d1:
7e:71:85:c9:33:c4:95:6e:d3:17:a7:e1:2c:43:3b:
17:e4:47:66:8d:fc:1e:26:7c:36:04:52:49:5c:95:
bb:3b:7a:fb:5d:56:5e:e8:5f:ea:06:f0:27:7d:ba:
db:4c:6f:c5:fc:d2:49:02:23:d7:52:ac:f7:92:73:
7f:6f:42:db:39:c5:c6:60:3b:d8:0a:38:27:15:b9:
de:be:d1:33:40:87:6b:02:06:c6:12:88:7f:8c:ba:
ad:ff:af:04:cb:92:97:bc:33:79:19:81:1b:0a:f4:
44:d9:35:e8:51:7a:23:74:18:26:8b:9b:f7:b0:12:
37:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:DD:B2:08:2A:50:C1:16:9F:37:7D:95:C7:9E:A8:E2:24:CE:C8:88
X509v3 Authority Key Identifier:
keyid:83:B6:E7:EA:23:BD:C3:A3:8D:60:B4:FF:A2:EF:F5:A1:8F:1D:CD:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7bn6iO9w6ONYLT_ou_1oY8dzWg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:cc:95:e9:52:cf:82:25:a8:fb:0a:ef:17:ec:be:42:89:fc:
91:51:de:da:10:ca:78:e9:f2:d3:76:07:1d:c3:47:7e:8f:75:
c6:cc:75:02:53:86:c2:2d:4f:7b:2f:d1:55:92:85:64:97:d2:
50:9f:b9:d4:57:fd:04:cc:63:70:d7:dd:da:9f:a0:15:e4:b3:
39:fd:41:d2:c0:d3:1d:6b:f0:d2:13:e0:12:e6:c8:4d:2d:92:
82:d2:6f:13:fc:62:e7:47:cf:a4:49:76:2e:0f:92:ee:46:b4:
06:d6:3f:a8:73:d5:4c:6b:fc:a5:5a:0e:13:7b:27:d7:88:70:
b3:73:17:97:00:39:a9:36:54:a0:bd:4f:e9:dc:21:37:83:a2:
9e:45:19:d0:8a:4d:76:df:19:01:82:15:bf:41:c7:21:c5:6d:
dc:a2:72:6a:24:5b:bf:b5:c1:a4:61:e9:35:f4:78:f4:f2:09:
ec:19:f5:a7:bf:aa:c7:d0:77:da:9b:ce:44:16:53:f8:92:dc:
ee:a6:8b:4a:7c:12:ea:4a:57:c5:77:be:e4:aa:9c:79:45:c1:
68:53:15:e6:00:a9:60:1b:f5:93:3f:a1:94:c2:2b:33:9b:ac:
e6:22:79:47:e9:58:3a:96:e6:5c:ef:77:91:35:a1:7e:b8:1d:
a3:1c:ea:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 20:23:53 2026 by rpki-client