
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B3316/2068C062F2C411F08B84E445396F56BC/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.mft
File: gMq7xd4_e5Mn6sTbqNk2U6EiIQA.mft (raw, json)
Hash identifier: D1taODMiUM/YpyuJYvBoqDqrFI7tYz7z9K7ElLsT01M=
Subject key identifier: 78:89:77:C2:C0:F2:81:B5:76:6C:4D:C2:A1:B2:92:1A:11:56:6D:D1
Authority key identifier: 80:CA:BB:C5:DE:3F:7B:93:27:EA:C4:DB:A8:D9:36:53:A1:22:21:00
Certificate issuer: /CN=A91B3316/serialNumber=80CABBC5DE3F7B9327EAC4DBA8D93653A1222100
Certificate serial: A9
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3316/2068C062F2C411F08B84E445396F56BC/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.mft
Manifest number: A0
Signing time: Fri 23 Oct 2026 08:04:53 +0000
Manifest this update: Fri 23 Oct 2026 08:04:52 +0000
Manifest next update: Fri 30 Oct 2026 08:04:52 +0000
Files and hashes: 1: gMq7xd4_e5Mn6sTbqNk2U6EiIQA.crl (hash: XKzzgV++K6UdFR2wRm/s4I4cwsNyES5zNBKNYLMlP6o=)
2: 10B9878C243D11F1979A5CDAB9833773.roa (hash: zVqpLd7j0J+K3oi88p50tmt71zBHPtzbECf2RGbri0o=)
3: C96483E226B111F1829C23D9C3833773.roa (hash: xDH8tBv3qmVSVr8LAJxQ8B2DT/UTFhcoFnYkcj6WUeU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B3316/2068C062F2C411F08B84E445396F56BC/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.crl
rsync://rpki.apnic.net/member_repository/A91B3316/2068C062F2C411F08B84E445396F56BC/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 08:04:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169 (0xa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3316, serialNumber=80CABBC5DE3F7B9327EAC4DBA8D93653A1222100
Validity
Not Before: Oct 23 08:04:52 2026 GMT
Not After : Oct 30 08:04:52 2026 GMT
Subject: CN=6adb1525-619f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:72:8d:31:1a:6c:19:26:78:32:72:7f:ce:6f:
b8:59:41:1f:dd:53:a6:b5:3a:64:10:fd:c6:a9:43:
0e:c2:94:ff:e6:c0:5f:10:b0:ce:f2:bc:ae:a5:4b:
7d:d3:da:4e:ad:7d:fb:17:64:ff:96:1c:1c:b3:69:
5a:d8:54:35:5e:ef:36:1e:69:42:8a:b4:59:5a:1c:
8d:b6:03:9a:0b:b5:f1:7a:bf:5c:c4:24:d7:bd:b0:
13:82:ea:9f:a9:72:95:d4:2d:89:cf:70:1c:4a:e5:
32:c6:d9:70:db:69:77:fd:fd:71:66:19:2b:8d:69:
07:af:7c:af:13:e3:e4:d2:25:55:32:ac:d1:8c:52:
24:83:59:3b:81:5b:6e:10:0d:b4:7c:6d:3a:9d:97:
53:83:3d:07:ec:ab:e8:87:f8:c4:17:17:bb:7b:15:
f5:79:fe:74:e8:6f:e1:1b:c2:e4:be:64:86:a6:be:
1c:84:6c:bb:55:f1:cc:45:84:96:62:04:0b:8b:80:
30:9b:75:e4:5a:4d:8b:96:07:a4:ec:55:e9:02:44:
8d:79:c2:56:3f:59:9b:1f:d3:8e:df:7f:2f:e2:7d:
cd:87:01:73:92:05:90:87:93:26:f7:4c:a1:1e:cc:
5f:07:51:ae:2b:77:7b:14:1c:d1:34:24:ad:5c:86:
0c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:89:77:C2:C0:F2:81:B5:76:6C:4D:C2:A1:B2:92:1A:11:56:6D:D1
X509v3 Authority Key Identifier:
keyid:80:CA:BB:C5:DE:3F:7B:93:27:EA:C4:DB:A8:D9:36:53:A1:22:21:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3316/2068C062F2C411F08B84E445396F56BC/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3316/2068C062F2C411F08B84E445396F56BC/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:2f:8f:f8:84:e3:b2:0a:10:d5:63:c2:74:d5:ed:31:d9:f8:
ae:d5:07:9c:1c:5e:a2:ae:62:26:14:9f:6a:d9:ea:92:77:e6:
66:a7:7a:fa:d9:e2:c1:ed:4e:5f:a7:04:d4:2a:b0:e1:37:0c:
9f:22:30:7b:4c:2d:3c:52:a6:03:23:80:b8:0a:79:bb:e9:41:
d6:ed:3b:ed:63:d1:0f:08:d2:9e:6b:a1:1f:b1:67:fe:09:fc:
09:88:83:65:f5:89:aa:b7:9a:b6:9a:ea:65:99:d7:c5:67:4e:
a1:61:17:be:13:79:1a:d2:a0:20:8b:73:b5:9b:26:ea:55:be:
73:00:8f:c8:32:3d:8b:97:e4:f7:34:8c:a4:2c:c5:fb:d5:40:
53:78:bc:62:56:01:56:0e:e3:ef:eb:c9:5c:ac:08:ae:85:97:
79:f2:f9:3d:e3:91:46:b5:99:b0:83:78:17:dc:fc:d7:c8:2d:
75:c9:75:6f:8b:78:d5:9d:44:15:02:76:a9:64:ed:c5:17:0a:
f2:0e:87:a2:65:20:6d:88:48:e1:5a:76:30:b2:00:a5:13:71:
24:2f:1a:72:ac:1a:54:b5:d0:7a:e6:3c:b3:74:4e:98:1e:47:
f2:b3:19:22:9d:97:f4:5a:1f:45:f2:cb:4c:91:80:7c:e1:63:
fc:d9:38:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:48:42 2026 by rpki-client