
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft
File: g1GgqJRYpHQmpXCgKQH45lQuguI.mft (raw, json)
Hash identifier: x+5bNf07h6kPwUVv14Qd5h45GavmaxNvBOMj5wK4AF4=
Subject key identifier: 34:E0:55:1E:63:AD:18:5D:25:90:C4:C0:1D:8A:1F:CC:8B:DE:32:16
Authority key identifier: 83:51:A0:A8:94:58:A4:74:26:A5:70:A0:29:01:F8:E6:54:2E:82:E2
Certificate issuer: /CN=A91B7D3D/serialNumber=8351A0A89458A47426A570A02901F8E6542E82E2
Certificate serial: 054F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft
Manifest number: 0538
Signing time: Thu 08 Oct 2026 23:45:04 +0000
Manifest this update: Thu 08 Oct 2026 23:45:04 +0000
Manifest next update: Thu 15 Oct 2026 23:45:04 +0000
Files and hashes: 1: g1GgqJRYpHQmpXCgKQH45lQuguI.crl (hash: hJw7/uI2rai4EqMFsOYI3kTsjyf+oBx2n3rEyJ4pLAI=)
2: D3E15ECEA1E611EDABFD7D7FC4F9AE02.roa (hash: kPi4zM9MhBs1Z7XrTJy2yFMDPKRgd24Q9Ibk3GjMnUw=)
3: D516EA2AA1E611EDABFD7D7FC4F9AE02.roa (hash: vxznBiBVR6YDAJK7LuojHusJdEYCXrwVVLv7TWoRtB8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.crl
rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 23:45:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1359 (0x54f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7D3D, serialNumber=8351A0A89458A47426A570A02901F8E6542E82E2
Validity
Not Before: Oct 8 23:45:04 2026 GMT
Not After : Oct 15 23:45:04 2026 GMT
Subject: CN=6ac82b00-3140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a5:16:59:57:9b:de:ad:83:3e:37:17:85:98:
d3:fe:22:ed:22:29:8a:0f:1b:76:d1:17:b8:f2:e5:
51:9a:ea:ba:49:50:3b:a1:3d:6c:09:85:cb:73:1e:
6d:7b:ef:98:c0:11:26:32:26:1c:56:72:20:99:d5:
e7:96:46:12:85:ee:23:72:c4:0b:2f:ed:32:1b:21:
cb:cf:30:ee:10:e2:cd:59:2e:c7:1a:07:01:66:11:
e6:ba:ea:fa:27:9c:6a:7e:25:28:72:5d:d1:3d:e0:
e6:c1:a6:0e:fa:bb:a3:8c:0d:96:ca:6c:fe:a9:9a:
ec:7c:27:9f:72:81:1a:2d:37:90:68:cd:e0:87:c1:
d6:c1:b3:d6:d4:19:19:b6:08:ec:20:a9:90:6f:52:
8e:3e:55:b3:41:6b:f4:45:74:20:4b:fb:aa:1d:60:
f8:db:0b:53:87:bc:96:20:17:41:20:1e:09:6f:7d:
24:f1:e7:03:92:10:71:5e:92:b0:c7:43:28:4d:5d:
d9:42:26:29:af:f4:4e:67:b8:c6:2b:7c:9b:39:f6:
7c:2f:6a:45:97:d0:31:77:29:36:54:8e:d9:01:2e:
03:5c:61:8f:be:ae:3f:ef:b7:7c:b1:0a:9b:ef:79:
8d:52:43:57:72:70:fa:24:dc:6f:c0:16:48:74:ce:
7c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E0:55:1E:63:AD:18:5D:25:90:C4:C0:1D:8A:1F:CC:8B:DE:32:16
X509v3 Authority Key Identifier:
keyid:83:51:A0:A8:94:58:A4:74:26:A5:70:A0:29:01:F8:E6:54:2E:82:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d5:f3:b9:38:42:4d:55:ca:fb:a3:d9:bd:8e:8d:6a:af:83:b4:
ae:29:3f:98:6c:c9:57:80:6a:6d:60:3e:e3:71:87:ef:0e:7d:
16:a7:aa:d4:a3:44:25:c5:dc:a1:66:1b:3f:8c:60:1f:e8:29:
27:86:92:cc:ee:72:68:a8:3d:75:a4:95:4a:75:dc:c8:af:08:
96:35:7f:3e:62:3b:a1:ff:25:5a:ef:02:7f:c8:e2:5b:ec:70:
b8:45:07:f4:4b:66:28:20:01:e6:33:30:23:bb:b4:43:f7:2a:
c5:a9:9e:5b:dd:ac:e0:c8:19:c1:0a:57:af:c4:47:09:af:46:
22:e2:fd:a9:20:13:8b:67:04:ed:1f:6a:55:68:d3:19:65:70:
03:d5:89:df:7f:47:71:9d:80:e9:a0:d2:e6:af:da:b9:7d:50:
10:a0:17:31:f2:96:4c:89:31:77:e9:69:c1:d8:e8:92:70:ff:
46:1e:0b:94:a0:50:43:56:2b:ac:e3:e4:d3:e5:30:e3:9d:ec:
da:80:40:18:30:58:8f:26:44:1f:19:67:e7:f3:16:05:70:f9:
4c:4d:08:58:78:ce:6f:4f:9d:2e:a8:ee:4b:57:65:40:bb:0a:
5a:9a:0d:4b:ba:53:7b:97:27:f6:28:71:d3:dd:43:5e:e3:eb:
47:0b:33:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:04:54 2026 by rpki-client