
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft
File: -9GoSKH4mo0k2wtoF6CH-y313wg.mft (raw, json)
Hash identifier: F5ui/bD+xmlKxFakoKwKTs+Yfvt1GcPYLb5H/l+HRTo=
Subject key identifier: D9:2F:1C:F9:2A:39:46:DD:22:84:B1:20:08:EA:0F:53:D8:C2:B3:AE
Authority key identifier: FB:D1:A8:48:A1:F8:9A:8D:24:DB:0B:68:17:A0:87:FB:2D:F5:DF:08
Certificate issuer: /CN=A91BAFCE/serialNumber=FBD1A848A1F89A8D24DB0B6817A087FB2DF5DF08
Certificate serial: 02B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9GoSKH4mo0k2wtoF6CH-y313wg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft
Manifest number: 02B3
Signing time: Tue 27 Oct 2026 01:37:40 +0000
Manifest this update: Tue 27 Oct 2026 01:37:40 +0000
Manifest next update: Tue 03 Nov 2026 01:37:40 +0000
Files and hashes: 1: -9GoSKH4mo0k2wtoF6CH-y313wg.crl (hash: XL2lEWl4QWXUHWA2aziP701Ik0ow/G17kUNOlwr2X7A=)
2: 37C8FE80B2A211ED9A5C4B53C4F9AE02.roa (hash: 8Y4nrhPY6RsS1NE1gpg04ierg266aCYEgZiZ3ft65yY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.crl
rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9GoSKH4mo0k2wtoF6CH-y313wg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 01:37:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 697 (0x2b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BAFCE, serialNumber=FBD1A848A1F89A8D24DB0B6817A087FB2DF5DF08
Validity
Not Before: Oct 27 01:37:40 2026 GMT
Not After : Nov 3 01:37:40 2026 GMT
Subject: CN=6ae00064-95b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4c:52:75:06:ad:d0:d5:b4:f7:33:a4:fd:cd:
82:3f:01:13:7a:93:16:0c:7b:1a:5a:d5:a4:bc:73:
dc:b5:e9:81:3d:67:73:7e:52:5d:cc:bf:a9:4d:e1:
ec:c8:84:db:a3:68:7c:7e:6b:f8:25:7a:a5:ed:90:
0c:47:b2:bc:86:b5:73:04:3b:d2:35:8a:20:2d:6c:
43:8b:25:82:7e:a6:a1:75:a1:9b:38:e4:d5:7e:95:
68:76:af:2b:42:2a:d8:a8:cd:5c:dc:e7:59:86:68:
63:16:0f:9b:d5:43:03:10:19:7c:0d:1b:2e:85:39:
88:59:87:cd:9c:c6:48:b0:06:78:93:52:b6:f7:b1:
34:c3:95:04:18:f2:8a:21:96:0c:9c:6b:b8:fa:a6:
e1:2a:55:6f:19:ce:0e:73:55:f5:e2:02:2c:a7:c8:
43:5b:67:ac:9e:21:f1:4e:4c:52:bd:f7:9c:cb:2c:
8b:d2:97:2f:9f:05:e0:0d:f0:f8:10:63:bd:0c:a4:
9e:6d:98:f2:f5:92:2e:4a:4b:9a:aa:1a:04:21:03:
02:61:63:dd:29:fd:01:61:29:73:17:ef:6d:55:66:
6d:2b:bd:88:21:5e:1b:d0:92:13:e4:40:7d:0d:a7:
18:89:c5:16:e0:5f:bc:56:1a:00:bb:66:21:65:38:
20:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:2F:1C:F9:2A:39:46:DD:22:84:B1:20:08:EA:0F:53:D8:C2:B3:AE
X509v3 Authority Key Identifier:
keyid:FB:D1:A8:48:A1:F8:9A:8D:24:DB:0B:68:17:A0:87:FB:2D:F5:DF:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9GoSKH4mo0k2wtoF6CH-y313wg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:3e:4f:c8:36:f0:53:57:d4:4e:68:63:fd:1e:31:eb:ec:eb:
f7:99:1d:61:2a:b4:dd:c8:67:e4:ba:c9:91:0f:be:54:49:95:
e7:fa:9e:bc:e5:1f:c6:7b:be:03:47:12:9d:ef:19:a9:b8:9c:
3b:eb:c1:0a:f5:b3:c4:13:43:95:37:5b:2c:6a:18:87:4a:cc:
a3:d1:5e:f6:c9:d7:5b:0e:7b:28:03:74:f5:8e:05:07:cf:99:
42:d5:d2:d3:07:58:9e:6d:3c:da:51:db:bc:f5:36:aa:51:35:
f7:15:0b:f3:be:05:d0:47:bc:bf:92:8a:c9:aa:15:da:09:e1:
8e:ee:c4:10:23:b3:c5:f6:f3:32:94:2e:c5:42:d9:d1:6c:88:
a7:bb:89:2f:3e:76:04:23:90:04:5c:34:d7:08:1a:4c:c9:3c:
c4:42:92:ad:a1:8b:e2:98:1b:b0:8e:9d:70:e4:e1:a6:93:3e:
ff:2c:b4:47:79:d5:ad:4a:ac:9d:60:cf:10:e9:95:de:01:5a:
4b:87:f6:9f:f4:43:c5:2f:02:22:66:d6:c9:1d:1a:1f:74:cb:
2d:b2:c3:04:8b:2a:8d:5d:d0:99:39:f2:d0:7a:46:0c:2c:bf:
7e:1e:b0:15:af:ca:99:31:f9:4d:98:95:ee:c3:d7:e1:49:7b:
32:a4:06:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:10:57 2026 by rpki-client