
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB946/646FD6D284D811F196CAEBA85AA30FBC/G6ndjcO37zeOvYfhaOTrnw5JysA.mft
File: G6ndjcO37zeOvYfhaOTrnw5JysA.mft (raw, json)
Hash identifier: QjCOUrYUXK3zywUesVkDw9/arz9aB5NRbRvfvPfZYuY=
Subject key identifier: 6E:0E:6F:C2:18:8A:D4:86:86:82:75:3D:45:C4:71:1A:79:2B:3D:EA
Authority key identifier: 1B:A9:DD:8D:C3:B7:EF:37:8E:BD:87:E1:68:E4:EB:9F:0E:49:CA:C0
Certificate issuer: /CN=A91BB946/serialNumber=1BA9DD8DC3B7EF378EBD87E168E4EB9F0E49CAC0
Certificate serial: 1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6ndjcO37zeOvYfhaOTrnw5JysA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB946/646FD6D284D811F196CAEBA85AA30FBC/G6ndjcO37zeOvYfhaOTrnw5JysA.mft
Manifest number: 19
Signing time: Thu 03 Sep 2026 09:12:03 +0000
Manifest this update: Thu 03 Sep 2026 09:12:02 +0000
Manifest next update: Thu 10 Sep 2026 09:12:02 +0000
Files and hashes: 1: G6ndjcO37zeOvYfhaOTrnw5JysA.crl (hash: eQk04J7/EI33msXQcdv2lnIGjDLbFXq67flQgjXKMSE=)
2: C2B4BDB684D811F1AA5089AC5AA30FBC.roa (hash: ftQaGXx1fIvdKMJy0O9Lu4ioVXxX5G6/noF52zI+HLM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB946/646FD6D284D811F196CAEBA85AA30FBC/G6ndjcO37zeOvYfhaOTrnw5JysA.crl
rsync://rpki.apnic.net/member_repository/A91BB946/646FD6D284D811F196CAEBA85AA30FBC/G6ndjcO37zeOvYfhaOTrnw5JysA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6ndjcO37zeOvYfhaOTrnw5JysA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 09:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26 (0x1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB946, serialNumber=1BA9DD8DC3B7EF378EBD87E168E4EB9F0E49CAC0
Validity
Not Before: Sep 3 09:12:02 2026 GMT
Not After : Sep 10 09:12:02 2026 GMT
Subject: CN=6a9939e3-d9bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ae:43:a7:1c:a8:de:f4:b7:9b:6a:78:f0:bf:
37:98:cd:e6:a6:14:c1:26:41:f3:f5:eb:20:37:11:
8b:31:32:60:77:12:b4:b6:6d:09:46:60:53:39:74:
63:cc:dc:86:6b:4c:6f:15:cc:7e:f7:c7:52:d0:9d:
6e:2c:4b:8a:66:17:0c:39:aa:3d:84:af:05:5d:97:
e1:09:34:d1:6e:ab:6a:49:9c:da:76:21:31:f7:2c:
fb:b8:cc:e0:79:a0:69:ed:bf:83:21:ef:f2:af:12:
56:74:83:3e:87:f1:03:0c:9f:45:45:4f:42:2e:98:
9d:b3:0d:c4:c6:b1:5b:77:be:cf:6b:8e:3a:1b:f9:
11:24:de:e5:20:39:07:f1:a1:d6:96:fc:79:b0:7a:
dc:9b:19:8b:e7:3f:17:38:6f:3f:90:15:74:a0:f1:
c5:d2:76:25:65:79:ad:b9:3f:47:3c:89:42:b2:d8:
ec:02:f2:ad:f7:75:dd:d0:c7:a9:f3:d1:81:ce:47:
12:8e:23:eb:33:70:ea:00:0a:cb:2a:76:ff:8c:b5:
30:dc:19:67:25:b4:d4:b5:fd:1f:23:b4:c0:9d:e3:
f5:d8:18:79:41:88:1b:df:b4:7f:07:cf:79:c9:a4:
0c:e7:24:72:48:63:84:1f:d6:3b:74:a0:f1:30:93:
02:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:0E:6F:C2:18:8A:D4:86:86:82:75:3D:45:C4:71:1A:79:2B:3D:EA
X509v3 Authority Key Identifier:
keyid:1B:A9:DD:8D:C3:B7:EF:37:8E:BD:87:E1:68:E4:EB:9F:0E:49:CA:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB946/646FD6D284D811F196CAEBA85AA30FBC/G6ndjcO37zeOvYfhaOTrnw5JysA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6ndjcO37zeOvYfhaOTrnw5JysA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB946/646FD6D284D811F196CAEBA85AA30FBC/G6ndjcO37zeOvYfhaOTrnw5JysA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:a8:99:b0:9f:ea:b6:fe:8f:5a:8d:c9:8f:7a:ee:04:f1:4e:
c2:fb:da:f4:69:fa:63:7c:de:43:dc:95:ec:06:06:a2:49:01:
e0:cb:28:3b:bc:29:00:1b:15:4e:8a:12:5b:72:fd:5a:ad:cb:
d4:3c:ad:bf:06:f6:d1:7e:f8:82:08:a2:1b:c8:d0:da:4a:7b:
3f:f2:c1:3d:f3:40:ad:80:11:fa:e2:64:88:cd:74:4c:a9:04:
49:4d:44:d4:3e:af:3d:e6:06:cd:d6:1d:8a:2f:b0:7d:4f:e3:
c0:46:a5:a6:ab:20:b3:8f:01:ec:eb:19:a2:f1:9e:b7:af:9e:
19:a8:25:55:56:84:b0:66:8b:d7:5c:33:65:aa:e5:ba:5b:72:
05:7b:f3:e6:e8:0f:e1:a0:d1:ed:e5:73:15:f9:b0:8b:83:3d:
88:a6:43:6f:d2:47:36:25:7a:52:e5:54:23:db:10:66:42:f3:
82:45:1a:ee:ed:b7:fc:d2:e1:c5:2d:10:c9:6f:37:2e:ae:ca:
d9:18:66:cd:2a:2e:4f:91:49:62:54:f3:6b:b9:46:f6:dc:c3:
37:d5:4b:1e:7a:62:b8:4c:e4:c8:76:66:2b:4d:f8:e2:ac:cd:
42:55:d7:57:b3:60:32:4f:28:82:69:23:cd:2e:cc:04:e5:aa:
40:f0:14:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:25:15 2026 by rpki-client