
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.mft
File: gHwED6kB5dhpWmU03mbD1qC_vMU.mft (raw, json)
Hash identifier: vJ8B+c8MNwbSKMjkGgQUpEZFzxSZRZcQjvkBWWrddpA=
Subject key identifier: AB:F1:16:6B:20:C3:74:78:4C:FD:31:10:50:F5:6D:B7:CF:C7:EB:BC
Authority key identifier: 80:7C:04:0F:A9:01:E5:D8:69:5A:65:34:DE:66:C3:D6:A0:BF:BC:C5
Certificate issuer: /CN=A91BC3F1/serialNumber=807C040FA901E5D8695A6534DE66C3D6A0BFBCC5
Certificate serial: 01D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gHwED6kB5dhpWmU03mbD1qC_vMU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.mft
Manifest number: 01BD
Signing time: Fri 11 Sep 2026 04:00:49 +0000
Manifest this update: Fri 11 Sep 2026 04:00:48 +0000
Manifest next update: Fri 18 Sep 2026 04:00:48 +0000
Files and hashes: 1: gHwED6kB5dhpWmU03mbD1qC_vMU.crl (hash: bFttRAOp0I2hIrh1Ya2gvA8gLMYpWrwn/rqZ7ThA0to=)
2: A697738410FA11EF9A068536C4F9AE02.roa (hash: lzeeMDb5p2SWBBeQKxNMB3dDJPfZPBC3dVUcHVXCC0U=)
3: 7D9F83FE10FA11EFADBBC431C4F9AE02.roa (hash: KbP7kVzHWAr0cCL8qb5P7XMSVn4UE0itefeoDnYZT/Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.crl
rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gHwED6kB5dhpWmU03mbD1qC_vMU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 467 (0x1d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC3F1, serialNumber=807C040FA901E5D8695A6534DE66C3D6A0BFBCC5
Validity
Not Before: Sep 11 04:00:48 2026 GMT
Not After : Sep 18 04:00:48 2026 GMT
Subject: CN=6aa37cf1-d6d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6d:42:92:21:e0:da:13:db:11:3c:fe:a5:12:
76:1a:0b:a5:79:60:c1:0d:fe:7c:4d:2f:c0:7d:09:
a6:1e:ed:41:26:82:a2:85:c2:2f:d3:4c:bc:8c:69:
5c:b7:cb:2c:8a:68:d6:63:74:c8:1d:e1:d4:0e:05:
93:3b:b4:fb:4b:8a:a7:00:00:16:bd:d0:66:c0:16:
a7:73:42:bf:9f:99:55:aa:8f:9d:97:11:41:02:ff:
b3:9b:92:11:4f:77:08:30:8f:14:4e:5d:c1:04:e1:
d6:bf:e7:23:f2:8d:83:5b:d2:5d:ed:51:e8:00:80:
c3:3f:e9:de:9b:88:ad:c9:2e:30:dc:e5:49:92:af:
5c:7f:9e:20:b0:13:67:b3:5a:ca:2d:5e:0c:b0:98:
f7:25:73:18:5d:b4:8b:03:b2:11:46:ff:92:30:97:
7f:ec:8a:35:ae:9d:c2:c3:c6:02:a8:5d:d6:bd:ac:
3a:19:47:5f:11:cb:03:76:0b:35:a1:2b:e6:d5:bb:
94:e2:5c:2a:24:2f:a0:42:01:f2:6d:3d:c3:4d:d6:
36:e1:42:e6:09:4d:77:7b:0e:7e:f3:a8:06:e0:5a:
b7:fe:7a:84:1a:2b:fe:b4:2f:3d:9f:3a:58:8a:93:
f5:87:05:68:a5:d8:82:0d:cb:22:f4:3a:5c:2f:99:
40:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F1:16:6B:20:C3:74:78:4C:FD:31:10:50:F5:6D:B7:CF:C7:EB:BC
X509v3 Authority Key Identifier:
keyid:80:7C:04:0F:A9:01:E5:D8:69:5A:65:34:DE:66:C3:D6:A0:BF:BC:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gHwED6kB5dhpWmU03mbD1qC_vMU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:bc:e4:b7:74:f2:67:28:3b:95:82:4c:d5:2a:58:98:0c:5d:
ac:2f:64:2a:fa:66:6a:dc:52:93:84:d7:15:32:19:ea:2e:60:
f1:07:12:5c:93:41:60:fe:cc:c7:74:0f:12:cb:5a:34:8f:97:
c6:2c:af:00:af:20:50:78:d8:fb:5b:3e:bf:59:55:33:9b:2d:
44:a3:5d:ad:31:28:81:f3:70:85:40:18:c7:17:ad:5a:8c:c5:
e8:5d:98:f6:7e:f7:c6:ba:95:d8:b9:e1:a8:1f:86:36:7f:8b:
6a:c6:c4:cd:19:14:5e:b3:1b:2e:65:c0:d0:c0:78:fa:ec:63:
01:89:07:da:47:22:a3:42:53:e2:fc:ab:0b:d3:0b:88:ce:c7:
a5:f0:b4:b3:6a:23:4f:0c:18:99:a1:9a:f0:a8:bb:be:6d:59:
b1:8c:88:a4:8d:7c:2c:92:9b:7d:27:8c:7a:eb:bb:32:9c:e8:
36:a4:c3:75:a1:00:1a:04:d8:97:10:80:16:1e:33:0e:92:97:
e9:5b:9d:34:cd:a1:a5:16:07:27:e5:58:d7:fb:c2:5d:4d:8a:
60:e5:a5:cd:90:ec:b4:bf:b1:62:5d:49:c1:57:b3:1b:23:cc:
a1:af:89:3e:31:19:98:37:f8:e0:cb:1e:cd:13:a9:94:11:e1:
2c:9a:59:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 12:29:32 2026 by rpki-client