
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft
File: G0cdrc2RIJM1E26s9syYiChlSyo.mft (raw, json)
Hash identifier: +IlRf+Blq2W63Bh53jD7BFXfPKXp3cSrxKos0bMP7EI=
Subject key identifier: 94:3D:2C:D2:0B:A5:6F:0F:85:EA:1E:25:AE:A5:85:69:41:6A:5A:F3
Authority key identifier: 1B:47:1D:AD:CD:91:20:93:35:13:6E:AC:F6:CC:98:88:28:65:4B:2A
Certificate issuer: /CN=A91C9606/serialNumber=1B471DADCD91209335136EACF6CC988828654B2A
Certificate serial: 0E20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft
Manifest number: 0E03
Signing time: Wed 26 Aug 2026 17:48:00 +0000
Manifest this update: Wed 26 Aug 2026 17:48:00 +0000
Manifest next update: Wed 02 Sep 2026 17:48:00 +0000
Files and hashes: 1: G0cdrc2RIJM1E26s9syYiChlSyo.crl (hash: 9U4vWUaQwquH0gwigaNZSpjYhmEwqEn3ybmpdefEujo=)
2: 7A9CD75E23E311F0BB28EA29C4F9AE02.roa (hash: VZEltJw0vEDbOnRvRf9ELAdzaAN+QgrjbGf4Pt5gMhA=)
3: 06370CB2DB9211E9B70EDD2EC4F9AE02.roa (hash: QJuobED8AIYNaA07H0l+GwSOVK0e9Xo+0hZGeA9Tr5g=)
4: 645EF9CADB9311E988E56C33C4F9AE02.roa (hash: giSaWoz0kPjXm5QgA1jXt8OZKatJUwxEOdzcbQiRQwI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.crl
rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 02 Sep 2026 15:13:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3616 (0xe20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9606, serialNumber=1B471DADCD91209335136EACF6CC988828654B2A
Validity
Not Before: Aug 26 17:48:00 2026 GMT
Not After : Sep 2 17:48:00 2026 GMT
Subject: CN=6a8f26d0-70b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fb:7b:26:5d:d3:32:0f:a3:6d:79:0a:19:61:
08:de:20:de:9f:6e:0e:2a:9f:f9:4f:31:22:ef:fa:
b1:76:92:09:a3:49:b7:8d:6c:be:af:ab:e9:3f:b5:
76:42:73:f9:56:45:73:13:78:50:25:ad:f7:fe:b5:
c2:64:84:a6:7a:d9:15:79:7e:55:fe:5d:64:44:13:
92:38:92:78:0a:92:82:a1:af:33:6a:39:f2:04:37:
ad:2b:83:72:70:bd:56:70:06:0e:c9:de:3e:a4:1c:
22:86:52:68:22:35:fc:9f:73:c6:19:be:fe:66:d3:
75:08:42:1d:dc:32:40:cf:6d:a4:af:e6:e9:6c:24:
cc:a4:8e:62:4f:56:31:0a:c2:90:23:7f:c8:8f:8e:
61:1b:be:42:d3:a5:8f:8c:69:b9:21:33:76:fd:fa:
bd:ce:49:ba:79:21:73:4b:50:6d:a4:f4:9e:6d:6e:
f1:8f:b6:1a:8c:ec:a4:02:e6:f7:e9:d7:0d:89:d2:
07:2d:13:ac:ce:43:71:e2:fd:f3:77:3f:38:53:a2:
d7:f7:08:f0:66:a6:e4:66:fa:f6:5d:04:e8:78:b5:
d7:14:2e:1c:2e:c9:0b:87:38:29:64:38:72:47:ee:
1a:3a:d3:ad:0e:ce:18:69:a3:26:9f:ad:7f:2a:57:
41:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:3D:2C:D2:0B:A5:6F:0F:85:EA:1E:25:AE:A5:85:69:41:6A:5A:F3
X509v3 Authority Key Identifier:
keyid:1B:47:1D:AD:CD:91:20:93:35:13:6E:AC:F6:CC:98:88:28:65:4B:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:32:af:c1:49:c6:56:f6:e0:d2:3e:de:d7:c2:e7:f6:05:f1:
d9:70:52:57:24:41:9f:23:53:f3:ea:9a:66:c1:22:8a:07:a0:
83:6e:37:8e:4a:4f:a9:39:fe:1d:2b:37:f5:85:94:6b:26:c9:
f9:5a:70:75:39:a8:bc:5a:96:df:f7:d4:76:6e:d6:c6:e7:6e:
0b:bb:f2:72:99:ec:3a:23:3e:05:fe:1f:2a:24:2a:69:96:b6:
90:18:e8:aa:85:84:82:f1:19:63:4e:85:92:b9:7c:33:60:a8:
ac:54:92:33:5f:ca:f5:e9:8b:c5:bb:40:18:af:46:12:20:d8:
9a:b2:1f:d8:08:1d:79:c0:19:d3:22:1e:c7:6e:a5:07:43:66:
3c:6f:9d:67:ee:87:12:bc:cc:2e:4d:39:b8:7b:1d:f9:9e:5a:
be:07:b1:fa:d1:fb:72:4a:50:6d:a5:c6:6f:7a:d9:22:27:e4:
2d:65:a8:34:7d:59:5c:6d:0e:39:33:c8:b1:ed:c1:2f:cb:f0:
60:7a:26:3a:ad:57:ad:28:8c:56:cc:4f:6f:87:59:99:d8:13:
2f:28:05:32:fc:b5:e2:af:58:ba:cc:b4:52:83:e6:0b:77:17:
c8:f7:9d:d4:2b:ad:86:7f:7a:df:5d:c7:5f:8d:21:d5:ab:6f:
f5:0b:09:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 21:24:46 2026 by rpki-client