
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft
File: b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft (raw, json)
Hash identifier: pd8mJix1NsnyH6GR88+E2Gl0ftT/p+1cr+jNQgU9x28=
Subject key identifier: 68:90:D1:3C:0C:73:F1:F4:51:CE:9E:B6:13:12:09:2C:DE:11:67:B9
Authority key identifier: 6F:F1:A2:4E:7F:54:F2:EF:0C:60:5E:0E:06:FC:8A:46:C5:44:D6:D3
Certificate issuer: /CN=A91CBE4E/serialNumber=6FF1A24E7F54F2EF0C605E0E06FC8A46C544D6D3
Certificate serial: 0257
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft
Manifest number: 0248
Signing time: Wed 07 Oct 2026 02:56:35 +0000
Manifest this update: Wed 07 Oct 2026 02:56:35 +0000
Manifest next update: Wed 14 Oct 2026 02:56:35 +0000
Files and hashes: 1: b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl (hash: Cfv1w1wdvHWap2l4YCsMrdlK4AqJhOjb5kRyGUxAVxs=)
2: 273A3FAAF3FC11EFB697C52FC4F9AE02.roa (hash: U8FE/i1E0e1VdjYBpJbEe4K4AhYHyaPy2XZDjc+/jlI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl
rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 02:56:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 599 (0x257)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CBE4E, serialNumber=6FF1A24E7F54F2EF0C605E0E06FC8A46C544D6D3
Validity
Not Before: Oct 7 02:56:35 2026 GMT
Not After : Oct 14 02:56:35 2026 GMT
Subject: CN=6ac5b4e3-05ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ae:f9:13:f0:76:95:f0:c4:13:1f:0a:94:8b:
5c:56:35:d0:04:df:ef:81:e4:7d:39:8b:cc:92:1b:
7b:e0:e2:06:ec:15:43:38:c3:f9:fc:f1:8e:27:50:
25:fa:b6:cc:07:a2:2e:4f:07:41:d9:b9:ad:4f:52:
14:2d:31:d6:4c:76:80:91:65:50:8a:67:07:7f:0f:
ca:ea:56:7b:50:0d:cd:00:72:92:b4:85:3b:43:52:
8b:83:5f:39:66:7e:91:17:a4:4a:38:40:42:0e:b7:
9a:e1:3c:fc:66:27:df:7a:6b:02:f5:a8:86:41:58:
4b:f0:f0:a9:98:8b:71:9c:75:2f:eb:2d:e0:37:7c:
cd:39:68:d6:cc:99:b7:e9:6f:12:f1:b1:3c:8f:6e:
91:e5:ee:16:7d:58:58:5a:d3:5a:d7:05:9e:53:e2:
18:c5:ac:56:f2:ab:7f:73:a2:dd:2e:18:5b:20:4b:
ac:82:ef:b8:0a:4e:4d:74:14:f2:ad:8b:ba:a4:8c:
83:dc:7d:79:1f:18:75:55:00:33:c6:02:00:97:41:
f1:b0:39:50:c5:16:64:e2:14:08:cb:73:4e:41:3a:
94:7f:2c:16:d3:2f:17:59:27:22:6a:85:eb:e1:c9:
60:99:ed:8a:05:a8:1f:70:f2:de:7a:d9:ca:3d:bd:
1e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:90:D1:3C:0C:73:F1:F4:51:CE:9E:B6:13:12:09:2C:DE:11:67:B9
X509v3 Authority Key Identifier:
keyid:6F:F1:A2:4E:7F:54:F2:EF:0C:60:5E:0E:06:FC:8A:46:C5:44:D6:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:f7:af:6f:08:41:f0:27:83:d9:0c:4e:1c:2d:bf:cd:86:25:
95:91:52:86:92:7e:83:84:98:e5:48:82:86:3f:3e:bc:93:a3:
58:c3:ce:f1:78:57:57:1c:e1:2b:73:c1:be:06:bf:5e:f0:a3:
52:f2:e3:28:ef:0b:94:f6:07:2a:6d:0f:f0:f9:ba:57:fd:bb:
53:f8:de:b1:1a:09:87:01:31:49:af:ff:c6:7a:71:f5:c1:c8:
26:ec:47:ff:b9:41:20:87:4a:3f:d8:5c:a8:f2:91:03:22:e5:
67:21:a1:16:3c:b2:29:c0:68:74:3c:e1:48:82:9e:cd:f4:e2:
31:8d:c7:33:b7:8d:54:b4:50:63:6b:ee:f5:26:33:ba:d8:70:
6c:eb:7e:c6:97:0c:50:5c:1d:81:2f:97:52:13:9b:e5:8c:8a:
be:7f:73:4b:8c:d3:26:ba:a7:ab:51:09:6f:7d:94:57:05:c1:
dd:39:1d:4b:29:04:a7:bc:18:2b:b6:dc:05:1a:41:4e:9a:64:
b4:34:4d:db:df:5c:00:17:db:72:58:99:b2:19:e5:12:b3:4b:
12:21:da:ba:1e:94:24:0d:ae:bd:26:23:11:ba:01:06:a3:f3:
82:3a:d2:29:90:89:fd:26:3d:fc:5d:33:3f:7d:1a:ef:c4:a2:
83:41:33:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:33:07 2026 by rpki-client