
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft
File: gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft (raw, json)
Hash identifier: KtPvYVgJ4GdvrSxTcTBYuBRUGHxA7FSayB2x0+a2Tmw=
Subject key identifier: B6:73:56:45:DD:EE:35:E2:AF:A4:D2:00:2F:0C:3B:9D:30:5B:C5:DF
Authority key identifier: 80:84:01:72:3C:2E:41:84:56:AF:9A:0F:B2:5F:8C:32:1C:49:70:CB
Certificate issuer: /CN=A91D959F/serialNumber=808401723C2E418456AF9A0FB25F8C321C4970CB
Certificate serial: 0871
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gIQBcjwuQYRWr5oPsl-MMhxJcMs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft
Manifest number: 0868
Signing time: Mon 31 Aug 2026 20:50:02 +0000
Manifest this update: Mon 31 Aug 2026 20:50:01 +0000
Manifest next update: Mon 07 Sep 2026 20:50:01 +0000
Files and hashes: 1: gIQBcjwuQYRWr5oPsl-MMhxJcMs.crl (hash: uRPWTbYgU0zC7i46IcffUlx90vg1xTwpasszAOuc/Yo=)
2: F75AEA8A13F111EB950DBC4EC4F9AE02.roa (hash: QgpTu41sM6G7HXGpsEzpZ01ASqr1eYUm5aigZVfQiCw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.crl
rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gIQBcjwuQYRWr5oPsl-MMhxJcMs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Sep 2026 20:50:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2161 (0x871)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D959F, serialNumber=808401723C2E418456AF9A0FB25F8C321C4970CB
Validity
Not Before: Aug 31 20:50:01 2026 GMT
Not After : Sep 7 20:50:01 2026 GMT
Subject: CN=6a95e8fa-2e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fb:2c:09:5f:cd:39:b3:7c:6b:fc:79:69:d1:
02:eb:0e:40:48:43:5d:fa:c9:8e:b1:5b:6c:55:ec:
3c:4f:0f:43:e4:e3:88:b3:3e:64:92:0f:42:ad:4c:
bc:8a:4c:58:df:39:c9:e2:a5:48:86:91:e2:0e:6e:
b8:3c:2a:3a:fe:fd:74:d0:81:66:35:09:10:d1:9a:
e1:6b:28:30:c0:24:41:de:7b:52:4c:81:bd:3d:ba:
3a:81:d2:40:c8:75:2d:9f:db:b4:7e:85:4a:fd:87:
5c:df:9b:7e:dc:64:21:37:f7:05:6c:81:47:d3:a5:
2f:c0:3b:d7:ee:5c:9e:f0:b4:13:9c:d2:f0:47:2f:
32:3c:47:f1:04:5e:94:16:02:aa:f2:61:64:fe:0e:
41:69:2d:ee:b0:e0:5f:36:b6:a3:03:46:1c:d7:27:
03:bb:15:c5:65:e4:a3:aa:9b:56:df:41:66:cb:72:
47:98:4c:e1:b0:3c:af:7a:3f:9c:b8:36:bb:18:38:
cb:c6:37:ee:e9:46:13:6e:1c:b7:2a:58:62:a4:8f:
38:a9:b2:f3:d4:db:24:40:46:ac:05:e0:6b:3d:c5:
48:14:92:3e:82:71:19:13:63:2b:53:da:04:ea:d1:
77:a2:07:4c:5a:7c:69:29:ee:21:e7:33:17:74:c8:
0c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:73:56:45:DD:EE:35:E2:AF:A4:D2:00:2F:0C:3B:9D:30:5B:C5:DF
X509v3 Authority Key Identifier:
keyid:80:84:01:72:3C:2E:41:84:56:AF:9A:0F:B2:5F:8C:32:1C:49:70:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gIQBcjwuQYRWr5oPsl-MMhxJcMs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:19:d3:66:ac:bc:82:8e:5a:ad:9d:fb:9f:97:23:b6:5f:da:
38:97:2b:9d:b6:95:74:2b:ed:97:b7:2f:ce:b6:af:73:e0:7b:
1b:64:7b:f4:ee:ce:0f:11:85:a8:87:fe:ec:2f:2c:ee:ba:9c:
96:a1:6b:f4:56:ee:bc:2c:77:b4:20:48:d0:1d:99:37:76:6f:
28:b3:d6:c1:7c:cd:6f:fc:76:95:8c:99:19:37:e1:8d:14:d9:
85:66:bd:72:d7:4c:45:cf:4e:fc:12:6a:fd:de:07:ac:be:8a:
cc:07:d8:30:3c:d8:f6:74:63:e5:de:05:93:73:a2:38:d6:2a:
27:df:f7:83:f4:62:5b:79:f1:0f:03:34:4e:b1:9d:a5:de:eb:
3c:52:c4:52:12:9a:41:3c:2c:a8:8f:61:71:82:73:3e:41:cf:
61:81:a4:ac:a6:f9:14:8e:d6:cd:5e:a5:93:92:dc:f4:f7:fc:
49:df:83:22:ce:32:ef:30:3b:2b:c3:76:c9:a0:a4:98:3e:e7:
b3:bb:4e:56:16:22:42:12:73:d6:bf:d5:df:58:1e:23:40:0f:
19:ee:ce:13:cd:59:92:c3:95:f6:d5:92:94:b4:fc:ca:b4:38:
39:b6:bf:5a:e9:cd:74:55:9a:ec:0d:8a:1b:78:f9:b3:74:7b:
4c:da:0a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:50:51 2026 by rpki-client