
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft
File: gDB5urLx9rO5qsQR30qCw_BqZXE.mft (raw, json)
Hash identifier: jRqtW1T0GucRiUNg7BAv9EU2p+VrTZq3GZYSzC8A1dM=
Subject key identifier: E3:C7:BB:F0:53:2E:DB:6C:C5:30:66:17:08:6F:E6:2D:5E:58:DC:A6
Authority key identifier: 80:30:79:BA:B2:F1:F6:B3:B9:AA:C4:11:DF:4A:82:C3:F0:6A:65:71
Certificate issuer: /CN=A91E5642/serialNumber=803079BAB2F1F6B3B9AAC411DF4A82C3F06A6571
Certificate serial: 0AAA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDB5urLx9rO5qsQR30qCw_BqZXE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft
Manifest number: 0A96
Signing time: Thu 10 Sep 2026 19:31:22 +0000
Manifest this update: Thu 10 Sep 2026 19:31:21 +0000
Manifest next update: Thu 17 Sep 2026 19:31:21 +0000
Files and hashes: 1: gDB5urLx9rO5qsQR30qCw_BqZXE.crl (hash: QWloMgp1BKhiMp6SDoMyQXK6y3mF7NPopBQ+Rcme91g=)
2: 49484A22DDBE11F0A59AB1524A6F56BC.roa (hash: EUoTZeexjkbb7zufCQtahAm8AEeFMiE7APDK7et0hJY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.crl
rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDB5urLx9rO5qsQR30qCw_BqZXE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 19:31:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2730 (0xaaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5642, serialNumber=803079BAB2F1F6B3B9AAC411DF4A82C3F06A6571
Validity
Not Before: Sep 10 19:31:21 2026 GMT
Not After : Sep 17 19:31:21 2026 GMT
Subject: CN=6aa3058a-baff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:55:16:2c:d4:67:3e:e9:a3:fc:c3:60:cf:5c:
1f:1e:6e:ff:9c:d3:cd:0a:a6:dd:fd:f0:2a:66:9b:
d0:80:16:8e:02:33:fd:70:93:60:ce:3d:ae:27:c4:
97:f6:50:ec:ec:d1:8f:4c:b4:e8:d1:45:55:41:fc:
4e:b2:d6:da:aa:86:da:13:79:e1:da:0d:5e:62:80:
b3:f5:45:0a:4f:c9:81:1a:18:93:aa:4d:c0:18:41:
34:7b:1e:94:1a:93:aa:7c:58:d3:55:7c:85:30:05:
65:59:32:ca:f7:0e:d1:25:d3:fb:4a:56:d1:af:d1:
50:5f:22:e3:8a:8e:f2:9f:59:5c:85:d5:14:85:15:
99:08:79:f7:f6:8c:5f:6b:f1:75:17:32:76:de:4b:
20:89:d4:8c:68:c3:48:16:d3:f6:bf:fd:85:e6:95:
ae:30:e5:bb:12:7f:f8:6c:91:87:4c:ce:5e:1a:6e:
92:56:ab:f0:88:83:9f:78:85:d5:61:e3:26:39:be:
14:2e:fd:0c:a5:5b:f6:38:ab:b8:6f:25:13:31:16:
84:84:a7:06:4b:cd:31:cb:d3:62:43:f8:3e:7a:ed:
b4:50:fb:d1:c1:d5:f9:bd:b2:56:77:d8:3c:8e:17:
a1:19:bb:6f:73:8c:92:fc:aa:dc:43:ff:d9:3f:d5:
75:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C7:BB:F0:53:2E:DB:6C:C5:30:66:17:08:6F:E6:2D:5E:58:DC:A6
X509v3 Authority Key Identifier:
keyid:80:30:79:BA:B2:F1:F6:B3:B9:AA:C4:11:DF:4A:82:C3:F0:6A:65:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDB5urLx9rO5qsQR30qCw_BqZXE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:5d:21:a5:67:2a:e5:3a:aa:fd:b3:44:9b:5e:6a:00:f6:dd:
e3:07:be:8e:15:f6:bc:20:07:22:42:57:e6:ff:25:7b:d2:9a:
6d:70:7d:ff:30:98:4a:85:47:35:3e:16:cc:7b:86:df:f6:f6:
e4:9d:ff:84:2a:b6:e7:fd:b6:8d:70:38:f3:75:49:eb:eb:62:
94:9d:eb:a7:f4:e3:e2:f3:08:e8:66:78:05:23:fe:0b:b1:8c:
9a:be:76:60:29:d3:8a:ca:3b:98:a8:73:68:f7:0b:7e:5c:5a:
7d:25:60:2d:11:6e:34:57:7e:73:1a:76:25:12:40:96:57:19:
fb:f3:9d:3e:87:b9:0b:45:d8:e7:25:47:bc:79:7e:8e:21:9d:
ef:fe:7e:16:8e:80:b5:60:15:e5:ba:95:97:e1:35:b5:7b:a1:
a8:26:d8:c0:27:20:55:e4:04:7e:b0:8a:e5:aa:1f:69:d9:ad:
f0:e9:31:37:7d:ed:88:82:99:56:e1:40:21:11:85:57:32:b5:
2c:a0:01:3e:f3:2b:5c:c0:ee:55:51:01:1d:d9:be:a2:71:35:
03:04:41:e2:1b:a2:d7:25:68:4d:85:12:b8:eb:9e:30:9f:48:
3c:d7:23:85:15:70:2c:47:d0:24:03:90:fa:21:42:6e:3f:29:
ec:6b:68:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 08:01:12 2026 by rpki-client