
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft
File: gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft (raw, json)
Hash identifier: E72paxHmhEp0jRccd3Jake/UgpaPIynWCvzqrsEJ4Yw=
Subject key identifier: 21:33:8E:EB:83:DE:67:9E:01:B3:87:0D:BD:04:73:AA:58:82:2C:70
Authority key identifier: 81:1D:E1:1E:7E:DC:1C:10:76:05:59:EE:B3:9B:FD:66:D6:9A:EA:46
Certificate issuer: /CN=A91E6BEF/serialNumber=811DE11E7EDC1C10760559EEB39BFD66D69AEA46
Certificate serial: 0E9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gR3hHn7cHBB2BVnus5v9Ztaa6kY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft
Manifest number: 0E91
Signing time: Thu 08 Oct 2026 17:48:20 +0000
Manifest this update: Thu 08 Oct 2026 17:48:20 +0000
Manifest next update: Thu 15 Oct 2026 17:48:20 +0000
Files and hashes: 1: gR3hHn7cHBB2BVnus5v9Ztaa6kY.crl (hash: 13Mfk+ruPDsI4c4dBc0OBeG+k4p7frWQ/cyEM46azUM=)
2: FEBD6C62C4B511E9B7D53A7FC4F9AE02.roa (hash: hq+tKlDXD0cr1+NNnQhRcgkOsx9XsBg1fiLnYmKzsUw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.crl
rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gR3hHn7cHBB2BVnus5v9Ztaa6kY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 17:48:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3742 (0xe9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6BEF, serialNumber=811DE11E7EDC1C10760559EEB39BFD66D69AEA46
Validity
Not Before: Oct 8 17:48:20 2026 GMT
Not After : Oct 15 17:48:20 2026 GMT
Subject: CN=6ac7d764-d729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:17:1e:6a:e6:8e:97:19:04:86:71:a3:40:75:
77:f2:93:94:cd:7c:40:90:c8:c6:3b:c7:91:51:46:
67:99:5d:f8:ea:9a:6b:64:46:09:99:61:a2:3b:c1:
c3:d7:01:12:8b:3d:47:98:e7:bc:e1:86:4a:c9:8e:
8b:63:ab:ae:11:39:68:d0:e7:a6:49:d2:fe:28:d1:
d5:7d:3f:2a:a6:1b:50:c4:92:1e:ed:a1:58:17:36:
c2:91:08:ba:ef:af:2b:d8:83:2c:da:30:56:f4:6a:
23:d8:d3:2a:8e:77:1e:33:45:0d:db:86:2a:b6:5d:
bb:5c:fd:a5:06:34:2b:15:60:39:19:63:5d:cd:cd:
55:62:fe:01:0a:1e:4c:a4:3a:45:4e:68:76:64:28:
4e:d7:0b:6c:e7:fc:1b:69:51:05:57:95:a6:9d:00:
cb:ad:c8:99:36:21:b9:dd:57:16:20:98:2e:a5:bf:
c8:06:cc:a4:b6:28:f8:34:13:f5:f4:3f:cf:60:0f:
64:ff:90:34:52:89:c2:82:6b:84:11:59:81:0e:f5:
09:7f:a9:1b:3e:86:8c:71:ee:c7:d3:10:ba:47:1e:
d6:b9:0d:92:a4:81:59:96:d9:14:2e:4c:93:7a:5c:
35:4d:18:32:d4:af:6b:44:ff:22:f8:f7:1b:27:d9:
b9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:33:8E:EB:83:DE:67:9E:01:B3:87:0D:BD:04:73:AA:58:82:2C:70
X509v3 Authority Key Identifier:
keyid:81:1D:E1:1E:7E:DC:1C:10:76:05:59:EE:B3:9B:FD:66:D6:9A:EA:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gR3hHn7cHBB2BVnus5v9Ztaa6kY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:43:00:44:b5:b8:60:df:f1:80:4c:65:fa:6e:6a:ba:cc:b6:
7f:fe:53:00:e4:96:56:49:4b:c4:f2:de:3f:a4:1c:2e:87:8c:
df:6b:0e:84:41:68:d8:0b:41:96:f1:cf:24:b6:0d:eb:21:ba:
22:bb:90:93:7e:49:ad:76:67:55:59:e8:2b:53:ec:7d:b1:ad:
4a:79:1d:37:ee:63:4d:d0:d2:6b:22:b9:e7:e9:3c:40:1f:0b:
22:b2:e9:18:3c:e1:98:45:af:c4:13:64:75:fc:93:40:1c:ff:
a1:b2:37:5d:09:fe:60:3b:ff:17:c1:2a:86:5a:c9:8f:12:f1:
a9:dd:2a:39:d5:62:bf:75:5a:ff:55:53:9b:5d:8c:c7:85:3c:
fd:39:c7:7b:7a:7b:5f:36:59:4e:63:08:22:08:28:ef:78:db:
94:48:99:9b:7a:65:56:bb:04:27:8a:51:e6:cf:0b:06:9c:87:
23:93:2c:52:24:3b:6c:af:8c:2d:e9:e0:44:ce:b3:7e:5e:21:
da:88:ee:b3:e5:37:91:06:79:ca:81:fb:bb:41:89:69:f0:fe:
50:8a:0c:d6:ec:99:8d:68:08:bd:ba:1c:52:0e:08:30:9b:b5:
62:98:f7:7a:52:d7:36:0a:e5:2c:ee:65:0a:19:31:45:09:52:
99:dd:aa:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 04:35:56 2026 by rpki-client