
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft
File: G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft (raw, json)
Hash identifier: PKSFJAT5Fh7aIbIiIgVSW1wh2D9o9NKwsT0VzGDXxXg=
Subject key identifier: 53:85:45:13:01:58:10:F3:1C:28:CA:FD:51:DD:2B:8A:C2:4C:D5:E5
Authority key identifier: 1B:F5:A8:D9:4C:E0:6C:E3:01:FC:35:D8:69:F7:0D:74:0D:70:97:52
Certificate issuer: /CN=A91F67BB/serialNumber=1BF5A8D94CE06CE301FC35D869F70D740D709752
Certificate serial: 126C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft
Manifest number: 1238
Signing time: Mon 28 Sep 2026 17:11:14 +0000
Manifest this update: Mon 28 Sep 2026 17:11:14 +0000
Manifest next update: Mon 05 Oct 2026 17:11:14 +0000
Files and hashes: 1: G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl (hash: DjXa+JzbftJgM4UxczkVDfyA3U098T6lG/h9eZpB53o=)
2: FAC7FE320F0311E997412A4EC4F9AE02.roa (hash: ltuiI8TZuMv/G/t/Ztpq7bP81fIn8XtBMrkmf8/fbBQ=)
3: Dqq1tGyC7QKsGkE_JU9qm81pIok.asa (hash: 5ReH80uBNUXzosiolo4iz2crDaXpf4sn97Erg+mH9Hk=)
4: 294F19380E5111E988F3C34BC4F9AE02.roa (hash: rpxBRilXsPyWwD0R9BLQdILf/nkG4kP94dMzRqlmlYE=)
5: FB675E140F0311E997412A4EC4F9AE02.roa (hash: WZDgNlhW0pwPMejNqxRBtwXZLqcsEeCsrEz1azRWYbQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl
rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 17:11:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4716 (0x126c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F67BB, serialNumber=1BF5A8D94CE06CE301FC35D869F70D740D709752
Validity
Not Before: Sep 28 17:11:14 2026 GMT
Not After : Oct 5 17:11:14 2026 GMT
Subject: CN=6aba9fb2-2508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:85:41:ed:aa:14:8e:cc:5d:ec:8a:8f:e6:ee:
4f:79:65:a3:d9:73:3f:93:ec:a5:fa:05:c6:f7:4a:
f6:f3:3d:86:de:a3:9c:bf:03:bb:88:58:5a:e0:3c:
5d:7a:b1:cb:89:75:13:de:0c:9e:51:ab:11:e6:d5:
63:7f:39:f7:ea:cf:5f:11:96:8d:3d:27:c2:da:b0:
95:d3:5c:3d:f9:1c:a5:a0:db:c5:97:6e:f7:8d:fb:
cd:da:e3:e1:b4:c4:90:0f:88:f7:75:dc:b3:14:3b:
e6:07:59:bd:81:3a:dc:96:7a:6b:74:19:81:8b:7f:
c9:23:20:34:5e:5e:d7:12:bf:71:34:34:0e:54:cc:
be:9d:6a:ba:4f:de:38:63:1c:35:77:97:65:0d:24:
1e:57:fd:16:53:91:1c:ac:46:87:e1:f8:ba:84:e7:
f2:97:ce:4a:55:79:ac:f3:b3:8d:4e:48:33:d4:57:
21:d8:0a:51:6e:c1:34:95:46:c4:d4:3e:64:b1:82:
61:a7:5c:55:16:b5:3c:b9:e5:a6:f8:d0:76:8a:10:
5f:cb:c2:83:1b:11:53:3b:0f:7c:b3:64:02:b4:72:
4a:92:fa:f1:fa:b4:88:56:df:e4:29:40:06:d7:3b:
6b:95:19:4e:26:9b:cd:20:8d:f2:df:0a:04:c8:c1:
31:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:85:45:13:01:58:10:F3:1C:28:CA:FD:51:DD:2B:8A:C2:4C:D5:E5
X509v3 Authority Key Identifier:
keyid:1B:F5:A8:D9:4C:E0:6C:E3:01:FC:35:D8:69:F7:0D:74:0D:70:97:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:e9:0f:51:66:52:c2:d1:db:11:9a:d3:14:77:2b:58:7e:a2:
07:f7:6b:b2:af:7f:17:23:7a:cc:80:cb:17:57:f1:f5:e0:35:
97:be:56:cc:8d:1f:bb:c2:41:a4:fa:7e:3d:b4:1b:46:fd:79:
50:6e:15:4b:45:a1:a5:7d:e1:f1:c9:bc:be:29:2c:d3:c8:10:
a5:64:ca:7d:f5:b8:77:42:67:c2:4b:e0:73:37:db:17:7a:5e:
ab:81:3b:4f:cd:67:8f:95:e6:35:2a:08:72:d3:55:ba:75:5e:
1a:38:f8:cb:bd:a9:a4:cf:2e:1c:c6:d4:b1:d3:12:94:19:83:
1c:8d:79:ef:8d:04:f1:86:38:d2:ff:4f:9d:6d:dd:c9:e3:e6:
23:8a:bd:31:46:cb:ca:ca:77:55:d5:f2:15:4d:cc:2e:75:66:
4a:9b:2e:5a:f4:ac:de:67:f1:21:a4:cf:d0:15:87:3c:c3:a8:
59:bf:64:d0:f1:e4:86:20:89:24:1d:b7:66:5a:ea:49:b0:e5:
e9:a1:be:ff:40:ac:24:b7:33:b2:b7:13:50:ae:ac:c0:1e:16:
ff:8b:e6:1c:c3:5e:08:d7:c6:ac:9b:b0:ab:46:6f:6d:aa:ad:
36:1f:c0:1a:79:46:55:85:01:f3:d0:4f:71:69:8b:b6:a5:9e:
e5:c8:4f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:48:05 2026 by rpki-client