
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FCA47/95E76D6024D411F18AAA0942AB833773/nGKQqKEuiIZBN0PX8QV39DkWnH0.mft
File: nGKQqKEuiIZBN0PX8QV39DkWnH0.mft (raw, json)
Hash identifier: 6kp1PJ1bMfZqMQbv3rB3PpbM0q4woEv5hNo7yr5HrKs=
Subject key identifier: 94:62:5E:57:67:44:F2:00:82:82:5A:CD:FA:71:88:04:CD:D0:8C:C1
Authority key identifier: 9C:62:90:A8:A1:2E:88:86:41:37:43:D7:F1:05:77:F4:39:16:9C:7D
Certificate issuer: /CN=A91FCA47/serialNumber=9C6290A8A12E8886413743D7F10577F439169C7D
Certificate serial: 75
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nGKQqKEuiIZBN0PX8QV39DkWnH0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FCA47/95E76D6024D411F18AAA0942AB833773/nGKQqKEuiIZBN0PX8QV39DkWnH0.mft
Manifest number: 73
Signing time: Tue 27 Oct 2026 08:11:52 +0000
Manifest this update: Tue 27 Oct 2026 08:11:51 +0000
Manifest next update: Tue 03 Nov 2026 08:11:51 +0000
Files and hashes: 1: nGKQqKEuiIZBN0PX8QV39DkWnH0.crl (hash: 8WReRLvP19au4DMyslDI5+ZjWM3mS4i9FSJo4eoGtBs=)
2: E3BDC64224D411F191B1E656AB833773.roa (hash: sIg+Xdz5Qyeb7OrBu/I41LeMBOQVEGrHUaZBzwqV+U4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FCA47/95E76D6024D411F18AAA0942AB833773/nGKQqKEuiIZBN0PX8QV39DkWnH0.crl
rsync://rpki.apnic.net/member_repository/A91FCA47/95E76D6024D411F18AAA0942AB833773/nGKQqKEuiIZBN0PX8QV39DkWnH0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nGKQqKEuiIZBN0PX8QV39DkWnH0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 08:11:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117 (0x75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FCA47, serialNumber=9C6290A8A12E8886413743D7F10577F439169C7D
Validity
Not Before: Oct 27 08:11:51 2026 GMT
Not After : Nov 3 08:11:51 2026 GMT
Subject: CN=6ae05cc8-3a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:12:09:5d:d8:82:81:14:b5:76:d5:7c:2f:7e:
6b:58:7e:c2:bd:0f:89:2a:83:89:54:b5:83:55:08:
fb:8b:54:ab:99:3b:39:38:f4:c9:f1:8b:06:60:0d:
c3:5c:cb:aa:0c:ea:02:b5:46:bc:be:36:27:8d:f8:
de:72:cf:8e:4e:37:20:56:06:cd:88:c9:23:19:4f:
e3:fc:12:ff:87:f4:67:84:43:ef:7a:c7:a8:85:af:
6f:f4:e3:5c:32:da:ea:c1:36:4e:ae:c3:ca:89:22:
0d:e9:50:ea:7f:3c:44:8e:0f:ba:2a:60:31:d3:e8:
5b:ef:1a:df:c8:28:9b:39:dc:6a:bf:62:35:15:34:
a1:e1:ae:a6:d2:3a:19:59:21:de:7e:14:c1:02:51:
28:db:71:3c:fa:b5:ee:39:71:c3:37:78:c9:d6:0f:
11:77:3c:2e:d2:12:d2:d3:46:70:73:b4:0f:e7:e3:
8e:86:d8:53:de:bf:2a:2c:c4:28:5c:01:18:ca:45:
71:93:96:2c:cc:dc:26:80:04:d9:9c:c6:71:60:31:
c2:d4:ec:ca:65:9d:20:ce:cc:46:d0:42:b4:27:65:
69:99:15:22:95:5a:3c:f8:fd:4e:0a:53:7c:0e:0d:
4c:e4:e3:25:d8:7b:14:ff:00:d0:c1:4e:35:7b:70:
4f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:62:5E:57:67:44:F2:00:82:82:5A:CD:FA:71:88:04:CD:D0:8C:C1
X509v3 Authority Key Identifier:
keyid:9C:62:90:A8:A1:2E:88:86:41:37:43:D7:F1:05:77:F4:39:16:9C:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FCA47/95E76D6024D411F18AAA0942AB833773/nGKQqKEuiIZBN0PX8QV39DkWnH0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nGKQqKEuiIZBN0PX8QV39DkWnH0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCA47/95E76D6024D411F18AAA0942AB833773/nGKQqKEuiIZBN0PX8QV39DkWnH0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:45:96:58:f7:9a:d0:af:13:e6:9b:49:1b:bd:0a:eb:94:52:
60:8c:3b:61:90:96:56:58:46:84:34:e7:0f:80:e9:7c:8c:b3:
aa:72:22:9c:d5:fa:ed:a3:e6:f0:b6:49:5b:d6:43:4a:64:45:
a3:41:f9:e1:24:5b:fb:86:62:01:3a:e5:34:f8:49:e2:d1:d6:
29:a6:d1:d7:ca:b6:39:0f:cf:c7:d8:ef:d1:12:34:0e:6e:42:
b5:7d:f6:f2:b2:36:7f:1e:d1:51:5f:b7:99:86:0e:19:6a:7b:
f4:ea:32:46:83:7a:30:6f:ce:89:56:63:46:09:f4:2d:09:70:
71:16:35:8b:95:39:16:77:fc:c5:8c:0b:d4:b3:9d:01:a9:61:
6a:d8:b2:19:6e:28:31:4d:ad:61:d1:25:cc:73:f8:9d:92:c2:
ee:1e:87:11:61:ab:1c:1d:65:22:6e:c9:5f:9f:a9:6a:1c:92:
22:f4:13:82:63:e4:4b:e4:ad:6e:8d:84:08:05:e5:c8:78:e1:
1e:f7:d9:44:03:85:97:4c:2d:d1:fd:34:42:7c:1c:a6:2f:cb:
b8:6f:3d:4c:c5:d8:d5:65:96:bf:6d:c0:8a:d9:41:b1:0e:7d:
57:02:d2:01:55:f7:bd:04:4d:e0:8d:64:d0:b0:14:1e:08:c5:
98:e7:d1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:37:01 2026 by rpki-client