
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft
File: 4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft (raw, json)
Hash identifier: EEd3yITOZHHKaZd3jrLXeVH/0k8Ty294LwMQSMGA9BI=
Subject key identifier: B0:D8:9E:5B:BE:FF:1D:B6:95:56:F4:AB:0E:3F:2B:9C:AB:DB:38:5A
Authority key identifier: E3:F1:8D:41:20:26:F3:1B:A4:43:EA:33:F5:67:06:FF:B2:F0:F1:62
Certificate issuer: /CN=A91FD8BE/serialNumber=E3F18D412026F31BA443EA33F56706FFB2F0F162
Certificate serial: 01ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft
Manifest number: 01D6
Signing time: Sat 05 Sep 2026 03:30:53 +0000
Manifest this update: Sat 05 Sep 2026 03:30:52 +0000
Manifest next update: Sat 12 Sep 2026 03:30:52 +0000
Files and hashes: 1: 4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl (hash: 1SGeC36Sp0ddzbI85oLBfjIr2HxemdZleWNh4u0OrSM=)
2: DAEB24B0176111EFAB2AD122C4F9AE02.roa (hash: /p0IRebK1ecfFLpUcCA3qAEpMKVqatFf1hx/y6EBTmI=)
3: A475B3E000B511EF96C1B911C4F9AE02.roa (hash: XjHUkWL+sFmZoNR2qFeU0dNbQ2ZM/7PQGFCwI1qnX4A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl
rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 03:30:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 493 (0x1ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD8BE, serialNumber=E3F18D412026F31BA443EA33F56706FFB2F0F162
Validity
Not Before: Sep 5 03:30:52 2026 GMT
Not After : Sep 12 03:30:52 2026 GMT
Subject: CN=6a9b8ced-cbd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:37:26:dd:f5:e4:3e:fd:f8:da:00:58:18:8f:
e3:41:c0:80:e9:43:99:0f:0e:5b:8b:d5:50:1b:e1:
92:51:7e:d9:39:0c:7c:96:f8:0d:90:ae:e1:95:05:
8e:c9:55:58:60:3b:1e:7f:5d:34:9d:98:fe:1b:41:
b4:a9:13:37:4f:7a:98:e4:5a:72:19:ed:b0:2e:69:
8a:c6:14:a5:71:1a:87:20:c0:3e:0d:ab:46:99:1d:
de:28:0d:ce:f2:42:6a:28:a1:ac:64:f6:ba:c7:88:
d8:9a:1b:94:cf:5c:6d:0e:14:1a:53:11:bf:c3:62:
01:95:fd:6a:54:3c:de:9b:26:d8:71:5f:52:8a:0a:
da:02:67:c3:4d:03:60:ed:d8:1a:b4:c6:09:17:42:
a2:d6:3b:39:50:8e:2e:41:d2:4a:92:b1:20:b6:66:
63:77:a5:72:e0:ed:84:5e:ae:d9:2d:37:7d:07:fe:
6b:36:4c:38:33:59:24:e0:5d:b5:b5:b2:5b:bb:db:
f1:ca:be:c5:6d:9c:9a:f9:57:59:c9:7b:a6:13:e0:
6d:63:7a:0b:2f:4e:f2:89:11:0f:33:fe:9c:fb:2c:
b1:03:d6:39:f9:1e:0e:a6:c9:25:54:32:2e:2c:21:
51:02:c9:6e:dd:4f:b1:16:5b:42:cb:f6:8c:37:34:
9f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D8:9E:5B:BE:FF:1D:B6:95:56:F4:AB:0E:3F:2B:9C:AB:DB:38:5A
X509v3 Authority Key Identifier:
keyid:E3:F1:8D:41:20:26:F3:1B:A4:43:EA:33:F5:67:06:FF:B2:F0:F1:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:9a:d9:8f:c9:41:34:3c:0f:eb:23:2c:21:c7:18:ce:92:01:
c3:d3:7e:a9:97:ae:f4:69:d1:6f:dd:5a:75:10:86:66:01:20:
ca:8a:cf:ce:8a:ac:b2:14:05:e5:bf:a1:9b:4c:bf:d6:04:86:
3d:07:43:2a:6d:ae:fd:72:d7:ce:da:c2:1b:21:70:b4:08:6a:
91:05:1a:e7:09:6e:7c:c8:2f:a2:9b:76:34:4e:10:5f:c2:d2:
25:a6:68:fd:76:7c:a0:6a:7b:11:2d:85:c8:82:d2:40:f5:d2:
1b:be:59:1b:cd:8c:00:0b:ed:15:7a:b8:90:3f:2d:55:9b:cf:
fe:ed:b2:8e:e9:fe:3a:87:3e:1a:96:d8:0c:42:bb:e5:9f:41:
fa:32:b9:95:3f:ae:c8:cb:14:0a:89:cf:a1:81:88:ef:6c:52:
ce:2e:e6:a4:bf:a9:66:75:bd:93:aa:2b:79:83:e4:85:ab:37:
78:c9:32:c0:a2:7c:1d:c9:de:2d:8f:20:8a:61:e6:0e:00:37:
dc:8f:db:6f:0d:60:df:eb:de:03:92:a3:2b:30:77:0b:88:25:
e0:42:40:37:a1:e2:94:be:d0:c6:25:0a:11:49:89:e2:13:bb:
e4:35:46:fa:5b:5a:f1:09:f0:9e:d8:b0:fa:ca:66:7c:64:6d:
43:c2:9c:65
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkQ4QkUxMTAvBgNVBAUTKEUzRjE4RDQxMjAyNkYzMUJBNDQzRUEzM0Y1NjcwNkZG
QjJGMEYxNjIwHhcNMjYwOTA1MDMzMDUyWhcNMjYwOTEyMDMzMDUyWjAYMRYwFAYD
VQQDEw02YTliOGNlZC1jYmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnDcm3fXkPv342gBYGI/jQcCA6UOZDw5bi9VQG+GSUX7ZOQx8lvgNkK7hlQWO
yVVYYDsef100nZj+G0G0qRM3T3qY5FpyGe2wLmmKxhSlcRqHIMA+DatGmR3eKA3O
8kJqKKGsZPa6x4jYmhuUz1xtDhQaUxG/w2IBlf1qVDzemybYcV9SigraAmfDTQNg
7dgatMYJF0Ki1js5UI4uQdJKkrEgtmZjd6Vy4O2EXq7ZLTd9B/5rNkw4M1kk4F21
tbJbu9vxyr7FbZya+VdZyXumE+BtY3oLL07yiREPM/6c+yyxA9Y5+R4OpsklVDIu
LCFRAslu3U+xFltCy/aMNzSfcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLDYnlu+
/x22lVb0qw4/K5yr2zhaMB8GA1UdIwQYMBaAFOPxjUEgJvMbpEPqM/VnBv+y8PFi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDhCRS9DNjhFRkY5RUU1
RDYxMUVFOEIzNTY3MzlDNEY5QUUwMi80X0dOUVNBbTh4dWtRLW96OVdjR183THc4
V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRfR05RU0FtOHh1a1Etb3o5V2NHXzdMdzhXSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RDhCRS9DNjhFRkY5RUU1RDYxMUVFOEIzNTY3MzlDNEY5QUUwMi80X0dOUVNBbTh4
dWtRLW96OVdjR183THc4V0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArJrZj8lBNDwP6yMsIccYzpIBw9N+qZeu9GnRb91adRCGZgEgyorPzoqsshQF
5b+hm0y/1gSGPQdDKm2u/XLXztrCGyFwtAhqkQUa5wlufMgvopt2NE4QX8LSJaZo
/XZ8oGp7ES2FyILSQPXSG75ZG82MAAvtFXq4kD8tVZvP/u2yjun+Ooc+GpbYDEK7
5Z9B+jK5lT+uyMsUConPoYGI72xSzi7mpL+pZnW9k6oreYPkhas3eMkywKJ8Hcne
LY8gimHmDgA33I/bbw1g3+veA5KjKzB3C4gl4EJAN6HilL7QxiUKEUmJ4hO75DVG
+lta8Qnwntiw+spmfGRtQ8KcZQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 07:10:39 2026 by rpki-client