
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.mft
File: g4n9Rv74flk96Bz_3N8guiynYB4.mft (raw, json)
Hash identifier: /6AwufX4u2H59ZHlXd+gQ02mqJ5SVupzunD0jDrBi9g=
Subject key identifier: 95:D7:5B:8F:16:F2:0D:BF:E6:9B:67:1F:06:6D:FC:65:06:7F:83:A1
Authority key identifier: 83:89:FD:46:FE:F8:7E:59:3D:E8:1C:FF:DC:DF:20:BA:2C:A7:60:1E
Certificate issuer: /CN=A91475BA/serialNumber=8389FD46FEF87E593DE81CFFDCDF20BA2CA7601E
Certificate serial: 0913
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4n9Rv74flk96Bz_3N8guiynYB4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.mft
Manifest number: 090A
Signing time: Tue 22 Sep 2026 20:03:51 +0000
Manifest this update: Tue 22 Sep 2026 20:03:51 +0000
Manifest next update: Tue 29 Sep 2026 20:03:51 +0000
Files and hashes: 1: g4n9Rv74flk96Bz_3N8guiynYB4.crl (hash: 7seHtCNYo+EFvC/ebx5wjBGDAqKZD0jUfQPd14Rjk64=)
2: D8831B4A4E8411F19692FE9BB2833773.roa (hash: AmaSg04K09nhgDvkJFll07EOLr2ig9e1az30iEGIY3w=)
3: 1E1D32C22FF311EC9220256BC4F9AE02.roa (hash: rQBPOBvkThW7+7E7jubPbgFdB5SrjXafLnjRjSwdJcM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.crl
rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4n9Rv74flk96Bz_3N8guiynYB4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 20:03:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2323 (0x913)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91475BA, serialNumber=8389FD46FEF87E593DE81CFFDCDF20BA2CA7601E
Validity
Not Before: Sep 22 20:03:51 2026 GMT
Not After : Sep 29 20:03:51 2026 GMT
Subject: CN=6ab2df27-b37a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:22:07:26:e0:dd:c3:9e:19:75:ef:14:1e:27:
78:7f:f2:5c:4d:16:00:57:59:65:43:a3:e0:5f:95:
65:96:7c:3b:f1:71:c4:3d:0d:1a:ba:da:39:43:86:
35:45:5b:4f:22:eb:44:68:71:bc:0f:fe:3c:d1:f4:
7a:dd:3f:17:19:b8:fd:68:3f:96:db:c1:7e:71:33:
f4:e8:35:12:f4:73:bf:be:a7:2e:18:7b:0a:41:c5:
43:0f:f0:21:35:86:58:2a:f5:fb:d5:13:1e:20:4c:
be:e4:ff:f9:c0:2f:06:95:20:61:b3:9e:31:e5:ec:
c9:15:7e:08:4c:71:20:0e:5b:d5:32:a7:52:57:e0:
1e:b5:bf:67:4c:ff:fa:f6:f2:b9:a4:6e:0f:d5:b7:
c3:e7:fc:44:47:32:b0:af:54:70:23:3b:7d:2d:d0:
42:5c:2e:6e:89:9c:03:52:b6:38:ff:fe:44:0a:d3:
ec:d9:52:59:ba:31:02:66:27:8f:65:be:e8:98:06:
57:f1:ce:b0:8d:4c:6f:04:1e:7f:1c:c3:9e:e0:45:
68:c1:ab:97:53:8a:f7:bc:a1:cf:83:03:8e:61:26:
2c:d1:2a:f6:00:d6:d1:29:8f:95:0f:d9:0b:ba:55:
55:d1:99:3b:f5:49:eb:16:a4:93:15:94:8c:60:d7:
02:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D7:5B:8F:16:F2:0D:BF:E6:9B:67:1F:06:6D:FC:65:06:7F:83:A1
X509v3 Authority Key Identifier:
keyid:83:89:FD:46:FE:F8:7E:59:3D:E8:1C:FF:DC:DF:20:BA:2C:A7:60:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4n9Rv74flk96Bz_3N8guiynYB4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:c5:9b:7a:87:ac:fa:19:42:6e:0a:1a:b4:77:c8:5e:8d:b7:
6c:11:21:72:37:16:12:bb:52:7b:7e:d7:f4:3b:df:af:6e:a0:
97:e6:9f:68:2d:03:e8:54:47:60:ad:bf:d7:0b:e8:7e:5f:95:
3d:10:93:57:94:2c:02:29:aa:60:1c:04:ce:51:5d:e7:ed:c7:
6f:26:86:33:80:32:76:bc:64:81:a1:a9:b1:bb:87:81:e1:fa:
1f:65:3d:50:ba:a2:41:d8:e3:54:fd:87:45:52:c3:ed:f5:51:
4f:af:63:0a:fc:8d:00:9e:fe:e3:db:a6:0c:d9:f0:1f:e2:7d:
12:13:93:a3:32:5d:63:0c:c9:56:0f:bc:aa:d1:66:c9:31:70:
96:67:b5:a1:e9:38:5b:a1:11:8f:b2:d2:35:d9:fb:6c:7f:47:
5c:7b:2b:9e:f0:c9:1e:26:8c:94:dd:95:f7:d3:20:c5:99:69:
e8:48:b5:32:47:bb:c5:90:d9:1d:3e:1a:5e:89:87:0c:da:43:
c9:8c:03:e8:e0:8f:ac:4d:8a:63:72:ff:a1:3b:3e:20:3a:c2:
96:8b:bd:89:d1:90:99:e3:d1:a5:00:01:c9:dc:5d:c7:1e:9e:
97:76:7c:19:6e:94:40:de:ff:0c:d8:8b:dc:a2:e2:7e:71:a8:
98:35:6e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:22:17 2026 by rpki-client