
$ rpki-client -vvf rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft
File: g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft (raw, json)
Hash identifier: ClXT2eAxXKdiHb485l7B6cSKj2Z/3Png0NghHspGO7s=
Subject key identifier: 63:0F:97:91:7D:8C:61:06:65:E3:7C:93:8A:33:5F:A6:5B:1B:1B:23
Authority key identifier: 83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E
Certificate issuer: /CN=A91756B7/serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E
Certificate serial: 07FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft
Manifest number: 076A
Signing time: Tue 24 Mar 2026 21:58:09 +0000
Manifest this update: Tue 24 Mar 2026 21:58:08 +0000
Manifest next update: Tue 31 Mar 2026 21:58:08 +0000
Files and hashes: 1: g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl (hash: XjebRe7d/pdRlovgAxqG8+bYKJeq058j1GNgsIocZC0=)
2: 993EAAD4522911EFA600C035C4F9AE02.roa (hash: 3XVBS/fTqlRh6IIe7RzFiy/Wa0ZSlvIPzHLw+7wGdvQ=)
3: DEA0CC98F49311F0AD6894B8746F56BC.roa (hash: AP8Httvv3MXSN3Zbhstxc7Mc+tY+yxqDGflYpBVgTRY=)
4: 756E0BBCEAE711EE88CD8641C4F9AE02.roa (hash: F9qzDXb2ETVj14lcNUq30Z9sFnnvqbyTNgRyrEZdsMI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl
rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:58:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2045 (0x7fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91756B7, serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E
Validity
Not Before: Mar 24 21:58:08 2026 GMT
Not After : Mar 31 21:58:08 2026 GMT
Subject: CN=69c308f1-34f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8d:ae:e2:fb:40:18:f1:8e:74:b1:9a:27:30:
bd:dc:b7:d2:61:28:0c:3d:68:4a:6a:bd:c7:50:df:
e2:4f:4a:58:b5:00:52:85:f5:65:30:f4:71:b2:c2:
3b:84:4e:2a:90:b1:81:13:94:4f:76:b9:4d:57:05:
35:b7:bf:f9:d4:d7:67:02:7c:6e:a6:3e:85:df:4b:
a4:f0:6b:a4:d7:64:05:23:c7:af:2f:7e:c6:2b:17:
a6:5d:4c:ba:9d:68:cc:34:70:d5:69:71:b2:bd:93:
26:f3:6b:f7:6d:ba:1e:b2:ed:ab:8f:f4:ea:6b:e9:
3f:54:7d:39:15:7c:68:cf:e2:a3:c7:25:f9:77:a9:
6f:ad:64:00:a7:05:6a:72:d5:24:71:2f:ed:75:b9:
b6:23:6e:53:0e:94:bf:4b:14:a0:8f:88:c5:a4:dc:
e9:45:ff:12:6a:bc:42:67:4a:f0:bb:91:0f:01:04:
07:0e:72:51:dc:bf:89:8e:e5:6d:0e:1a:fe:fb:e5:
07:9e:be:e2:8f:70:29:70:0c:60:c3:2d:3e:44:af:
70:c0:0b:4e:8b:2a:5c:53:a4:f2:eb:1d:91:4b:f8:
f3:79:a3:58:d2:9d:8a:66:d2:3e:0a:3b:72:65:d8:
28:fc:ad:16:6a:ba:f6:f1:7a:43:1f:5f:15:d9:be:
07:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:0F:97:91:7D:8C:61:06:65:E3:7C:93:8A:33:5F:A6:5B:1B:1B:23
X509v3 Authority Key Identifier:
keyid:83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:5b:a9:14:cf:79:e4:46:bd:7e:3e:90:6d:eb:1d:eb:b9:20:
9e:db:d6:b9:93:6a:fe:0d:07:e6:e8:9e:38:25:96:5d:e8:0f:
bf:d9:2c:58:fc:70:ab:77:85:cf:f3:6d:a7:3b:0e:eb:cc:f7:
92:43:1f:d8:f1:3c:68:79:3b:c8:4f:66:f0:d4:26:da:85:bc:
40:61:77:d3:b3:33:95:de:87:b4:b9:ef:2f:fa:e1:e4:c8:d8:
40:92:1f:20:02:52:f2:51:42:14:8d:58:89:f6:d2:d4:75:e9:
a1:54:35:42:59:7a:58:55:bb:cb:e0:b2:82:8f:3d:78:f5:75:
34:ca:88:c8:f1:ab:99:b3:4a:46:0e:c8:dd:45:e3:be:dd:ab:
b9:4e:ab:78:58:c7:09:0b:83:72:ca:82:79:68:3a:12:b4:d6:
c5:70:96:9c:b1:03:58:19:c0:5f:26:ed:ed:fc:a2:1b:9c:e2:
28:4d:5a:1d:9f:32:93:fd:6d:dc:66:a1:79:55:d7:0a:ff:48:
73:52:38:48:d4:c8:0a:23:08:3d:7c:d4:da:6d:ba:92:66:53:
99:55:3b:34:06:fa:35:12:06:8c:2b:ba:d4:ef:d4:81:c0:c9:
0c:fe:01:dc:e8:76:ba:72:a7:8c:93:c4:1a:1a:03:44:2c:e2:
be:6b:c8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:42:15 2026 by rpki-client