
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.mft
File: GH7u6irWB7ylQi0JLdrMGZCPL9c.mft (raw, json)
Hash identifier: FSmnMOXlocoedt+040BJ5a5WnJbcZb7WOPDxz3R7Gng=
Subject key identifier: 50:69:1A:10:9F:B5:7C:B2:E5:DD:2B:98:D7:FA:3A:5E:DD:D1:9A:57
Authority key identifier: 18:7E:EE:EA:2A:D6:07:BC:A5:42:2D:09:2D:DA:CC:19:90:8F:2F:D7
Certificate issuer: /CN=A91767B4/serialNumber=187EEEEA2AD607BCA5422D092DDACC19908F2FD7
Certificate serial: 02D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GH7u6irWB7ylQi0JLdrMGZCPL9c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.mft
Manifest number: 02CA
Signing time: Mon 21 Sep 2026 01:15:46 +0000
Manifest this update: Mon 21 Sep 2026 01:15:46 +0000
Manifest next update: Mon 28 Sep 2026 01:15:46 +0000
Files and hashes: 1: GH7u6irWB7ylQi0JLdrMGZCPL9c.crl (hash: GZqspKz5RM/JzKUVNKaWWq3LAQJioYxam1T5eFIIGfQ=)
2: 57C505EA708411EDA8B14246C4F9AE02.roa (hash: rnjwe5YYzLVIXlCM4/xr5SlC/j9WbCn85pwJbjVubyM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.crl
rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GH7u6irWB7ylQi0JLdrMGZCPL9c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 01:15:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 720 (0x2d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91767B4, serialNumber=187EEEEA2AD607BCA5422D092DDACC19908F2FD7
Validity
Not Before: Sep 21 01:15:46 2026 GMT
Not After : Sep 28 01:15:46 2026 GMT
Subject: CN=6ab08542-387b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:83:c6:07:e7:79:8c:14:04:e9:73:a4:b6:d4:
24:02:99:75:84:d4:03:c4:44:1e:64:72:27:c0:98:
9b:24:ab:d2:e6:6c:3d:c6:e9:34:ec:2c:6d:b4:d0:
27:aa:ad:17:32:d6:0a:1d:b5:9a:bc:38:39:e3:05:
ee:00:74:b4:94:83:36:b4:fd:94:10:a3:e9:e7:08:
e0:4d:1d:83:c6:81:7b:43:7f:56:5e:6b:9b:c2:5c:
3b:35:36:13:f6:25:7e:d2:cd:f8:b0:b0:8d:0f:0d:
ee:83:1f:24:1e:48:bf:7d:7a:85:a6:e4:58:e6:b0:
cf:bb:18:23:46:19:b4:6b:2f:64:b8:28:a3:06:f4:
37:b0:49:d7:e4:f1:48:31:4c:60:2c:c8:54:f6:08:
f7:10:cf:9f:97:6b:9d:93:69:35:5e:5d:4a:df:d6:
a4:84:10:fd:ad:71:55:88:1e:f4:23:4b:36:9c:a5:
12:e9:73:5c:ec:8e:b3:cc:b1:3d:1b:ab:2f:e9:78:
3b:43:58:d5:13:7a:28:e2:d6:83:4e:cd:f9:d3:77:
f0:51:8d:d3:a8:d1:0f:b6:44:70:52:e2:9f:5e:86:
b1:12:64:a0:41:13:1e:b6:a4:60:cb:73:db:76:f7:
d9:c1:93:c4:03:a6:d4:e9:52:3a:c0:31:38:ae:78:
ef:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:69:1A:10:9F:B5:7C:B2:E5:DD:2B:98:D7:FA:3A:5E:DD:D1:9A:57
X509v3 Authority Key Identifier:
keyid:18:7E:EE:EA:2A:D6:07:BC:A5:42:2D:09:2D:DA:CC:19:90:8F:2F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GH7u6irWB7ylQi0JLdrMGZCPL9c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ba:ed:8f:77:59:7d:8d:2e:21:3a:88:76:d8:b2:89:02:50:
65:db:4e:2b:a1:b2:1b:2d:fb:0a:57:8b:08:ad:ee:e0:a6:fb:
d0:0c:8e:dd:91:b3:4d:1c:e9:58:0f:91:01:f9:00:1c:e5:d7:
7f:90:8b:3d:0b:68:ad:ec:76:6e:b0:f7:e1:e9:90:c5:54:f7:
02:ac:da:87:73:89:95:bd:33:c8:24:bf:ab:8c:e0:a9:c1:38:
5b:eb:a8:b1:2c:c9:e2:62:8d:de:c4:4e:a3:01:e5:d3:db:53:
9e:e4:f6:50:bb:a4:97:c1:d9:2e:38:b5:27:14:40:5c:ce:d8:
e3:cb:3e:02:23:06:90:a1:8c:72:54:54:6c:f3:95:fb:0a:7e:
f2:99:1f:98:66:9a:37:3a:46:01:cc:4d:20:23:f8:e7:74:34:
e1:36:6e:db:d8:9e:42:d1:ae:cb:b3:5d:6e:e2:b6:66:6c:4d:
ac:1e:d5:c7:35:1d:e2:b3:e4:9a:95:af:fe:f6:6c:0e:f4:45:
a8:af:1d:50:5d:f2:22:12:2c:9f:4c:69:65:d5:51:55:6c:f7:
fb:0e:a3:2d:ee:41:0d:d7:b4:d2:46:d9:e9:cd:c1:5b:0a:29:
f3:22:be:71:34:05:62:fa:03:d2:ef:23:00:0f:94:bb:f2:33:
0e:ef:50:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:44:57 2026 by rpki-client