
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft
File: gp8PQIhN2ZESEAWwfQmiy_-03sY.mft (raw, json)
Hash identifier: y/NVlDChxhyELh2C1pJ5e1XxXCQKT2QrLjReDlVdQ3o=
Subject key identifier: 2C:3F:14:AA:E6:6F:74:81:BA:A7:A3:B9:20:78:F4:20:D8:15:4E:C3
Authority key identifier: 82:9F:0F:40:88:4D:D9:91:12:10:05:B0:7D:09:A2:CB:FF:B4:DE:C6
Certificate issuer: /CN=A91A16CF/serialNumber=829F0F40884DD991121005B07D09A2CBFFB4DEC6
Certificate serial: 0CFC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft
Manifest number: 0CE2
Signing time: Tue 22 Sep 2026 18:21:28 +0000
Manifest this update: Tue 22 Sep 2026 18:21:27 +0000
Manifest next update: Tue 29 Sep 2026 18:21:27 +0000
Files and hashes: 1: gp8PQIhN2ZESEAWwfQmiy_-03sY.crl (hash: qVQtWB/02PVkrT7wIg8UTU4Fe1SkvpTJtxoF/rFsEWI=)
2: 46D7B1B468F911EFAB3D9424C4F9AE02.roa (hash: EANYonIlLAQsD77itNqvU5Ar2XS9wRUAE//HQHxkYJ8=)
3: 2D2322ECF53111F0B165BC265F6F56BC.roa (hash: tZiy66LheF6UARgLL7DjkA4ZOPMuv3MTdVKtCblCRCI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.crl
rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 18:21:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3324 (0xcfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A16CF, serialNumber=829F0F40884DD991121005B07D09A2CBFFB4DEC6
Validity
Not Before: Sep 22 18:21:27 2026 GMT
Not After : Sep 29 18:21:27 2026 GMT
Subject: CN=6ab2c728-0810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2f:f9:f4:f5:33:e3:d7:ee:96:61:e5:db:e8:
0e:49:84:f0:c1:24:bc:49:b5:8a:91:39:34:1c:73:
25:43:6c:36:da:1b:c6:75:d5:fe:8e:e0:f7:96:56:
48:9e:e8:c0:7d:2a:4b:b3:73:14:b9:f9:84:f1:ff:
59:1c:4c:ee:74:0f:36:cd:8a:82:60:ee:12:d2:5e:
d7:2a:4e:8f:a6:1d:3a:d9:39:84:6f:88:e0:00:17:
a1:92:1a:2e:4f:f3:59:25:47:69:9d:47:c5:3b:d6:
40:34:f2:50:24:b3:4f:ec:3e:33:b7:24:0f:ec:a2:
7a:c9:94:70:00:7f:54:d4:30:d8:cd:b6:ac:c9:4e:
5d:76:43:58:48:ba:70:94:22:ee:04:e6:16:78:29:
0f:31:e0:2b:2f:8d:a9:d8:38:fe:04:08:0f:94:fd:
d2:34:ff:0a:91:1e:6e:91:23:ac:5c:18:78:8c:32:
c9:7b:14:00:f4:f4:f0:86:39:04:9e:9a:1c:1f:e9:
29:22:66:90:bb:1f:31:40:2d:00:ad:7e:83:98:ae:
b1:47:52:03:1c:95:0a:92:7c:36:86:56:b5:73:ae:
5c:b3:2d:ae:b2:66:ba:ab:f5:6d:58:5f:4e:e8:d0:
10:0d:33:9f:9a:80:03:85:16:aa:b5:6c:15:ab:21:
89:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:3F:14:AA:E6:6F:74:81:BA:A7:A3:B9:20:78:F4:20:D8:15:4E:C3
X509v3 Authority Key Identifier:
keyid:82:9F:0F:40:88:4D:D9:91:12:10:05:B0:7D:09:A2:CB:FF:B4:DE:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:e4:72:42:de:c3:27:40:d7:7e:12:5c:76:6a:a6:2f:f7:a2:
a3:15:11:7a:74:e0:9d:b6:ea:37:fe:98:87:91:87:d6:81:83:
10:87:7a:98:2b:e1:7e:f6:37:62:48:07:4e:ce:b7:8c:09:a7:
5c:d4:10:9c:16:d4:24:61:f7:79:38:69:aa:3f:f9:1e:3d:8c:
e0:97:23:42:25:a9:21:4b:61:41:27:2a:e4:56:1c:f3:2c:fb:
31:aa:9f:d5:de:f8:82:dc:70:d5:0d:ef:a0:f2:0a:a1:1b:08:
63:4a:24:92:81:c6:48:27:f6:91:79:a7:9a:a7:21:56:73:16:
83:c5:69:9f:72:d9:f0:2d:e2:9b:27:c4:39:f1:75:9c:b2:de:
5e:92:ce:e8:e9:90:78:c5:50:4c:b4:ff:fc:56:a5:5e:e4:b8:
64:0e:27:19:ef:33:a8:cd:ed:45:81:43:0c:d5:66:6b:e4:d5:
90:ee:8e:4b:d0:8e:d0:8c:81:18:e4:5d:f3:ac:86:96:69:0c:
86:b5:90:03:1b:1f:c6:ad:80:c2:f7:81:b9:1a:33:6b:65:be:
c6:50:64:d7:90:c8:b0:89:e9:da:25:52:e9:7a:a1:43:da:a5:
ec:e3:c6:42:77:0e:ed:04:90:35:1f:45:1d:2f:86:e2:a8:79:
7c:60:b9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:52:47 2026 by rpki-client