
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7CDD/8A23A6F8DD0D11EE9D292D6AC4F9AE02/g4qU7SUkCVmqbxVJEAOsbm0DlX4.mft
File: g4qU7SUkCVmqbxVJEAOsbm0DlX4.mft (raw, json)
Hash identifier: DXmylYduzxZMO0tqQ+5OTZKU88bobWneLR95Ja1AJbQ=
Subject key identifier: 73:2D:94:B0:6F:4C:8B:98:F2:72:37:C2:27:F5:67:2F:55:EE:B6:CE
Authority key identifier: 83:8A:94:ED:25:24:09:59:AA:6F:15:49:10:03:AC:6E:6D:03:95:7E
Certificate issuer: /CN=A91A7CDD/serialNumber=838A94ED25240959AA6F15491003AC6E6D03957E
Certificate serial: 01E4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4qU7SUkCVmqbxVJEAOsbm0DlX4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7CDD/8A23A6F8DD0D11EE9D292D6AC4F9AE02/g4qU7SUkCVmqbxVJEAOsbm0DlX4.mft
Manifest number: 01DF
Signing time: Sun 27 Sep 2026 03:55:31 +0000
Manifest this update: Sun 27 Sep 2026 03:55:30 +0000
Manifest next update: Sun 04 Oct 2026 03:55:30 +0000
Files and hashes: 1: g4qU7SUkCVmqbxVJEAOsbm0DlX4.crl (hash: AiRr/kASkPRh/WVFdMCeEU3vKCS3wC/+v8u11x1KKD8=)
2: 1E595AE8DD0E11EE9833196BC4F9AE02.roa (hash: e8BrutbzfzM1UUyv17uARTWJ09lINCQWQeDDVfsXfGo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7CDD/8A23A6F8DD0D11EE9D292D6AC4F9AE02/g4qU7SUkCVmqbxVJEAOsbm0DlX4.crl
rsync://rpki.apnic.net/member_repository/A91A7CDD/8A23A6F8DD0D11EE9D292D6AC4F9AE02/g4qU7SUkCVmqbxVJEAOsbm0DlX4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4qU7SUkCVmqbxVJEAOsbm0DlX4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 03:55:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 484 (0x1e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7CDD, serialNumber=838A94ED25240959AA6F15491003AC6E6D03957E
Validity
Not Before: Sep 27 03:55:30 2026 GMT
Not After : Oct 4 03:55:30 2026 GMT
Subject: CN=6ab893b2-c152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:00:a0:f8:ad:72:6c:d2:db:94:56:41:d0:4d:
6b:1d:b4:9e:89:75:1e:b9:47:60:f7:f7:a9:3d:92:
f4:95:92:08:94:1e:60:28:85:36:b2:bc:13:29:cd:
6b:02:69:d9:04:9c:ee:d8:37:18:94:a2:e7:39:15:
cd:ae:2d:cc:01:f6:20:dd:93:7b:7a:71:dc:f5:c1:
9c:ba:d7:92:24:c8:78:72:81:83:44:2c:36:44:de:
23:be:bb:7d:24:57:73:db:ac:f7:5f:9c:02:26:16:
ec:97:d8:97:c3:c9:ce:77:8b:7c:90:cb:48:49:d1:
01:94:16:44:c8:b6:6b:70:ba:7f:33:8b:43:ef:b3:
66:16:98:29:2a:33:95:91:fe:a6:b8:a9:7b:3d:7f:
62:72:10:6b:a4:d7:33:2f:6e:6a:b7:65:0f:fb:e0:
e1:50:8c:0e:84:ca:c2:6f:31:01:07:7e:74:b5:39:
1b:6e:3a:83:ca:9d:5e:9f:6c:94:43:70:f4:ff:a5:
45:44:a9:ed:00:37:86:3a:41:65:19:99:46:52:ad:
31:30:da:0e:5a:7a:a3:d6:41:ad:41:af:dd:f1:c7:
55:69:ff:c6:c7:69:2b:a6:2a:80:a9:5f:36:a1:5e:
c6:31:a3:57:13:2b:d3:05:cf:de:df:5f:2f:6f:f4:
cc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:2D:94:B0:6F:4C:8B:98:F2:72:37:C2:27:F5:67:2F:55:EE:B6:CE
X509v3 Authority Key Identifier:
keyid:83:8A:94:ED:25:24:09:59:AA:6F:15:49:10:03:AC:6E:6D:03:95:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7CDD/8A23A6F8DD0D11EE9D292D6AC4F9AE02/g4qU7SUkCVmqbxVJEAOsbm0DlX4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4qU7SUkCVmqbxVJEAOsbm0DlX4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7CDD/8A23A6F8DD0D11EE9D292D6AC4F9AE02/g4qU7SUkCVmqbxVJEAOsbm0DlX4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c7:ec:bd:8d:4c:76:39:78:20:de:5e:a2:26:05:78:b6:89:de:
a6:e9:52:e1:41:a5:cd:6f:cd:0c:57:ab:1f:a5:1c:a4:94:53:
f9:f1:65:71:d2:b5:fb:ab:a3:65:67:53:fd:ca:66:c5:d9:80:
9c:1b:9f:1f:aa:ea:c4:52:f8:38:50:ae:39:f0:3a:a8:4d:cc:
d8:e1:d9:0a:2a:3b:19:07:9b:8b:b2:f1:90:50:7c:a3:59:a9:
32:3a:ee:a4:e3:56:f2:92:b0:3a:8a:5f:98:7c:9e:f7:06:d8:
7c:c9:f4:37:ee:22:e6:c7:03:1d:d9:17:c4:e3:f6:cc:ae:05:
11:24:3d:9e:f0:f5:b4:e6:04:3b:43:8b:18:0d:4b:aa:9e:d1:
24:16:86:58:2a:ae:06:8b:47:f4:64:90:27:36:5a:1b:2f:48:
5f:ee:dd:b9:62:1a:37:08:cc:43:6e:af:61:07:86:27:05:53:
9b:04:4a:7d:8b:ee:b7:d1:39:b1:f8:e9:4f:03:fd:7e:b0:46:
00:29:8e:d0:d3:56:0c:27:eb:c5:ff:e8:f6:f8:30:18:ad:33:
0e:0a:1c:cd:aa:2c:54:d8:f8:b2:25:10:cb:9d:d3:c9:e5:a8:
76:be:53:9f:4d:50:3f:33:47:e5:8e:d6:9b:81:68:65:42:2c:
db:9e:aa:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 14:29:09 2026 by rpki-client