
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft
File: g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft (raw, json)
Hash identifier: 6PXJEZOFHG1kqqFhCFW0EvfgzUA/evUa2kueMiOL4NE=
Subject key identifier: 9B:FE:7D:D4:0D:36:73:28:C1:E3:BD:AC:96:0A:B8:37:93:23:A7:66
Authority key identifier: 83:B6:E7:EA:23:BD:C3:A3:8D:60:B4:FF:A2:EF:F5:A1:8F:1D:CD:68
Certificate issuer: /CN=A91AB4BA/serialNumber=83B6E7EA23BDC3A38D60B4FFA2EFF5A18F1DCD68
Certificate serial: 02B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7bn6iO9w6ONYLT_ou_1oY8dzWg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft
Manifest number: 02AD
Signing time: Mon 21 Sep 2026 01:30:57 +0000
Manifest this update: Mon 21 Sep 2026 01:30:56 +0000
Manifest next update: Mon 28 Sep 2026 01:30:56 +0000
Files and hashes: 1: g7bn6iO9w6ONYLT_ou_1oY8dzWg.crl (hash: bWZc+VcVjaP/48PYxKn3AD7gIT6SOdyrfqk9OGkuEqM=)
2: 93E8AC909CA111ED97E7FC20C4F9AE02.roa (hash: Enlt1m5fMgJylVSd5+EcRhxkwS2mrK3Dcl4exqYwjbg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.crl
rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7bn6iO9w6ONYLT_ou_1oY8dzWg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 01:30:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 691 (0x2b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB4BA, serialNumber=83B6E7EA23BDC3A38D60B4FFA2EFF5A18F1DCD68
Validity
Not Before: Sep 21 01:30:56 2026 GMT
Not After : Sep 28 01:30:56 2026 GMT
Subject: CN=6ab088d0-1e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:dc:0e:b9:4a:c1:cc:31:22:bb:0e:25:90:43:
b7:8e:b1:99:dd:d3:19:b4:21:46:f6:90:8d:a9:f1:
e3:03:bd:a4:17:34:08:10:84:2a:02:4f:eb:3e:6d:
1a:cc:8a:24:d3:74:f2:5b:f8:0d:2d:a4:cb:80:95:
66:58:e6:17:6e:0c:28:8f:a6:63:23:1a:38:af:da:
6a:b4:50:5f:2e:04:f8:5b:35:46:03:d5:57:03:4f:
00:2a:5a:7b:5e:a6:1f:20:96:50:ff:77:1e:1a:ae:
2e:d2:42:d4:14:7a:cc:81:34:8e:60:a9:f8:74:d8:
94:61:98:c7:56:2b:5a:80:7a:11:1b:26:44:79:0a:
ea:91:38:58:8b:9f:6e:5b:60:7f:3d:51:9b:a6:f2:
60:c9:93:8e:0d:c5:a3:df:10:6a:6e:90:c4:8e:da:
06:d0:f7:8e:4b:6e:4f:2a:c0:b6:ed:f1:39:56:2c:
d0:b0:9d:96:37:99:71:fd:82:a1:e2:b2:a6:af:23:
3f:e7:87:08:79:b4:fa:0d:ee:6a:cc:3f:cc:73:2b:
65:94:d4:fa:c3:ae:3b:27:ec:02:81:d1:59:13:57:
68:d5:43:f9:19:6f:d0:68:e0:f8:ea:e1:7f:01:e5:
9e:27:45:ca:35:ee:54:fe:27:9d:43:69:de:c4:ce:
bf:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:FE:7D:D4:0D:36:73:28:C1:E3:BD:AC:96:0A:B8:37:93:23:A7:66
X509v3 Authority Key Identifier:
keyid:83:B6:E7:EA:23:BD:C3:A3:8D:60:B4:FF:A2:EF:F5:A1:8F:1D:CD:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7bn6iO9w6ONYLT_ou_1oY8dzWg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:0f:fe:55:ad:0e:28:e1:0b:a7:dd:bb:15:da:40:83:1d:30:
1b:09:34:db:29:78:ec:84:3f:e9:67:7e:34:5f:7d:d3:7c:c9:
65:97:10:5d:ed:b0:68:aa:25:b8:35:25:a1:e9:fa:37:38:02:
51:cd:65:d5:33:29:c3:f7:f8:cc:45:ec:5d:db:a2:ee:ef:6c:
88:87:26:44:6a:82:bd:48:6d:25:0c:c4:5f:3e:9e:11:39:d4:
96:21:0e:41:f3:8d:7e:6c:ab:a9:63:de:b2:0c:71:11:43:62:
de:2f:dd:08:56:4d:71:6d:39:e2:70:5f:de:6c:b5:3e:79:3b:
71:9e:ae:ad:79:0d:9a:27:da:1a:3d:13:47:94:58:44:de:38:
0a:2e:f2:83:0a:11:7e:e9:52:22:3f:f5:e7:19:3f:84:1a:5b:
42:39:9a:8b:49:e4:74:43:48:8f:53:01:a7:97:21:a8:a2:5a:
37:ab:8d:ae:fd:b1:5b:65:ef:33:58:3a:7f:56:72:af:13:2c:
e1:47:b7:8b:f2:51:d9:61:aa:04:17:df:27:7c:f9:4a:08:d7:
30:06:51:fd:a8:24:e0:1b:7d:ab:e0:8e:b9:8e:97:6f:af:ae:
f9:d2:67:fe:f7:7f:b1:6c:47:ac:1f:21:1e:c5:61:4a:6c:58:
e8:f0:9c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:26:41 2026 by rpki-client