
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft
File: gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft (raw, json)
Hash identifier: GauawUxivqAucKC7Z2j8BUOSqfUIJY8gT6lM01GRVxU=
Subject key identifier: 32:51:B1:FB:92:DE:47:7D:C6:19:92:47:91:BD:00:13:1A:E2:36:B1
Authority key identifier: 82:1F:4D:B2:2E:E5:9A:FD:59:3A:7E:68:9E:DA:9F:C9:4B:E5:85:DD
Certificate issuer: /CN=A91C1C49/serialNumber=821F4DB22EE59AFD593A7E689EDA9FC94BE585DD
Certificate serial: 3584
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft
Manifest number: 428E
Signing time: Thu 24 Sep 2026 15:00:51 +0000
Manifest this update: Thu 24 Sep 2026 15:00:50 +0000
Manifest next update: Thu 01 Oct 2026 15:00:50 +0000
Files and hashes: 1: gh9Nsi7lmv1ZOn5ontqfyUvlhd0.crl (hash: di0FNQuOEYV0787E1uqqlLPo5ay6roqwrOgDLoz8OgQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.crl
rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 15:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13700 (0x3584)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1C49, serialNumber=821F4DB22EE59AFD593A7E689EDA9FC94BE585DD
Validity
Not Before: Sep 24 15:00:50 2026 GMT
Not After : Oct 1 15:00:50 2026 GMT
Subject: CN=6ab53b23-b30d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c5:a6:ea:fd:25:cd:fa:f7:4c:1d:1c:06:58:
03:f1:ba:7b:ab:4c:c0:03:a6:0e:31:5f:d6:0a:16:
f9:21:6c:cf:a2:7b:3f:cb:68:be:e6:46:5c:73:87:
46:d6:f9:e3:86:ff:78:7f:2a:35:7e:5f:8a:86:4a:
f8:9c:b5:58:b3:f9:c7:3b:13:a1:f1:76:8a:d3:49:
b2:34:8f:d3:77:3b:20:cc:05:a9:f8:2b:12:c0:44:
62:c6:e2:ac:74:6c:fb:ba:90:9e:af:42:03:ae:51:
b1:8a:0f:2e:05:17:d0:37:da:e6:9e:ae:8f:56:39:
0e:92:c1:86:67:c3:a2:ae:9c:7c:2b:e2:f2:7d:ce:
df:ab:9a:0a:f9:8f:68:e2:5e:f7:d7:a2:e5:6b:c7:
e9:cd:c7:0a:f6:a2:b3:85:24:de:77:c5:6e:c7:95:
15:5c:1c:a5:b3:68:1a:94:ce:03:19:2a:67:f7:40:
99:3b:e8:2e:ab:a4:95:c2:fb:9c:d1:45:aa:d6:b8:
35:05:08:dd:8c:7c:d5:d8:3f:71:7a:17:57:30:bf:
1d:7e:78:94:80:f2:53:76:f0:94:b7:35:e5:e2:0a:
15:4c:31:11:a1:a5:0e:29:8a:f6:7e:18:3c:63:e8:
e1:74:35:3b:ac:2d:9d:b0:e0:4b:ff:42:66:e3:70:
3f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:51:B1:FB:92:DE:47:7D:C6:19:92:47:91:BD:00:13:1A:E2:36:B1
X509v3 Authority Key Identifier:
keyid:82:1F:4D:B2:2E:E5:9A:FD:59:3A:7E:68:9E:DA:9F:C9:4B:E5:85:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:a1:66:61:0c:36:0f:06:2d:46:60:c9:7b:68:9f:5f:2b:86:
03:9d:e9:07:49:38:be:e6:56:9d:49:90:1e:8b:a0:c7:59:f3:
9d:3f:51:c1:4f:1b:c0:aa:5d:e9:09:ef:f5:2c:3d:ce:33:d0:
5a:53:16:da:93:49:0e:11:37:dc:db:95:7e:2e:c7:05:8c:0f:
e5:e0:b0:4c:3d:27:db:91:64:e7:49:00:5a:55:2b:93:d1:38:
93:d1:f3:6f:4c:f5:52:b7:56:f5:52:c4:57:1d:1d:cd:05:4b:
fe:62:35:b4:13:d3:50:20:0e:bb:6d:9a:1c:bd:7f:e1:d7:af:
62:41:7e:e2:24:e4:97:74:01:fb:bb:4e:ac:08:76:e8:b9:e3:
01:42:4f:9d:47:fd:4a:a8:d5:83:f7:cb:5c:4c:6a:71:e3:e6:
51:29:74:b2:ca:af:9f:1f:d9:61:64:ce:40:fc:01:00:6c:71:
33:75:b2:d5:db:32:7d:c8:4f:b0:85:8b:23:13:b5:c7:da:62:
3f:2c:00:e8:3d:af:c2:24:ab:9e:52:b0:b2:43:b3:40:cf:b3:
e7:e2:e8:c2:47:90:02:9f:43:06:ff:30:af:7f:7f:58:f0:76:
72:b4:52:1f:1a:3c:f7:6d:fa:b1:63:89:24:77:8c:11:df:e2:
21:b7:c2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:55:54 2026 by rpki-client