
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
File: G1Zt71944xm_wNFADedV4mSoK7w.mft (raw, json)
Hash identifier: V7xLsBDioqIVicO94ZSvxS9y0BhJF3U4Cw8ObSlKYS8=
Subject key identifier: F6:15:93:CE:54:6B:EC:88:6D:7B:72:7E:0A:1F:FE:4D:DF:C2:E9:CC
Authority key identifier: 1B:56:6D:EF:5F:78:E3:19:BF:C0:D1:40:0D:E7:55:E2:64:A8:2B:BC
Certificate issuer: /CN=A91C20AB/serialNumber=1B566DEF5F78E319BFC0D1400DE755E264A82BBC
Certificate serial: 09E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
Manifest number: 09CE
Signing time: Tue 22 Sep 2026 19:42:14 +0000
Manifest this update: Tue 22 Sep 2026 19:42:13 +0000
Manifest next update: Tue 29 Sep 2026 19:42:13 +0000
Files and hashes: 1: G1Zt71944xm_wNFADedV4mSoK7w.crl (hash: Rz6uKLAobmck4tlq1tx603V8T6lIgmekbpFE7tucFFo=)
2: AB659244056211EBAE3DBC4CC4F9AE02.roa (hash: 6SFxnAYtEmDY0FSpqWSl0msvr8nqW/ZhQvTYvJBPZWo=)
3: 2979BC38B09411EAA964465EC4F9AE02.roa (hash: 3TgfJcKtVv25yE8b/IOKhDazNbjHxuANTNvhbFUhyMk=)
4: 28D36892B09411EAA964465EC4F9AE02.roa (hash: uB90XoJd0h+ZsfjSZb2jo0kKEK2zlo/T12QD2KhR6to=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.crl
rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 19:42:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2537 (0x9e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C20AB, serialNumber=1B566DEF5F78E319BFC0D1400DE755E264A82BBC
Validity
Not Before: Sep 22 19:42:13 2026 GMT
Not After : Sep 29 19:42:13 2026 GMT
Subject: CN=6ab2da15-1ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:83:d5:b5:64:ac:03:97:25:a4:9a:a0:30:0a:
b1:fc:7e:31:c8:30:c6:e4:2d:ae:6e:ae:3e:41:e6:
e9:ca:98:e3:01:5b:7a:d4:72:4f:fe:20:b9:0f:7c:
50:7b:cb:7e:fc:eb:fc:3d:cc:fb:64:28:56:d3:3f:
bb:fc:9d:4f:e2:25:0c:7e:6f:53:8c:ba:64:55:c8:
4a:e1:8f:77:ea:07:4d:90:77:2f:38:4e:67:e8:f0:
87:97:e5:98:d8:09:50:f0:c7:e3:d8:c5:66:fa:35:
05:19:02:38:70:9f:4e:e9:14:e9:74:35:e0:61:f5:
cf:24:69:e9:00:9d:2e:40:05:3e:53:64:86:9c:49:
4a:8a:7c:9a:36:ce:95:77:c6:f2:6a:f7:1f:fb:c8:
b8:e7:ff:31:db:95:8e:73:07:44:1b:6f:51:43:ef:
3a:1d:03:31:aa:e1:37:7a:3e:87:a1:29:dd:e1:ea:
33:96:b6:00:58:19:c2:37:1f:71:ae:4f:f6:13:4d:
55:a2:60:f1:e4:10:b5:26:be:5c:bd:67:d4:58:4b:
99:68:36:46:ba:fb:e0:dc:bc:9f:bc:c3:46:85:cb:
b0:7d:08:d7:be:2b:89:52:8c:50:6c:a4:6f:52:91:
12:49:8a:20:db:e1:46:92:e7:53:cd:67:c2:6c:f2:
d5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:15:93:CE:54:6B:EC:88:6D:7B:72:7E:0A:1F:FE:4D:DF:C2:E9:CC
X509v3 Authority Key Identifier:
keyid:1B:56:6D:EF:5F:78:E3:19:BF:C0:D1:40:0D:E7:55:E2:64:A8:2B:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:e3:e5:8a:a7:9b:b5:9d:96:c0:bb:c4:05:a0:bb:31:19:fd:
ec:33:11:04:f6:5e:d9:bf:21:ce:a1:6c:af:87:ae:44:e0:53:
08:27:5e:2a:66:94:5b:38:21:70:29:24:b7:bf:8f:80:c1:e6:
18:99:47:fc:9e:ef:e4:7d:b5:bc:92:e9:40:28:f9:37:79:fc:
46:43:6c:a9:ce:d4:7f:cd:7f:2f:e9:76:8d:5f:a1:a9:7a:79:
99:c8:e8:41:44:3b:24:9d:e3:fa:44:3a:de:34:1f:b4:9b:c3:
c7:4e:25:c7:75:ad:3f:fa:29:2f:f9:77:a8:7d:01:65:14:d8:
f6:0c:4f:3f:c6:95:af:29:88:11:b1:ab:8b:fa:ad:37:48:a0:
be:aa:9f:3b:96:4d:9e:a6:69:e3:92:ba:27:45:30:1e:d7:31:
7f:e3:02:82:2e:2e:15:17:ab:64:48:48:18:41:d7:4e:df:61:
c2:db:c4:a5:78:8c:fb:c3:d8:db:0c:ec:68:de:9e:09:94:9f:
34:9a:6a:b4:0c:5f:2c:1b:84:fc:ba:89:4e:0f:11:3f:d9:fc:
da:2a:4c:58:34:93:27:54:98:15:82:57:24:b5:34:59:86:53:
a8:e7:f3:95:c9:d1:bb:4a:ca:8b:db:24:4b:25:84:a2:54:c1:
bc:e4:88:e9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzIwQUIxMTAvBgNVBAUTKDFCNTY2REVGNUY3OEUzMTlCRkMwRDE0MDBERTc1NUUy
NjRBODJCQkMwHhcNMjYwOTIyMTk0MjEzWhcNMjYwOTI5MTk0MjEzWjAYMRYwFAYD
VQQDEw02YWIyZGExNS0xZWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvIPVtWSsA5clpJqgMAqx/H4xyDDG5C2ubq4+QebpypjjAVt61HJP/iC5D3xQ
e8t+/Ov8Pcz7ZChW0z+7/J1P4iUMfm9TjLpkVchK4Y936gdNkHcvOE5n6PCHl+WY
2AlQ8Mfj2MVm+jUFGQI4cJ9O6RTpdDXgYfXPJGnpAJ0uQAU+U2SGnElKinyaNs6V
d8byavcf+8i45/8x25WOcwdEG29RQ+86HQMxquE3ej6HoSnd4eozlrYAWBnCNx9x
rk/2E01VomDx5BC1Jr5cvWfUWEuZaDZGuvvg3LyfvMNGhcuwfQjXviuJUoxQbKRv
UpESSYog2+FGkudTzWfCbPLVNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPYVk85U
a+yIbXtyfgof/k3fwunMMB8GA1UdIwQYMBaAFBtWbe9feOMZv8DRQA3nVeJkqCu8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjBBQi82QkU1NTBCMEIw
OTMxMUVBOEFGMzE3NUVDNEY5QUUwMi9HMVp0NzE5NDR4bV93TkZBRGVkVjRtU29L
N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0cxWnQ3MTk0NHhtX3dORkFEZWRWNG1Tb0s3dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MjBBQi82QkU1NTBCMEIwOTMxMUVBOEFGMzE3NUVDNEY5QUUwMi9HMVp0NzE5NDR4
bV93TkZBRGVkVjRtU29LN3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALuPliqebtZ2WwLvEBaC7MRn97DMRBPZe2b8hzqFsr4euROBTCCdeKmaUWzgh
cCkkt7+PgMHmGJlH/J7v5H21vJLpQCj5N3n8RkNsqc7Uf81/L+l2jV+hqXp5mcjo
QUQ7JJ3j+kQ63jQftJvDx04lx3WtP/opL/l3qH0BZRTY9gxPP8aVrymIEbGri/qt
N0igvqqfO5ZNnqZp45K6J0UwHtcxf+MCgi4uFRerZEhIGEHXTt9hwtvEpXiM+8PY
2wzsaN6eCZSfNJpqtAxfLBuE/LqJTg8RP9n82ipMWDSTJ1SYFYJXJLU0WYZTqOfz
lcnRu0rKi9skSyWEolTBvOSI6Q==
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:43:08 2026 by rpki-client