
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft
File: g4L2GIxKbdZpVNVxij2cz5uL-JU.mft (raw, json)
Hash identifier: 2YXXT6sCXU7QFmip/RVS8m3F69JClk51dMG0d02nUlk=
Subject key identifier: B7:D0:6F:1C:85:F0:25:96:CD:E0:E8:D0:DE:42:F7:86:FD:97:45:B9
Authority key identifier: 83:82:F6:18:8C:4A:6D:D6:69:54:D5:71:8A:3D:9C:CF:9B:8B:F8:95
Certificate issuer: /CN=A91CB8BA/serialNumber=8382F6188C4A6DD66954D5718A3D9CCF9B8BF895
Certificate serial: 08C5
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/g4L2GIxKbdZpVNVxij2cz5uL-JU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft
Manifest number: 08B8
Signing time: Wed 22 Jul 2026 20:29:08 +0000
Manifest this update: Wed 22 Jul 2026 20:29:07 +0000
Manifest next update: Wed 29 Jul 2026 20:29:07 +0000
Files and hashes: 1: g4L2GIxKbdZpVNVxij2cz5uL-JU.crl (hash: uLiglTYuTXom1D3EBTbX/2VALJS1VT4P/wcQC7RBSDU=)
2: 21B96F2E7BC911EBABCF472DC4F9AE02.roa (hash: i37T+miB19JllsQUkIFRFN9qItWKSwoaTSynWV3QKsI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.crl
rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/g4L2GIxKbdZpVNVxij2cz5uL-JU.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:29:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2245 (0x8c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB8BA, serialNumber=8382F6188C4A6DD66954D5718A3D9CCF9B8BF895
Validity
Not Before: Jul 22 20:29:07 2026 GMT
Not After : Jul 29 20:29:07 2026 GMT
Subject: CN=6a612813-9c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:22:27:43:78:1d:f9:c4:fe:0b:04:72:3d:02:
57:42:4e:77:e4:e8:f5:72:0c:d1:3c:2f:6a:23:30:
cf:0b:6c:2b:02:89:17:bb:c2:7d:36:6f:1e:05:46:
40:79:8b:f5:bd:8a:da:dc:d0:67:a1:1c:5b:5d:e1:
e7:49:32:73:a6:ca:9c:e4:f7:72:35:82:69:1d:d1:
e3:b9:6f:cc:64:9a:02:42:49:e5:c5:a9:e6:ad:f3:
fc:4e:08:d1:1c:a0:e8:41:74:e3:12:e1:9a:f3:e2:
d9:da:90:7e:e4:7c:8e:c9:ab:a2:54:c8:19:66:d4:
26:b4:1b:29:1d:7f:71:85:75:6e:ae:b8:9f:c1:c8:
f8:78:eb:a1:0a:71:5f:22:df:f7:1d:57:21:80:98:
ac:c6:81:2d:ec:76:39:d2:45:c3:c4:8b:54:b0:af:
9d:af:23:17:d2:9d:64:27:0b:c9:e5:13:a4:44:d8:
f1:bf:f6:3d:7d:d2:a9:05:a0:75:ad:ed:57:77:fc:
f4:7b:16:70:31:92:1b:36:88:2d:2a:8f:e5:af:ff:
34:8a:89:14:9a:9e:48:e4:f1:53:75:9a:8b:27:e3:
66:cc:cf:cc:e6:f8:0d:52:2e:74:02:51:31:14:57:
6c:51:26:b6:b7:61:99:b9:f0:de:91:fe:bf:39:37:
eb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D0:6F:1C:85:F0:25:96:CD:E0:E8:D0:DE:42:F7:86:FD:97:45:B9
X509v3 Authority Key Identifier:
keyid:83:82:F6:18:8C:4A:6D:D6:69:54:D5:71:8A:3D:9C:CF:9B:8B:F8:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/g4L2GIxKbdZpVNVxij2cz5uL-JU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:59:3a:db:d1:4e:09:8b:d3:3e:27:35:a7:e1:d2:9a:6c:18:
4f:76:ee:f8:31:82:ec:e7:2f:4f:86:c6:f7:04:9d:6b:fd:1b:
0e:57:0a:04:21:4e:9f:08:40:3b:b3:c6:71:75:28:6e:3a:90:
45:04:79:ba:5b:81:57:91:d1:bf:82:dd:50:cf:3a:47:08:89:
e6:a9:83:65:4e:65:75:ab:2b:6e:27:08:a1:f9:ba:3c:0c:8a:
5c:46:69:bc:09:cc:e9:4c:d0:68:4d:5f:05:14:fc:10:ae:e1:
a4:0c:ae:3f:4f:10:20:e5:4c:dd:79:f2:6c:03:5f:99:fd:42:
99:62:6e:67:42:70:19:e4:f0:75:19:b5:d1:b8:e8:40:21:58:
9a:59:5e:a4:64:c4:fa:57:83:ba:84:8c:d4:79:fc:ba:7e:e0:
99:41:26:a6:db:81:90:8a:e1:59:84:61:a4:7d:30:a4:d4:7a:
7c:37:cd:f8:35:2a:b6:f4:ad:fb:76:b4:7f:a9:08:ca:98:55:
31:89:70:b2:ce:23:bb:37:70:bf:01:ba:77:74:35:f5:7c:d6:
b0:fa:7a:0b:03:41:bf:b7:75:2d:7b:e6:4d:46:4d:58:f9:4b:
2a:35:5d:d8:92:ba:3e:fe:62:6f:44:7d:34:19:26:8c:ae:f0:
85:06:bd:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:08:26 2026 by rpki-client