
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.mft
File: g675MVKyUIy8gKNifjon6HvP3so.mft (raw, json)
Hash identifier: bWkXoYfnDwma/PGNjWOazgOEDcnhMrN0g52Vl3Iy6YQ=
Subject key identifier: 97:C3:12:B6:64:65:98:50:38:F2:53:91:B7:C2:0F:29:63:3B:04:E2
Authority key identifier: 83:AE:F9:31:52:B2:50:8C:BC:80:A3:62:7E:3A:27:E8:7B:CF:DE:CA
Certificate issuer: /CN=A91D298D/serialNumber=83AEF93152B2508CBC80A3627E3A27E87BCFDECA
Certificate serial: 08F4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g675MVKyUIy8gKNifjon6HvP3so.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.mft
Manifest number: 08DB
Signing time: Tue 22 Sep 2026 20:15:03 +0000
Manifest this update: Tue 22 Sep 2026 20:15:03 +0000
Manifest next update: Tue 29 Sep 2026 20:15:03 +0000
Files and hashes: 1: g675MVKyUIy8gKNifjon6HvP3so.crl (hash: s6Yek8TiwC/EAAF9fjzj9lnAuXA0vBqhDZEKJ8W7aE8=)
2: 51B1F2A665D911EBA6089869C4F9AE02.roa (hash: Agm1iHBSDHpN64vkTSxuS0Cc6JpxKn9+gu3qk14vA4A=)
3: 1229795E652C11EB9B039023C4F9AE02.roa (hash: GJUGEPZQBd+of4IF8rrVMeNhftE2HSnPOO2CkzhhVYM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.crl
rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g675MVKyUIy8gKNifjon6HvP3so.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 20:15:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2292 (0x8f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D298D, serialNumber=83AEF93152B2508CBC80A3627E3A27E87BCFDECA
Validity
Not Before: Sep 22 20:15:03 2026 GMT
Not After : Sep 29 20:15:03 2026 GMT
Subject: CN=6ab2e1c7-ee4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:13:7d:32:3f:6c:4c:5e:cd:98:14:a3:00:dc:
91:60:2f:c4:1c:07:24:05:f4:36:6b:11:7c:18:61:
e2:41:1e:4c:8e:11:f3:7e:15:87:87:4f:8f:c8:1f:
e0:b6:22:90:08:14:bf:99:c4:e4:e4:88:31:ff:17:
b7:f5:43:7f:5a:1a:a3:e9:57:2c:ed:3e:80:55:d4:
30:85:88:10:c6:a3:b0:76:b6:2d:85:82:0c:63:92:
2c:bf:8a:b7:cc:68:8a:b0:84:fe:00:94:d0:c5:52:
f9:50:4e:66:54:a4:50:ec:08:e6:20:29:df:b5:9f:
00:33:38:99:44:04:41:32:3c:57:9b:18:27:90:f8:
95:dd:d8:0e:0d:47:48:69:c4:5a:d5:59:7c:90:87:
94:92:07:1d:0e:1e:57:02:50:3c:88:f3:da:c7:11:
1e:1d:ee:f8:4f:21:c0:31:4c:d5:32:26:07:86:47:
ee:2d:0d:0e:c1:6c:8e:1a:ef:9b:80:c6:c7:e3:30:
c2:ea:72:54:18:90:87:c5:b2:03:bb:89:ac:2b:7a:
c2:56:22:4b:68:87:2a:7e:e7:41:67:46:e3:dd:d8:
6f:aa:f9:96:55:3c:57:00:1c:19:21:0b:a4:ea:c5:
8a:42:a2:34:ed:83:ac:7d:a1:1c:62:a7:c7:28:02:
55:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C3:12:B6:64:65:98:50:38:F2:53:91:B7:C2:0F:29:63:3B:04:E2
X509v3 Authority Key Identifier:
keyid:83:AE:F9:31:52:B2:50:8C:BC:80:A3:62:7E:3A:27:E8:7B:CF:DE:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g675MVKyUIy8gKNifjon6HvP3so.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c5:b6:95:ab:56:9b:b3:38:da:f4:cd:a8:14:ca:81:69:2e:
02:76:34:34:ef:b8:e3:73:58:96:1e:ee:29:20:39:2a:f7:69:
b5:0f:d2:e7:22:5e:2b:8c:9d:13:2a:f6:61:d4:b0:45:81:d8:
39:07:cc:fe:b5:f9:3f:43:69:2b:c6:aa:90:d2:e5:11:b5:34:
cc:2d:64:e7:7e:72:5f:eb:9c:89:68:9c:ec:10:94:da:3f:b1:
96:5c:86:a7:aa:50:43:d0:42:f0:f9:51:17:81:f3:18:51:2e:
5a:62:33:ca:8c:1b:2d:a1:48:28:6b:9e:5b:2d:0a:01:b3:67:
4b:c8:d8:a8:7e:a3:26:7e:ce:97:64:df:05:47:c7:41:e3:5f:
cf:a8:89:6f:a6:82:7d:54:27:1e:fe:34:ec:ef:b1:24:46:81:
f7:0b:f9:f9:f3:c4:01:71:e2:c4:79:06:ba:39:33:3e:1a:26:
f5:ad:fd:a8:7a:d6:af:df:21:2c:e7:21:75:85:1d:aa:ef:84:
bf:9e:cc:0e:17:ac:e4:13:8c:88:90:48:d2:e1:80:94:7f:23:
48:8d:04:50:5a:e4:dc:74:24:67:57:1d:08:ad:78:e2:91:38:
de:09:b4:15:d1:cf:e5:65:77:b9:8e:21:80:74:66:35:ff:63:
fb:58:fe:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:35:24 2026 by rpki-client