
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft
File: gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft (raw, json)
Hash identifier: AX9lg/JWEQjbB6IlCKAj8eKWpu9hRVArEGJ6hm3LjtQ=
Subject key identifier: F5:0D:57:2B:1A:0A:06:CF:83:4E:54:B4:A5:89:A1:53:3A:09:B9:16
Authority key identifier: 80:84:01:72:3C:2E:41:84:56:AF:9A:0F:B2:5F:8C:32:1C:49:70:CB
Certificate issuer: /CN=A91D959F/serialNumber=808401723C2E418456AF9A0FB25F8C321C4970CB
Certificate serial: 0897
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gIQBcjwuQYRWr5oPsl-MMhxJcMs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft
Manifest number: 088E
Signing time: Sat 14 Nov 2026 20:38:59 +0000
Manifest this update: Sat 14 Nov 2026 20:38:59 +0000
Manifest next update: Sat 21 Nov 2026 20:38:59 +0000
Files and hashes: 1: gIQBcjwuQYRWr5oPsl-MMhxJcMs.crl (hash: 3zc/wjs2b2P8YWXIHa/ltqFkdhuOYk9EK88Hfb+VYrU=)
2: F75AEA8A13F111EB950DBC4EC4F9AE02.roa (hash: QgpTu41sM6G7HXGpsEzpZ01ASqr1eYUm5aigZVfQiCw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.crl
rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gIQBcjwuQYRWr5oPsl-MMhxJcMs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 20:38:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2199 (0x897)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D959F, serialNumber=808401723C2E418456AF9A0FB25F8C321C4970CB
Validity
Not Before: Nov 14 20:38:59 2026 GMT
Not After : Nov 21 20:38:59 2026 GMT
Subject: CN=6af8c6e3-c470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b5:f6:4d:3b:0a:8d:72:ac:38:8a:3b:7f:a0:
af:56:0e:87:c8:80:05:c3:2d:28:17:0e:d7:d5:90:
e8:4d:98:c0:07:b8:24:14:b2:4e:f3:bf:be:6d:ef:
24:eb:5c:52:e8:44:fc:62:0f:4f:74:f9:86:f7:53:
64:e1:3f:ae:f4:f1:76:bf:a9:45:46:a8:9b:6b:fc:
6c:00:d1:01:d0:00:a4:5f:14:bf:0a:a3:52:e8:89:
6a:f8:0b:68:cb:ca:b9:c7:6f:6b:a3:27:5e:ab:65:
00:8d:b0:ae:82:e0:47:92:04:7b:7b:1c:64:65:58:
8b:fe:7d:96:5c:fe:55:10:10:45:c4:59:7d:a7:47:
56:28:8e:cd:c2:f4:14:1f:c5:96:ba:f8:b2:69:33:
20:1b:c1:01:d1:f4:1b:da:25:ca:51:7d:53:7c:c5:
5d:ad:d4:f7:b3:d3:04:6d:23:51:db:1f:ad:08:da:
03:de:fa:c2:18:7a:86:60:a7:b6:30:77:f5:0e:f3:
c0:3f:31:f4:3a:4c:8b:c1:50:0d:26:5c:80:d6:f7:
20:b0:f0:16:fb:b5:11:08:da:ae:7d:09:45:6e:e9:
0f:eb:7b:ba:07:ea:95:55:1c:67:91:b9:79:1c:a2:
c7:30:ce:42:df:62:97:0e:62:7c:c2:93:08:92:73:
dd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:0D:57:2B:1A:0A:06:CF:83:4E:54:B4:A5:89:A1:53:3A:09:B9:16
X509v3 Authority Key Identifier:
keyid:80:84:01:72:3C:2E:41:84:56:AF:9A:0F:B2:5F:8C:32:1C:49:70:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gIQBcjwuQYRWr5oPsl-MMhxJcMs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d2:ef:0f:80:01:d1:8d:5f:5f:17:18:8f:0b:84:fb:4d:92:1f:
4a:14:3d:ba:53:39:6b:8e:55:13:fc:56:05:56:d4:4a:33:fc:
ca:45:35:4c:b0:e1:f6:32:59:ef:19:0a:05:74:44:37:6d:86:
5f:25:ca:cd:ba:d0:11:22:1d:5d:9c:21:2b:9a:11:9d:03:18:
57:ee:25:2d:59:03:3f:c9:08:24:ae:a8:98:ad:18:0c:fa:94:
e8:15:c1:f4:e1:3e:9e:a3:3e:23:79:55:17:76:fd:48:ff:21:
a8:f5:af:87:13:0e:91:94:3e:4e:d2:91:9a:cd:cd:0e:30:d5:
f2:a2:8f:98:64:6c:49:dc:30:25:1e:6e:69:3a:0e:f1:f0:30:
2a:0c:69:bf:37:b4:2c:4f:33:58:f5:d4:7b:04:2d:3a:88:50:
30:d6:84:23:42:c4:de:05:1a:a0:4c:6b:1f:c6:25:22:2a:cc:
09:93:b4:f4:ff:d1:36:2b:7b:3f:81:63:38:be:ca:a4:4a:37:
53:b9:76:90:1a:31:f1:c9:db:58:19:8b:51:0d:92:99:eb:13:
92:56:16:c4:5e:ce:77:21:6f:08:b6:c5:9c:67:92:61:77:26:
ec:9a:8c:2a:43:cb:05:50:9e:8b:f3:9a:c4:9e:84:59:67:97:
28:09:d1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:24:15 2026 by rpki-client