
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DD799/13CA82FA43FB11EB9F73D63CC4F9AE02/mGsNU3ZLyD3A4HLsrzacefIqOdc.mft
File: mGsNU3ZLyD3A4HLsrzacefIqOdc.mft (raw, json)
Hash identifier: VZkm867c+4Dgux5fpEV/wm851h6ZOsAzyct6wOYMLds=
Subject key identifier: E9:20:C8:5B:CB:A4:B7:F5:EF:96:88:CE:F6:CA:6C:0F:D0:3D:D1:A5
Authority key identifier: 98:6B:0D:53:76:4B:C8:3D:C0:E0:72:EC:AF:36:9C:79:F2:2A:39:D7
Certificate issuer: /CN=A91DD799/serialNumber=986B0D53764BC83DC0E072ECAF369C79F22A39D7
Certificate serial: 0805
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mGsNU3ZLyD3A4HLsrzacefIqOdc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD799/13CA82FA43FB11EB9F73D63CC4F9AE02/mGsNU3ZLyD3A4HLsrzacefIqOdc.mft
Manifest number: 0805
Signing time: Tue 22 Sep 2026 14:47:18 +0000
Manifest this update: Tue 22 Sep 2026 14:47:18 +0000
Manifest next update: Tue 29 Sep 2026 14:47:18 +0000
Files and hashes: 1: mGsNU3ZLyD3A4HLsrzacefIqOdc.crl (hash: +GvWLqJvXsjr30mMTxcaEmEyn8bYh556M2HzAY1fWHI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD799/13CA82FA43FB11EB9F73D63CC4F9AE02/mGsNU3ZLyD3A4HLsrzacefIqOdc.crl
rsync://rpki.apnic.net/member_repository/A91DD799/13CA82FA43FB11EB9F73D63CC4F9AE02/mGsNU3ZLyD3A4HLsrzacefIqOdc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mGsNU3ZLyD3A4HLsrzacefIqOdc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 14:47:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2053 (0x805)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD799, serialNumber=986B0D53764BC83DC0E072ECAF369C79F22A39D7
Validity
Not Before: Sep 22 14:47:18 2026 GMT
Not After : Sep 29 14:47:18 2026 GMT
Subject: CN=6ab294f6-46ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4a:43:57:c7:87:56:51:82:fd:08:c0:78:cb:
67:f6:62:30:45:79:9d:96:0c:27:4e:a0:bb:46:c3:
c5:8f:16:d3:29:04:0c:61:ae:6c:fa:be:13:43:53:
82:8e:c5:c3:20:88:a6:f6:64:df:fd:ca:09:12:38:
d0:e5:de:b1:58:26:2f:27:60:d7:c1:8d:e8:43:ce:
0e:b9:2c:5e:06:b5:b0:43:85:5c:99:c6:09:50:76:
c9:de:8b:85:c9:85:36:89:31:f4:88:d6:fa:ba:be:
78:05:b3:15:40:d8:60:cc:fd:75:e7:c4:d7:4a:4f:
ec:bf:ec:7d:69:51:0c:70:19:54:38:c5:e6:1e:97:
18:0b:9e:64:6f:01:a6:39:07:c2:34:bd:60:86:53:
d9:6b:3c:a3:05:43:95:fc:8e:a1:3a:48:e3:a2:9b:
2b:3b:d6:a0:25:e2:26:5f:1e:43:d9:19:0f:c0:4c:
e9:02:ee:2a:e0:57:e1:66:01:68:d6:f4:fb:52:8e:
6b:a5:ed:da:6f:07:cf:f9:c8:ab:d4:78:e9:45:f9:
dd:0e:66:a0:45:55:a4:8e:4e:5f:82:9c:ee:80:47:
28:fb:97:c3:6e:c9:73:1f:9f:62:b5:3f:6d:c3:02:
29:ac:c9:a4:5d:6f:63:e5:fd:44:56:e9:a2:22:1a:
ab:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:20:C8:5B:CB:A4:B7:F5:EF:96:88:CE:F6:CA:6C:0F:D0:3D:D1:A5
X509v3 Authority Key Identifier:
keyid:98:6B:0D:53:76:4B:C8:3D:C0:E0:72:EC:AF:36:9C:79:F2:2A:39:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD799/13CA82FA43FB11EB9F73D63CC4F9AE02/mGsNU3ZLyD3A4HLsrzacefIqOdc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mGsNU3ZLyD3A4HLsrzacefIqOdc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD799/13CA82FA43FB11EB9F73D63CC4F9AE02/mGsNU3ZLyD3A4HLsrzacefIqOdc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:32:25:32:26:98:14:e7:40:fa:fd:78:a6:c5:f5:0b:59:58:
34:54:88:b0:b2:f5:f9:6c:79:ef:44:ab:87:70:13:9e:84:0d:
dc:96:d9:82:8f:a7:64:45:2f:43:76:d4:be:15:1d:8d:97:76:
9f:fa:bf:20:ab:82:2a:14:16:8e:d4:7b:6d:bc:97:a8:cf:ca:
5c:5e:99:13:e6:d6:20:e9:69:dc:91:56:73:7d:42:45:4b:29:
7e:ac:a6:57:f6:56:ed:b0:28:7c:d7:0a:87:73:df:7f:e9:78:
50:39:58:00:f4:f7:ae:2b:79:b9:f2:f1:68:95:23:46:78:e2:
56:ac:f2:87:f7:29:6f:d4:a4:a9:1e:ac:0b:57:13:f1:3e:84:
bf:ce:4c:a2:ec:9f:50:a8:67:b0:bf:f3:2f:31:eb:2b:a3:a7:
87:bb:c2:78:b4:c7:c8:bc:44:8e:c0:03:02:dc:1b:14:ba:81:
38:2d:88:3c:d7:ae:5f:cc:fa:8c:7a:50:81:e4:38:0b:e4:93:
ce:a4:89:02:6f:be:b4:19:65:cd:c5:00:30:2d:58:cb:a5:e4:
4a:27:1e:a5:08:dc:7a:8d:58:7e:a4:dd:9a:ec:eb:39:b1:b8:
81:63:15:01:7d:cd:41:66:d7:4e:1c:4c:d4:1c:34:1b:b5:50:
85:0a:99:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:26:51 2026 by rpki-client