
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft
File: gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft (raw, json)
Hash identifier: BJpIJdg9mdH87Jl6IGNoZGU4bfRh4P+aOSpI1nSUZAc=
Subject key identifier: B2:4F:DA:0D:D8:C5:8D:D9:86:A6:B4:85:48:3C:81:02:8D:DD:43:41
Authority key identifier: 81:1D:E1:1E:7E:DC:1C:10:76:05:59:EE:B3:9B:FD:66:D6:9A:EA:46
Certificate issuer: /CN=A91E6BEF/serialNumber=811DE11E7EDC1C10760559EEB39BFD66D69AEA46
Certificate serial: 0E93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gR3hHn7cHBB2BVnus5v9Ztaa6kY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft
Manifest number: 0E87
Signing time: Tue 22 Sep 2026 17:37:33 +0000
Manifest this update: Tue 22 Sep 2026 17:37:33 +0000
Manifest next update: Tue 29 Sep 2026 17:37:33 +0000
Files and hashes: 1: gR3hHn7cHBB2BVnus5v9Ztaa6kY.crl (hash: K61DnKD9CNSLl7tpTeNrBzhhv0kLWVZ5CrMCPe09NRg=)
2: FEBD6C62C4B511E9B7D53A7FC4F9AE02.roa (hash: DD1ADaREQj4FZ7nnow63JObODw7KCChH9CO7F5RCGA8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.crl
rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gR3hHn7cHBB2BVnus5v9Ztaa6kY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 15:21:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3731 (0xe93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6BEF, serialNumber=811DE11E7EDC1C10760559EEB39BFD66D69AEA46
Validity
Not Before: Sep 22 17:37:33 2026 GMT
Not After : Sep 29 17:37:33 2026 GMT
Subject: CN=6ab2bcdd-45a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c4:cc:4f:7b:0b:4f:ba:be:23:d6:0a:81:f5:
aa:92:67:83:f7:d8:f8:60:d9:37:28:eb:cb:14:c0:
e7:b2:e4:01:60:46:5b:71:a8:53:8e:4a:9a:35:9e:
c2:b3:a3:68:4e:85:f4:6d:61:24:6d:dd:8c:82:7d:
35:ce:66:20:81:d6:cc:e6:6a:2d:97:fb:cd:13:cf:
6c:8a:1e:d0:3f:f6:4d:18:b8:d7:18:66:73:8e:52:
eb:ca:61:f0:21:94:06:4a:83:77:4b:eb:5b:ba:60:
61:be:c1:80:c9:0f:98:06:3c:35:9d:03:2c:05:51:
d9:0d:5c:1d:21:92:d6:c6:3d:4d:de:6e:9a:9e:24:
0d:e6:c7:06:56:34:c3:83:cd:c6:56:ab:e2:b7:57:
1e:19:bf:4b:ea:9e:9d:8f:4e:ff:bf:81:b1:64:2c:
6c:d5:86:d5:b8:da:f6:91:4d:e4:69:0e:e4:12:be:
be:68:ed:16:76:16:19:c4:18:99:aa:98:73:78:2c:
55:3d:36:f5:47:ff:06:98:8e:02:f6:93:d6:ea:20:
e3:65:ca:65:03:6e:51:82:e0:a1:6f:47:bb:8e:9e:
e8:f9:c5:15:dd:86:a6:83:1a:13:2b:68:93:92:3d:
d6:01:3a:26:03:c0:7c:6f:55:5e:ba:78:d2:a5:da:
f6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:4F:DA:0D:D8:C5:8D:D9:86:A6:B4:85:48:3C:81:02:8D:DD:43:41
X509v3 Authority Key Identifier:
keyid:81:1D:E1:1E:7E:DC:1C:10:76:05:59:EE:B3:9B:FD:66:D6:9A:EA:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gR3hHn7cHBB2BVnus5v9Ztaa6kY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:a1:a0:2b:ce:23:ee:5b:82:cf:57:96:67:b4:cd:a5:d7:0b:
45:b8:68:66:aa:d2:41:87:a0:15:78:99:55:05:37:60:61:f6:
b1:be:d3:e2:92:1b:41:17:79:54:9b:aa:28:74:32:92:51:af:
1f:f5:fa:00:14:24:30:8b:55:f4:cf:d8:02:15:1f:9f:8d:a5:
b4:68:b2:ae:63:b5:99:82:06:b1:0f:3d:50:c0:de:91:14:52:
03:ae:41:d7:6f:f4:c8:62:3d:64:4f:f5:8a:dc:90:df:6b:34:
59:e8:2e:40:2b:75:38:7b:90:9b:eb:ec:da:c2:d4:2d:8a:61:
c5:4c:93:49:fe:02:34:39:2f:be:3e:3a:82:61:3b:a4:a5:20:
f7:7d:8c:9c:ff:45:13:eb:b0:91:32:f9:8d:3b:c4:27:96:b8:
e7:6c:eb:86:6c:78:94:c1:e5:b0:19:80:91:87:79:89:3e:15:
4a:fa:08:e0:cd:6b:3d:d0:39:e6:96:01:50:3b:d7:65:f7:ad:
45:f7:70:fb:29:e6:68:43:6f:8f:ae:e4:91:09:fd:22:04:27:
5c:88:ce:82:9f:d3:17:27:69:ec:07:a8:88:5e:8e:f7:ea:7c:
b3:6f:e6:1e:0c:7b:36:4e:9e:15:87:ec:8f:a1:90:34:9d:33:
9a:03:3a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:46:06 2026 by rpki-client