
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.mft
File: G_l27-qyMS6i2shrmKOYzwxb1vA.mft (raw, json)
Hash identifier: 0HPDM6TF+90chrOgRTUUoQ2jsauTw4rL535a3+nXuUs=
Subject key identifier: 77:F4:07:0C:5D:5B:A0:EA:76:B7:9A:75:D7:BB:23:38:47:37:4D:98
Authority key identifier: 1B:F9:76:EF:EA:B2:31:2E:A2:DA:C8:6B:98:A3:98:CF:0C:5B:D6:F0
Certificate issuer: /CN=A91E772F/serialNumber=1BF976EFEAB2312EA2DAC86B98A398CF0C5BD6F0
Certificate serial: 01E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_l27-qyMS6i2shrmKOYzwxb1vA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.mft
Manifest number: 01DA
Signing time: Sun 27 Sep 2026 03:58:16 +0000
Manifest this update: Sun 27 Sep 2026 03:58:15 +0000
Manifest next update: Sun 04 Oct 2026 03:58:15 +0000
Files and hashes: 1: G_l27-qyMS6i2shrmKOYzwxb1vA.crl (hash: r/HcACjdUkJAwUPgjS+W9buGElNEyWjBr8HV5JX+YRQ=)
2: 82743A06E2EB11EEBAC73D0CC4F9AE02.roa (hash: TIZeIXMxH/g7IBfyQKH/0w6l2Px6CMtSaVjFWk73A/U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.crl
rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_l27-qyMS6i2shrmKOYzwxb1vA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 03:58:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 480 (0x1e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E772F, serialNumber=1BF976EFEAB2312EA2DAC86B98A398CF0C5BD6F0
Validity
Not Before: Sep 27 03:58:15 2026 GMT
Not After : Oct 4 03:58:15 2026 GMT
Subject: CN=6ab89458-5367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7f:f3:98:41:91:78:c2:e3:24:b6:5b:96:14:
a7:b2:f6:67:91:6e:9c:4b:ba:b7:66:ff:45:09:8c:
01:5f:a6:6e:07:1c:0f:31:86:0b:39:1e:43:32:5c:
9e:05:57:ee:a3:90:22:fa:0c:30:a3:6b:30:98:af:
5b:dc:46:5a:8b:d0:e3:c1:3c:93:e6:d8:8d:84:92:
90:80:3f:dd:ad:5e:d4:3b:d2:ab:a8:ea:74:ef:64:
7c:d9:55:21:06:9e:cd:b7:00:98:8f:65:ce:f0:76:
4f:76:f1:19:cc:7b:c0:02:9d:8d:89:d4:86:63:1f:
fa:a2:3a:bc:57:dc:ff:7f:fe:dc:c8:6d:72:1b:b1:
11:c1:1d:38:07:36:44:0a:8f:5c:eb:03:48:dc:25:
f4:6f:e3:09:f7:e1:7f:74:df:46:cc:2a:cf:51:91:
bb:98:f6:47:c6:e6:b6:f4:fb:7c:42:97:38:30:7c:
d0:6e:e4:71:b0:c9:81:45:7f:df:99:f0:dd:61:f6:
e1:91:b3:0e:da:fa:e3:08:41:12:0d:8e:68:16:f5:
fc:68:e4:e7:98:11:09:a7:49:14:a4:56:49:c4:a9:
39:c4:f5:3a:b8:d2:5a:94:03:ba:2e:dc:33:c0:ba:
c3:98:65:e4:56:6d:4b:e4:0c:ca:e5:8f:6a:03:8d:
ef:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F4:07:0C:5D:5B:A0:EA:76:B7:9A:75:D7:BB:23:38:47:37:4D:98
X509v3 Authority Key Identifier:
keyid:1B:F9:76:EF:EA:B2:31:2E:A2:DA:C8:6B:98:A3:98:CF:0C:5B:D6:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_l27-qyMS6i2shrmKOYzwxb1vA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:b2:23:c4:38:4a:c6:da:c3:35:84:ab:08:4e:9e:57:ef:44:
ce:f7:5d:b1:77:74:01:f0:38:04:8a:b9:fd:e7:24:c7:82:ff:
92:cb:13:7b:58:19:6b:68:ea:02:97:4e:06:66:44:ec:90:21:
8e:76:f3:d9:32:28:ca:b3:fe:28:32:f7:24:e9:39:71:4f:c0:
78:be:7f:ac:0c:d7:05:c6:68:f6:b1:b9:6b:78:f7:52:a2:c1:
72:17:ac:8d:15:00:81:57:1d:05:ff:96:50:97:bf:40:f7:92:
a9:1f:d4:90:fe:03:68:8a:3d:1f:c5:05:16:b5:15:41:c6:a6:
5b:09:21:34:a4:71:ce:3d:90:0b:54:eb:43:ef:61:a0:ee:17:
f0:f0:77:d9:6d:dd:26:4d:32:b3:ac:17:b9:3a:25:7f:46:b0:
a3:62:f1:07:ec:af:94:52:75:4a:66:bd:3f:18:64:07:31:3b:
f1:2e:2a:d9:ee:c2:65:e8:73:97:4a:57:ab:0e:76:2f:b0:4a:
4b:bc:38:9f:10:bf:61:97:cb:9b:33:3b:2a:81:f3:62:f5:87:
87:0e:b6:1a:04:63:99:d3:8b:3b:d8:30:8a:c3:a6:58:c0:9b:
60:4d:7f:7d:28:06:0f:4c:90:47:e0:81:44:1e:2a:57:4c:87:
ea:c2:e5:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:40:05 2026 by rpki-client