
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft
File: gqPk4CGF_7caxsaYwGdUjZzBhxA.mft (raw, json)
Hash identifier: 7uSKPtGNelkTJf+kcXRHJiow67fQIDK6+woyF0N9XzM=
Subject key identifier: D7:C6:B5:70:D0:AF:1F:3E:09:FD:DD:5A:72:12:8B:C4:B8:36:40:62
Authority key identifier: 82:A3:E4:E0:21:85:FF:B7:1A:C6:C6:98:C0:67:54:8D:9C:C1:87:10
Certificate issuer: /CN=A91F33D6/serialNumber=82A3E4E02185FFB71AC6C698C067548D9CC18710
Certificate serial: 0767
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqPk4CGF_7caxsaYwGdUjZzBhxA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft
Manifest number: 0758
Signing time: Tue 22 Sep 2026 21:31:04 +0000
Manifest this update: Tue 22 Sep 2026 21:31:03 +0000
Manifest next update: Tue 29 Sep 2026 21:31:03 +0000
Files and hashes: 1: gqPk4CGF_7caxsaYwGdUjZzBhxA.crl (hash: NQrLXwI8S1N2D7mor/16xL+cQlXsEOy+M6vLtLhLQrQ=)
2: 9C53117E83FB11EBB159507AC4F9AE02.roa (hash: AvFpiPzoylVw4G/MsLt4TbCQjir5YYIiqW7GJXdzpek=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.crl
rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqPk4CGF_7caxsaYwGdUjZzBhxA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 21:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1895 (0x767)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F33D6, serialNumber=82A3E4E02185FFB71AC6C698C067548D9CC18710
Validity
Not Before: Sep 22 21:31:03 2026 GMT
Not After : Sep 29 21:31:03 2026 GMT
Subject: CN=6ab2f397-1f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:95:e8:cc:cb:d6:fe:a9:07:7a:71:4e:2b:94:
07:d2:2b:0f:05:2d:83:6a:ed:0b:d6:d8:e5:18:a9:
dc:e7:4f:6a:61:38:dd:d6:64:3d:5d:b4:0f:90:90:
ce:68:ca:19:a3:cf:03:d9:9d:9c:80:d6:40:b7:e9:
0f:8a:cc:db:97:6f:3b:0d:99:40:94:e3:d6:8d:83:
d6:7a:46:0e:b1:d5:0b:57:09:c0:88:c6:05:3d:31:
c3:a2:b5:e4:72:35:4f:79:cb:bc:0b:74:84:33:17:
80:a7:7a:4f:42:11:71:48:e2:4d:a3:dc:c3:a9:e6:
24:e1:ce:cb:9c:d2:b6:ce:02:16:94:19:0f:1d:e2:
ee:53:a8:91:26:6c:05:02:e0:4a:a6:c4:ed:ca:d8:
37:f6:b4:a6:7e:6d:a7:79:5b:96:42:8c:04:f3:96:
f8:4c:37:a2:f5:aa:27:e9:f8:4e:99:e9:5b:1d:de:
08:1e:ca:20:86:8e:ce:4d:c7:1a:9c:0f:0c:92:7b:
ea:7d:05:1f:fa:56:8b:a1:b1:27:be:b4:1c:7f:e5:
4b:3b:de:50:10:06:94:81:e0:6e:7a:33:77:9a:ce:
b1:5c:90:03:7c:26:df:7c:60:da:55:71:53:03:35:
1b:79:01:33:27:44:c1:b7:9a:30:9f:7a:2d:38:a6:
f9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C6:B5:70:D0:AF:1F:3E:09:FD:DD:5A:72:12:8B:C4:B8:36:40:62
X509v3 Authority Key Identifier:
keyid:82:A3:E4:E0:21:85:FF:B7:1A:C6:C6:98:C0:67:54:8D:9C:C1:87:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqPk4CGF_7caxsaYwGdUjZzBhxA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:34:ae:5e:2b:d9:fb:0f:15:9d:d3:80:19:5d:aa:dc:a2:00:
a5:56:02:a1:a5:18:e7:06:5c:67:39:5b:a1:19:76:40:e2:b7:
6a:3d:63:62:8b:3c:e0:0b:3e:0b:27:d7:43:a8:b1:56:3b:58:
fa:7a:df:2c:be:5e:56:39:49:93:cd:53:43:03:38:82:ab:9a:
de:13:b8:73:9a:72:cc:10:a1:89:69:67:74:c3:45:ec:e7:fc:
77:c3:20:ce:db:25:bb:07:ab:4f:fa:9c:ea:de:a5:41:65:1d:
f2:62:23:8e:74:6a:9f:0a:cf:48:8d:8f:85:12:fd:df:0a:5b:
55:c7:b5:1d:a3:14:37:d3:d5:ff:4d:e5:a1:a9:9f:18:f2:6c:
6c:5b:5d:3c:b9:56:f0:9b:e5:07:b7:05:c8:ab:c8:49:87:f9:
86:8d:d6:45:5b:92:13:95:75:a0:5a:e0:2d:f6:10:00:1a:e8:
d3:0a:0e:38:f0:1c:02:c0:e4:f5:6f:9e:2a:ed:89:62:3b:4f:
17:48:ca:8f:3a:ea:a4:c9:6c:e6:92:47:2f:63:6c:4f:00:98:
85:22:3c:af:c4:3b:0b:85:8c:83:62:a5:e3:45:17:75:cf:cf:
ff:47:3b:f3:ea:36:80:cf:ab:26:4f:34:16:21:0e:3d:58:89:
7d:55:73:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:22:15 2026 by rpki-client