
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FCA47/95E76D6024D411F18AAA0942AB833773/nGKQqKEuiIZBN0PX8QV39DkWnH0.mft
File: nGKQqKEuiIZBN0PX8QV39DkWnH0.mft (raw, json)
Hash identifier: syUX/k5jybNJQNJUoLZiO9Xjr3MyLUeJyqZxSbfFRl0=
Subject key identifier: AB:B4:9D:BE:06:F2:83:D9:6A:41:CA:AD:B8:50:AE:BE:DB:8F:33:F0
Authority key identifier: 9C:62:90:A8:A1:2E:88:86:41:37:43:D7:F1:05:77:F4:39:16:9C:7D
Certificate issuer: /CN=A91FCA47/serialNumber=9C6290A8A12E8886413743D7F10577F439169C7D
Certificate serial: 6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nGKQqKEuiIZBN0PX8QV39DkWnH0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FCA47/95E76D6024D411F18AAA0942AB833773/nGKQqKEuiIZBN0PX8QV39DkWnH0.mft
Manifest number: 6B
Signing time: Sun 11 Oct 2026 08:36:23 +0000
Manifest this update: Sun 11 Oct 2026 08:36:23 +0000
Manifest next update: Sun 18 Oct 2026 08:36:23 +0000
Files and hashes: 1: nGKQqKEuiIZBN0PX8QV39DkWnH0.crl (hash: JJG2NQcrhRSOCVzjCEglfkwSUOMngMZBZmj+CBkNQJc=)
2: E3BDC64224D411F191B1E656AB833773.roa (hash: sIg+Xdz5Qyeb7OrBu/I41LeMBOQVEGrHUaZBzwqV+U4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FCA47/95E76D6024D411F18AAA0942AB833773/nGKQqKEuiIZBN0PX8QV39DkWnH0.crl
rsync://rpki.apnic.net/member_repository/A91FCA47/95E76D6024D411F18AAA0942AB833773/nGKQqKEuiIZBN0PX8QV39DkWnH0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nGKQqKEuiIZBN0PX8QV39DkWnH0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 08:36:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109 (0x6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FCA47, serialNumber=9C6290A8A12E8886413743D7F10577F439169C7D
Validity
Not Before: Oct 11 08:36:23 2026 GMT
Not After : Oct 18 08:36:23 2026 GMT
Subject: CN=6acb4a87-41b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:38:99:dd:64:29:e6:cb:03:4c:00:13:2f:de:
48:09:46:ef:51:92:9b:39:08:ae:c9:5a:c3:8a:69:
af:ac:a2:28:42:bd:5e:a8:4f:51:83:47:a8:e6:79:
32:71:59:f1:19:01:c0:c6:18:f4:60:01:07:db:bb:
2d:c5:57:36:9d:8f:53:7f:3e:ef:a6:12:bb:4b:2a:
c1:5b:c4:7f:c1:19:cb:14:4c:47:6b:f9:ae:06:3f:
3b:f1:d2:60:07:7f:ed:31:44:82:97:69:ec:53:13:
42:0b:86:73:99:2c:1d:a3:2e:7e:09:94:54:6c:d7:
65:36:d2:1e:dc:d5:ff:13:9d:91:e1:b9:7f:08:3b:
ae:18:1f:c0:0f:cc:8c:b1:10:3d:07:56:58:c3:06:
9b:3a:50:8b:5a:03:0b:b2:1e:d1:9c:28:95:91:dd:
37:bd:3d:fc:c5:c1:b8:71:1e:de:5f:0d:51:27:29:
06:f3:00:f5:a6:dc:bb:3c:b1:98:8a:86:4a:57:51:
b8:78:8f:59:5e:62:ce:f7:b1:c8:18:07:f8:57:02:
7d:ac:fc:d5:b7:17:53:e6:18:cd:17:62:1e:2a:6e:
f8:4f:86:17:57:94:ce:9c:bc:67:28:34:be:70:3a:
91:13:a4:4e:6e:4b:e8:90:f8:82:79:32:a3:56:4c:
8c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B4:9D:BE:06:F2:83:D9:6A:41:CA:AD:B8:50:AE:BE:DB:8F:33:F0
X509v3 Authority Key Identifier:
keyid:9C:62:90:A8:A1:2E:88:86:41:37:43:D7:F1:05:77:F4:39:16:9C:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FCA47/95E76D6024D411F18AAA0942AB833773/nGKQqKEuiIZBN0PX8QV39DkWnH0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nGKQqKEuiIZBN0PX8QV39DkWnH0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCA47/95E76D6024D411F18AAA0942AB833773/nGKQqKEuiIZBN0PX8QV39DkWnH0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:2e:93:aa:4d:5d:a1:9d:97:63:72:66:d9:97:d0:d2:b2:f0:
f1:9c:e6:8e:a4:ed:7a:5a:bd:ac:6a:18:0c:26:9a:bf:8a:3e:
f3:70:d9:ea:d5:95:29:89:38:6a:b4:a2:6a:93:d9:16:2d:03:
c7:8c:41:08:df:a4:3c:c1:87:90:ee:20:e0:d6:83:d2:e7:d8:
ed:21:ad:72:60:31:67:6e:2a:55:eb:bb:d5:14:a5:7f:86:c4:
d1:19:38:75:ec:9f:a8:5c:32:d8:17:a6:69:89:26:0e:cd:85:
42:85:c4:19:6b:d4:3a:69:84:01:12:7d:56:76:b6:39:22:59:
09:f1:52:be:eb:eb:55:2e:52:b1:99:2c:67:fb:b4:b3:33:03:
05:38:d1:ae:92:0f:42:4f:83:be:e8:83:34:09:dd:03:ec:1c:
17:4e:c2:ca:f9:0d:de:f3:20:aa:86:46:3d:2a:aa:f3:1b:cb:
0f:6e:d6:76:cf:28:a9:5b:96:33:e6:b2:eb:a3:16:2c:a0:24:
b7:83:90:8d:cf:5e:b7:38:b5:6b:8e:4c:45:a1:ed:b9:53:d2:
6c:f7:7a:fe:79:3e:b0:bb:61:33:bd:ba:9e:5f:a2:ca:45:54:
1e:77:44:3a:d0:bb:c2:92:7a:63:64:e5:23:36:47:80:d4:cf:
bb:5f:99:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:35:50 2026 by rpki-client