
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft
File: GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft (raw, json)
Hash identifier: zJZM/PLlmkCoqvLM6tUJuZh1SO2Eq7Nk4T4e2J1vR38=
Subject key identifier: 40:90:BE:F7:62:0D:AA:95:3B:A1:23:F4:B4:25:98:DF:FF:ED:4F:E2
Authority key identifier: 19:CA:97:F9:EC:B5:0C:58:4D:1B:FB:D6:B7:45:02:41:39:A0:15:22
Certificate issuer: /CN=A91475C0/serialNumber=19CA97F9ECB50C584D1BFBD6B745024139A01522
Certificate serial: 13CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GcqX-ey1DFhNG_vWt0UCQTmgFSI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft
Manifest number: 13AE
Signing time: Thu 24 Sep 2026 16:55:06 +0000
Manifest this update: Thu 24 Sep 2026 16:55:05 +0000
Manifest next update: Thu 01 Oct 2026 16:55:05 +0000
Files and hashes: 1: GcqX-ey1DFhNG_vWt0UCQTmgFSI.crl (hash: KTvRE655sVHG7RPbLDFH8mqZZQzk43F19R2OARxLorM=)
2: 1341A108C14C11E888561034C4F9AE02.roa (hash: /uY8RUP8tuD7wGWCpK0VPeMOJdExgcHrWUqm1vAPuRY=)
3: 13F37A72C14C11E888561034C4F9AE02.roa (hash: ZepnDMLI7akL9lrHf//wNWHbShyWaRdIrZLN9o/UpTg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.crl
rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GcqX-ey1DFhNG_vWt0UCQTmgFSI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 16:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5068 (0x13cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91475C0, serialNumber=19CA97F9ECB50C584D1BFBD6B745024139A01522
Validity
Not Before: Sep 24 16:55:05 2026 GMT
Not After : Oct 1 16:55:05 2026 GMT
Subject: CN=6ab555ea-b8ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8c:c3:4e:f2:15:bc:23:41:0e:b6:92:62:87:
6c:1c:cb:0f:d2:57:ab:6d:67:ae:63:86:46:75:a4:
03:24:eb:a0:7a:5e:98:41:c9:5d:b0:4c:16:21:b6:
6f:f4:2f:ac:a7:fe:86:af:24:13:52:82:9c:dc:db:
f4:0a:5f:e1:5d:7f:36:f2:59:b4:d6:30:ff:86:3a:
c9:b5:1c:77:a1:3f:a9:5e:23:17:05:32:3c:ac:75:
4e:32:09:2a:a0:25:5d:be:87:a3:71:b8:07:1d:20:
93:99:fb:e0:70:f0:bc:41:09:7f:26:27:df:b3:06:
d7:13:20:fd:5c:21:2f:99:a8:6a:a3:36:b9:e6:24:
33:eb:ba:02:31:ea:f8:09:1c:09:62:ea:3f:f1:af:
69:6b:57:84:84:ce:71:57:d7:75:d4:24:53:bc:77:
49:93:6d:b9:02:81:66:1c:8f:a2:83:ef:3b:65:c2:
79:34:b2:95:94:f3:ab:58:58:fe:c6:7b:0e:b1:ed:
30:4f:b5:1d:92:33:1b:96:2d:d8:a0:53:3a:5d:2d:
f8:9b:3d:de:9a:5a:f3:e1:48:52:dc:e7:d4:80:94:
d4:53:c6:53:54:dc:26:67:c5:fe:7c:ea:1c:68:e7:
db:60:1d:ca:97:f8:8d:52:1f:5f:21:54:92:0e:30:
3e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:90:BE:F7:62:0D:AA:95:3B:A1:23:F4:B4:25:98:DF:FF:ED:4F:E2
X509v3 Authority Key Identifier:
keyid:19:CA:97:F9:EC:B5:0C:58:4D:1B:FB:D6:B7:45:02:41:39:A0:15:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GcqX-ey1DFhNG_vWt0UCQTmgFSI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:5d:45:5b:8b:6d:df:b0:a0:da:9e:9b:46:24:cf:b6:0e:4d:
ef:36:f2:a2:3f:1f:7b:96:dc:83:9c:8e:85:d7:28:48:ed:ea:
05:1e:7c:b8:15:99:e8:fa:9a:5a:8b:32:06:85:e8:09:a5:c8:
3d:ce:90:eb:db:a7:6e:49:93:66:63:da:fc:e7:3f:a8:b5:a8:
ab:a2:81:27:e7:89:98:00:d6:23:2e:63:a0:5f:c3:72:cb:27:
05:61:82:ae:a8:19:ab:d4:b8:bc:28:a2:c0:bc:1e:20:c1:58:
64:1a:0f:98:3d:4d:f9:3c:37:6e:f3:47:be:9f:9c:7c:40:66:
43:65:a4:2a:d9:d5:e6:4b:0f:70:63:eb:51:28:2a:b6:7d:af:
6e:68:8f:77:2b:a3:cd:4a:cf:fb:54:8c:95:fb:51:c0:eb:d3:
8b:c8:37:4e:fe:4c:b2:f3:27:52:64:a9:11:bd:e8:be:de:4c:
0f:15:70:40:c8:1d:9d:28:ef:dd:08:7d:bf:4c:2c:28:b1:9a:
01:01:f1:0b:67:cc:1d:3e:2f:f6:df:ea:0d:b1:1a:ed:45:1a:
34:3b:71:ae:42:85:a6:24:bd:96:de:01:ca:27:de:95:4a:7a:
71:5c:60:1c:db:eb:75:fd:de:28:78:6c:15:0d:49:61:7c:e6:
b2:fd:27:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:34:22 2026 by rpki-client