
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft
File: gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft (raw, json)
Hash identifier: WeJz+lET8DUVfAfoEH3qDvOrSMdAFPU5ZXsB/zO+sHs=
Subject key identifier: 84:53:E7:51:2D:FE:BA:78:96:45:F4:42:1C:88:37:1D:B1:03:19:7D
Authority key identifier: 80:A4:B8:FC:AE:CD:01:1E:82:AA:4E:2D:72:17:3C:A6:3E:9C:4E:51
Certificate issuer: /CN=A9155D1E/serialNumber=80A4B8FCAECD011E82AA4E2D72173CA63E9C4E51
Certificate serial: 034C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gKS4_K7NAR6Cqk4tchc8pj6cTlE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft
Manifest number: 0346
Signing time: Thu 23 Jul 2026 01:56:22 +0000
Manifest this update: Thu 23 Jul 2026 01:56:21 +0000
Manifest next update: Thu 30 Jul 2026 01:56:21 +0000
Files and hashes: 1: gKS4_K7NAR6Cqk4tchc8pj6cTlE.crl (hash: LYWeS0zFNeyaL5JpsYgjA8II7n4NT8oDrfOf38+HUiE=)
2: C003531C10EB11ED9C882A38C4F9AE02.roa (hash: 4mLtegRFgk9fbTWJTkH5s5qPTSUzFVGI3R7GNiZDMVU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.crl
rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gKS4_K7NAR6Cqk4tchc8pj6cTlE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:56:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 844 (0x34c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155D1E, serialNumber=80A4B8FCAECD011E82AA4E2D72173CA63E9C4E51
Validity
Not Before: Jul 23 01:56:21 2026 GMT
Not After : Jul 30 01:56:21 2026 GMT
Subject: CN=6a6174c5-1075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:58:d7:fb:71:1c:66:cb:df:c3:45:78:26:53:
18:28:d6:a3:8f:39:fa:95:74:22:b5:57:40:77:0c:
d7:e2:09:f6:d1:64:11:3f:e4:e4:08:05:49:0c:b6:
89:3d:7f:6a:ae:94:56:e8:23:6e:8b:1b:d2:3f:89:
13:91:5e:3f:32:aa:3b:2f:c4:73:c4:50:be:a6:c0:
7b:b5:74:b4:b5:86:17:73:76:ea:c4:6d:cd:21:b7:
4c:7a:d3:fb:5f:b9:e2:88:2d:f4:3e:82:d6:23:f0:
d0:2d:2d:7a:39:a0:0a:a5:fc:a2:6b:50:e3:c3:af:
a7:aa:b3:16:94:7c:d5:bd:e1:10:fb:5d:ee:b5:d3:
3f:a5:1c:da:27:bf:ba:cc:6f:a3:62:37:3a:b6:74:
23:3d:a6:44:66:c1:fe:22:2e:42:aa:43:5b:b2:b9:
23:71:8c:e0:86:1a:56:fa:07:67:70:33:b1:4b:75:
13:06:8f:40:51:34:d3:81:8d:00:3f:a5:c5:57:98:
37:eb:a9:b5:0d:ba:6c:06:56:cd:d3:a1:f0:4f:80:
31:3e:a7:5c:02:81:87:2a:2d:c9:69:be:b0:4a:82:
84:16:3b:f2:f0:b7:bf:78:77:3b:91:ba:a4:81:5d:
c8:eb:96:9f:54:e5:1d:6e:ea:40:67:63:a2:67:46:
18:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:53:E7:51:2D:FE:BA:78:96:45:F4:42:1C:88:37:1D:B1:03:19:7D
X509v3 Authority Key Identifier:
keyid:80:A4:B8:FC:AE:CD:01:1E:82:AA:4E:2D:72:17:3C:A6:3E:9C:4E:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gKS4_K7NAR6Cqk4tchc8pj6cTlE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:6d:d0:86:b8:3f:b3:f9:93:ec:28:d8:c8:af:90:ef:07:80:
9d:f6:b4:9f:35:06:1c:9b:ef:9b:ee:f1:9e:59:3c:82:2d:3d:
41:b5:6f:1a:f6:73:4b:fc:71:e7:27:87:0d:1c:1b:9f:ad:32:
11:fe:89:59:4b:d1:0b:e2:a6:26:bc:f7:c2:f6:0f:8c:33:4e:
40:71:fa:67:11:9c:f1:77:42:2d:2c:ec:5e:d7:9a:0d:87:bc:
13:58:af:7b:5d:bb:93:05:16:59:f6:2f:2f:d2:cd:75:6d:5b:
37:f8:1b:c3:58:a1:50:de:a1:7f:53:5e:db:7d:81:ed:ca:b1:
b9:b5:d0:13:78:7d:d5:10:88:ee:91:32:6a:56:8d:1b:69:f4:
9a:a7:c7:a9:1e:34:4e:e2:8d:88:89:3c:f6:a6:c4:c5:8f:a2:
41:04:cd:36:3e:82:32:35:1c:5c:25:72:98:9f:7d:61:2d:77:
5c:f6:10:4e:e7:eb:63:a1:0e:4a:ff:27:9d:a4:08:26:53:7c:
92:9d:14:06:0d:73:f8:1a:94:ee:9d:62:f9:2e:ea:e5:ce:07:
9c:9e:90:a6:13:dd:73:50:69:d1:be:d5:ad:47:3c:97:07:54:
35:0a:cb:aa:da:9f:b8:90:fa:24:cb:35:6c:ef:70:4f:d4:4c:
7a:29:57:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:46:55 2026 by rpki-client