
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.mft
File: gqha_fMpJW9H4LcAstFHVqEEwRI.mft (raw, json)
Hash identifier: 72zNX/u8I+F/C8ukFM+9asdCkywWtSmi2GbnN2Al4RU=
Subject key identifier: C4:DC:32:7E:96:DD:E6:B6:5D:1C:79:02:53:C0:B9:2F:52:57:FE:8B
Authority key identifier: 82:A8:5A:FD:F3:29:25:6F:47:E0:B7:00:B2:D1:47:56:A1:04:C1:12
Certificate issuer: /CN=A9171C23/serialNumber=82A85AFDF329256F47E0B700B2D14756A104C112
Certificate serial: 063D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqha_fMpJW9H4LcAstFHVqEEwRI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.mft
Manifest number: 0632
Signing time: Tue 12 May 2026 22:51:42 +0000
Manifest this update: Tue 12 May 2026 22:51:41 +0000
Manifest next update: Tue 19 May 2026 22:51:41 +0000
Files and hashes: 1: gqha_fMpJW9H4LcAstFHVqEEwRI.crl (hash: cAOtGfEgIpKCovF2w0QA/dmUEUFIt3W3xP7zbga1qB4=)
2: 7CC19FBCDCAA11EBB87DAD44C4F9AE02.roa (hash: RNOiyIzbKTB4ZVG6uJRWT45MJtr9H4xdATELouVGdxk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.crl
rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqha_fMpJW9H4LcAstFHVqEEwRI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 22:51:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1597 (0x63d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171C23, serialNumber=82A85AFDF329256F47E0B700B2D14756A104C112
Validity
Not Before: May 12 22:51:41 2026 GMT
Not After : May 19 22:51:41 2026 GMT
Subject: CN=6a03aefe-f65a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4b:82:4b:41:cb:3d:d8:37:8c:33:e8:6c:88:
ea:98:4f:c9:90:68:58:60:1c:52:fa:ae:63:4c:5c:
5f:69:94:7a:a7:84:b1:9c:56:69:93:9f:4a:d2:96:
a1:c4:1d:7c:18:39:2f:3d:a9:0e:e4:26:4b:3d:a6:
b0:73:94:84:19:e3:2d:0c:bf:60:6c:f2:3c:76:ca:
92:76:3d:0a:ff:d6:45:ec:19:58:02:e9:25:1d:6c:
bc:e9:dd:4a:d1:7b:c9:59:2c:78:c2:cf:e3:05:05:
68:51:a8:52:11:57:08:c8:84:1d:e8:38:cd:20:e7:
08:49:14:8a:84:8d:28:a5:5f:9a:71:5f:7e:68:4a:
30:f1:e6:56:30:31:c3:85:b3:33:6b:63:e5:cd:33:
04:21:1b:a5:6d:b8:4a:f7:a6:fb:25:b4:67:e7:c7:
21:1e:67:39:07:09:33:25:0d:1e:53:ba:bd:4c:48:
4b:58:92:aa:00:57:6e:92:a4:f8:c6:b2:86:bf:4d:
f5:c9:61:6a:d0:97:2a:ff:dc:bb:3c:e6:54:16:77:
e1:f0:cc:21:8c:06:46:1d:68:43:64:45:38:df:c7:
56:11:a9:8d:77:8c:9a:95:66:26:22:91:f9:ae:f7:
e7:68:c0:b2:80:0e:96:97:3f:6e:4c:28:b1:a0:5e:
87:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:DC:32:7E:96:DD:E6:B6:5D:1C:79:02:53:C0:B9:2F:52:57:FE:8B
X509v3 Authority Key Identifier:
keyid:82:A8:5A:FD:F3:29:25:6F:47:E0:B7:00:B2:D1:47:56:A1:04:C1:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqha_fMpJW9H4LcAstFHVqEEwRI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:80:ee:30:9d:a1:89:be:65:cc:c9:23:84:15:e3:ee:01:2b:
c2:77:ea:8f:c4:8b:a3:27:b8:06:f1:7a:57:2d:ba:0f:0b:2f:
79:f7:aa:1d:87:f2:06:09:7a:f4:7e:71:62:1a:61:8d:9c:ff:
79:64:67:39:32:a6:f9:be:15:b5:bd:38:f6:4b:fa:35:60:6d:
2a:93:a9:a4:c7:11:91:7d:50:b1:93:59:74:ff:2f:7e:5d:53:
82:1a:cc:86:5f:fd:b2:81:41:2a:fc:9b:9e:32:ac:e2:c0:7f:
7f:8d:99:fe:03:da:8b:2c:23:45:33:b5:65:57:27:f7:6a:8b:
ae:78:9a:be:61:70:05:33:3a:15:a3:f0:0e:52:20:66:4f:81:
00:e8:1c:14:4f:37:65:16:65:d5:e8:cf:aa:b7:a8:e5:76:df:
8c:c5:2e:60:f9:80:7e:ce:dd:63:d6:e7:f5:46:cf:af:70:46:
43:e6:6f:d8:99:eb:d2:17:df:83:84:55:c3:c9:23:bb:c0:d8:
b7:16:58:70:16:22:61:3b:40:7c:3e:5c:8c:bb:22:7e:68:7b:
26:6e:89:1e:ff:0d:fd:df:be:1d:ce:dc:36:c4:df:fc:5f:01:
58:88:22:70:bc:d9:4c:ed:f6:49:b2:96:1d:cc:27:aa:24:b6:
45:ee:00:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:19:44 2026 by rpki-client