
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174218/FF4EC8B629C511F19E03C0B292833773/GQA5xXsKn5HuC3B1uLPT2aQ4jU8.mft
File: GQA5xXsKn5HuC3B1uLPT2aQ4jU8.mft (raw, json)
Hash identifier: f6JVlATjhGn0dBoDv+QzH82PKFKMK2S8Z+ulKxnETJQ=
Subject key identifier: 7E:2C:30:41:A3:30:89:5E:5B:C2:2D:39:71:B4:7E:87:E4:D3:F9:54
Authority key identifier: 19:00:39:C5:7B:0A:9F:91:EE:0B:70:75:B8:B3:D3:D9:A4:38:8D:4F
Certificate issuer: /CN=A9174218/serialNumber=190039C57B0A9F91EE0B7075B8B3D3D9A4388D4F
Certificate serial: 62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GQA5xXsKn5HuC3B1uLPT2aQ4jU8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174218/FF4EC8B629C511F19E03C0B292833773/GQA5xXsKn5HuC3B1uLPT2aQ4jU8.mft
Manifest number: 60
Signing time: Fri 25 Sep 2026 08:15:09 +0000
Manifest this update: Fri 25 Sep 2026 08:15:08 +0000
Manifest next update: Fri 02 Oct 2026 08:15:08 +0000
Files and hashes: 1: GQA5xXsKn5HuC3B1uLPT2aQ4jU8.crl (hash: w4SmbqWNiFe2JSOTzqWVbmg9Z5ttDBEawuCveFR4nX8=)
2: 455BA02A29EB11F1BB259C92A0833773.roa (hash: g8eJOb8gA81Xqc3gaCShCxO43ZQLUzbdvL42NS1ZeQs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174218/FF4EC8B629C511F19E03C0B292833773/GQA5xXsKn5HuC3B1uLPT2aQ4jU8.crl
rsync://rpki.apnic.net/member_repository/A9174218/FF4EC8B629C511F19E03C0B292833773/GQA5xXsKn5HuC3B1uLPT2aQ4jU8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GQA5xXsKn5HuC3B1uLPT2aQ4jU8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 08:15:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98 (0x62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174218, serialNumber=190039C57B0A9F91EE0B7075B8B3D3D9A4388D4F
Validity
Not Before: Sep 25 08:15:08 2026 GMT
Not After : Oct 2 08:15:08 2026 GMT
Subject: CN=6ab62d8d-723b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c8:ad:bf:dc:07:42:3d:28:7c:22:92:06:81:
2d:b5:62:3f:ff:24:a0:93:83:0d:12:da:28:4e:7f:
6a:6f:be:a8:13:9a:22:cd:1b:75:0a:6b:2f:95:0f:
c7:d4:4d:f5:47:17:62:84:ec:5d:60:be:10:6c:de:
2e:6c:4e:98:b8:86:8c:b8:24:cf:d6:9d:85:e2:53:
c3:f2:f3:f4:8d:9d:5c:50:42:d7:ee:79:10:6f:6f:
74:da:8d:ed:6d:1a:ce:ea:35:f5:e5:fe:18:d2:2d:
9f:96:99:ac:15:ab:cf:80:cf:37:0c:c0:e6:f3:4a:
f9:4a:8e:35:8c:22:76:4b:35:cf:08:49:87:69:cf:
6b:8e:1a:fe:5c:2b:6c:b6:16:8f:3e:4a:2f:5a:56:
6c:da:0d:c8:46:e4:b6:d6:e7:83:ea:87:0b:26:06:
47:bd:33:23:7f:bd:42:31:5c:0c:01:1a:3b:0f:8f:
ec:98:df:09:8a:93:60:25:c2:2f:15:e5:68:c6:71:
2a:eb:b6:97:7d:14:b0:ba:c5:5c:83:af:6b:7d:82:
b6:4c:3a:a0:4e:02:95:9f:c3:3b:f6:b4:18:2f:ee:
03:cc:f2:b7:28:a3:3c:27:2c:d5:d8:45:40:17:c9:
3f:20:f6:0f:78:22:6f:27:6b:f9:f3:45:6d:5c:8c:
a5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2C:30:41:A3:30:89:5E:5B:C2:2D:39:71:B4:7E:87:E4:D3:F9:54
X509v3 Authority Key Identifier:
keyid:19:00:39:C5:7B:0A:9F:91:EE:0B:70:75:B8:B3:D3:D9:A4:38:8D:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174218/FF4EC8B629C511F19E03C0B292833773/GQA5xXsKn5HuC3B1uLPT2aQ4jU8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GQA5xXsKn5HuC3B1uLPT2aQ4jU8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174218/FF4EC8B629C511F19E03C0B292833773/GQA5xXsKn5HuC3B1uLPT2aQ4jU8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:48:1d:f3:2e:d1:49:ad:a1:b0:07:14:ec:34:27:3c:fd:15:
49:43:37:81:5b:01:e9:9e:ec:06:58:c8:1f:2f:01:cb:1f:f4:
cd:72:11:83:56:1b:ea:a6:e0:2f:55:11:8e:1d:fc:99:e9:ca:
ac:c8:69:d8:37:ef:c9:f6:75:42:f4:ea:de:a6:9a:ee:a0:a7:
14:88:13:56:2a:49:64:14:de:8e:e6:60:b6:ab:44:99:1e:dd:
57:f0:76:5f:7e:3d:de:1c:33:94:93:2f:ad:42:b7:6e:dd:53:
d6:14:d3:b9:cc:db:21:e6:39:0e:48:10:f0:58:01:db:20:2c:
e3:55:a8:8c:80:03:2b:5f:7b:ad:b8:45:64:4d:e3:9e:dc:82:
0a:cb:aa:33:a8:c5:8d:72:2b:40:b7:72:fd:4f:8d:35:94:b4:
34:20:60:5f:08:04:62:c5:59:e4:79:ad:a3:42:fe:84:1d:77:
77:33:06:99:58:18:00:d2:d0:b3:23:70:a1:96:68:fd:a7:80:
02:49:6b:b7:d3:1b:cd:f6:a3:30:50:09:87:db:fe:56:5e:44:
0a:40:f4:8e:c6:65:dd:d9:d1:be:6a:c3:8d:15:a8:ff:d7:45:
c1:73:7e:c7:cf:f8:40:76:d7:2c:08:8f:86:f4:ec:3b:8a:7e:
95:e4:e0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:18:13 2026 by rpki-client