
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft
File: gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft (raw, json)
Hash identifier: /bzIGUbnL7k7x61DY6FNxjBQph1OXZGJ4tsggJ9h8Ns=
Subject key identifier: 42:44:88:E5:5C:89:1F:C7:1B:35:59:93:19:23:08:18:BA:CE:42:36
Authority key identifier: 80:08:4A:34:FD:4F:3B:93:2C:09:21:82:40:7B:89:05:D9:40:65:00
Certificate issuer: /CN=A9175155/serialNumber=80084A34FD4F3B932C092182407B8905D9406500
Certificate serial: 0735
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft
Manifest number: 0702
Signing time: Tue 22 Sep 2026 21:56:13 +0000
Manifest this update: Tue 22 Sep 2026 21:56:12 +0000
Manifest next update: Tue 29 Sep 2026 21:56:12 +0000
Files and hashes: 1: gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl (hash: adY1/tcWom2LQ+udTzjFrY2BRu7C4krJhgqiIY1TAZM=)
2: A6C94076624711EC9B815772C4F9AE02.roa (hash: dju0CNTYXThmKrA0e4pebqeIBKSRlwEicu9HpaViXJE=)
3: 86F4D41881C811ECB5F90D48C4F9AE02.roa (hash: fMMz+0pPzt4f7JJCwdRoZPgQjZkf7Cl5Iy84Bz8x9r4=)
4: 899A5138691611EFBED13942C4F9AE02.roa (hash: M2rKB/SETm64+KuJixRJ1nMhhLrqEJUPbxUEZ6z7VDs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl
rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 21:56:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1845 (0x735)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175155, serialNumber=80084A34FD4F3B932C092182407B8905D9406500
Validity
Not Before: Sep 22 21:56:12 2026 GMT
Not After : Sep 29 21:56:12 2026 GMT
Subject: CN=6ab2f97c-4fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0c:c6:b7:61:cb:64:16:08:4c:a0:c4:3a:05:
40:fd:c5:dd:19:87:9f:3c:92:ca:ce:ea:3e:85:2f:
55:d1:da:f3:7a:27:f7:ca:2e:6d:dc:83:9b:0b:9c:
0c:9f:d7:61:0a:08:9b:54:3d:7f:5a:24:ec:35:7f:
bc:3b:2f:17:63:4b:b8:03:3c:88:bf:8b:3a:6f:b0:
9d:59:d5:91:fc:57:b6:d7:2b:82:63:46:60:fa:35:
05:e7:7f:9e:1a:48:18:60:41:91:2b:f5:1e:3c:24:
71:41:e3:31:dc:3b:75:d5:bc:95:ab:0b:f8:17:51:
f0:df:41:40:b1:67:d6:5e:57:b5:b8:2a:11:cb:2c:
6e:8a:72:56:48:0e:d7:50:96:34:ff:18:5c:de:19:
b2:4f:94:d1:d1:12:17:db:6c:64:b9:dd:a0:4f:f9:
27:f8:b3:5e:2b:76:8c:7b:02:1b:ab:77:19:ce:f6:
f4:8d:4a:c5:bb:66:ef:39:00:49:af:c3:99:85:95:
fa:03:b2:63:6b:31:a7:30:3c:5c:12:33:8e:9e:9d:
16:11:88:99:88:2b:b8:e2:42:97:aa:d3:81:0e:f4:
16:de:57:e9:ed:1e:fa:5b:35:05:8f:e5:7b:d7:8e:
be:c5:17:7f:ca:ed:cc:16:77:3b:16:59:5e:17:66:
12:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:44:88:E5:5C:89:1F:C7:1B:35:59:93:19:23:08:18:BA:CE:42:36
X509v3 Authority Key Identifier:
keyid:80:08:4A:34:FD:4F:3B:93:2C:09:21:82:40:7B:89:05:D9:40:65:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:5c:ae:e4:9d:29:19:4f:10:69:45:99:61:88:be:91:4a:5f:
32:aa:10:61:84:c4:b4:c9:73:97:6e:6f:50:59:73:a8:40:7a:
d2:57:97:fc:fc:72:d9:6f:85:ed:ee:3a:ec:74:43:e0:f0:4b:
15:b9:44:80:2b:4f:e5:9d:15:48:f9:36:2d:da:99:f5:2a:65:
63:97:25:a3:3b:fc:91:bf:fa:c7:92:17:b0:98:49:ab:02:34:
9b:8e:23:1c:47:61:cd:0a:45:dd:64:0a:6b:66:f8:cf:eb:6b:
e1:c6:3c:90:f6:c2:26:5b:56:2a:8d:46:4b:db:58:cc:cd:94:
09:5f:2d:cc:e4:ee:cb:a3:ec:ef:72:56:11:dd:6a:ec:71:ce:
33:26:06:f8:b4:bc:d8:00:a3:be:9a:de:6f:51:de:0c:59:a5:
17:0d:93:5d:c7:67:85:f3:13:6b:6a:44:a0:df:37:32:c5:45:
20:9d:00:51:2e:3d:85:d0:25:90:49:63:fa:33:06:67:e4:18:
33:84:5c:3d:da:18:fb:8a:18:41:19:c5:fc:dd:cf:50:7d:3f:
ff:42:1d:2b:de:2e:0b:ce:a8:d4:a8:c9:f4:33:3c:b3:06:99:
a0:59:28:ee:37:b2:da:01:80:15:6b:19:b7:10:4d:c6:39:41:
93:db:89:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:10:38 2026 by rpki-client