
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft
File: gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft (raw, json)
Hash identifier: 1QOqRR/fsqFKWyJMpR0URRXlWAFDFmmFTvR4lDpZ7O0=
Subject key identifier: 3B:84:61:56:77:71:A7:09:0F:FC:66:0F:F5:D0:78:05:BF:53:D8:BC
Authority key identifier: 81:A7:15:1B:17:75:92:F8:68:23:B6:9F:43:76:24:E9:C0:02:DE:41
Certificate issuer: /CN=A9175299/serialNumber=81A7151B177592F86823B69F437624E9C002DE41
Certificate serial: 0C2F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gacVGxd1kvhoI7afQ3Yk6cAC3kE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft
Manifest number: 0C18
Signing time: Thu 24 Sep 2026 18:50:23 +0000
Manifest this update: Thu 24 Sep 2026 18:50:23 +0000
Manifest next update: Thu 01 Oct 2026 18:50:23 +0000
Files and hashes: 1: gacVGxd1kvhoI7afQ3Yk6cAC3kE.crl (hash: HflXhjo5u+V3oCiPa+W3aodfOdXCXoIBRrqWGxv7SR0=)
2: 89340B10B5E011EE91DD4D53C4F9AE02.roa (hash: 6cuRYkKrSNBuAIRhtyOQTmq+Tuxf6pFsDwJm5X0jf/o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.crl
rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gacVGxd1kvhoI7afQ3Yk6cAC3kE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 18:50:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3119 (0xc2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175299, serialNumber=81A7151B177592F86823B69F437624E9C002DE41
Validity
Not Before: Sep 24 18:50:23 2026 GMT
Not After : Oct 1 18:50:23 2026 GMT
Subject: CN=6ab570ef-8d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fb:3e:e0:75:17:3b:2f:28:a4:77:72:83:c5:
26:33:7a:0f:73:d8:cf:74:6b:52:bc:0d:63:02:a7:
ac:54:40:ce:e4:30:a2:27:d3:14:cd:1f:42:ef:bc:
41:21:28:92:c7:98:ac:73:8b:03:69:0e:92:57:0e:
a4:fe:fa:c5:5d:76:d4:15:e6:07:e4:b2:ba:15:c2:
ab:37:c3:ba:29:08:ae:b3:4f:6d:1b:fd:65:34:38:
d7:7e:aa:ff:6b:58:ce:bb:46:c7:3a:9e:8e:1a:46:
a9:50:ec:24:52:7a:06:73:3f:2e:4a:c4:d9:a7:4b:
47:0c:26:65:8e:69:9d:df:8f:76:f4:11:7e:8e:97:
fc:8d:2f:cd:6a:93:cb:26:6b:ad:40:e9:1b:c7:4a:
70:91:6f:f4:86:03:39:2c:b0:e0:b5:c6:e5:d0:89:
79:3b:60:58:33:9e:58:ad:ef:c3:3f:d5:7d:71:9d:
21:95:4e:45:85:8a:cd:ee:0c:45:23:ee:8a:71:78:
6f:e2:9a:d4:0a:7f:3e:8b:0f:81:dc:de:15:15:bf:
ca:62:10:c1:b9:b9:f7:ca:4c:de:ec:bc:73:0c:32:
22:e7:29:ed:4b:81:c1:b5:ba:35:ce:d1:e8:f5:80:
66:89:fa:b0:83:33:7d:a2:47:8e:5a:da:61:3a:3c:
04:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:84:61:56:77:71:A7:09:0F:FC:66:0F:F5:D0:78:05:BF:53:D8:BC
X509v3 Authority Key Identifier:
keyid:81:A7:15:1B:17:75:92:F8:68:23:B6:9F:43:76:24:E9:C0:02:DE:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gacVGxd1kvhoI7afQ3Yk6cAC3kE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:0a:f2:86:d6:0d:72:49:2d:1a:98:d9:1c:b7:e7:a7:35:9a:
fd:39:57:d1:e1:a8:e2:a9:8b:ec:c0:3d:f6:76:ee:0b:5f:41:
c2:66:fb:56:1d:be:48:3d:8c:aa:7e:9f:cd:ad:df:d5:d5:cc:
94:13:40:1c:64:e8:0b:1c:1e:35:14:85:a4:fd:1a:8e:dd:ce:
99:6d:d7:f6:6a:ec:61:b6:ed:d7:e5:9b:3f:3b:1c:29:a2:43:
bf:88:00:4a:91:22:93:30:20:c0:08:78:b2:db:b1:8a:07:c1:
bf:cc:12:0e:3d:27:b0:bc:81:a7:40:32:4d:72:a8:70:b5:fa:
33:b9:09:70:c3:1d:c6:81:46:aa:37:8e:0c:bb:cc:06:c4:53:
13:ca:fb:f9:88:5a:57:41:50:94:98:6c:47:38:a1:10:85:28:
80:b2:0c:26:cb:c9:7b:6e:4c:79:48:45:47:9d:4b:1f:92:6c:
2f:69:6f:59:5a:a3:ba:eb:22:25:3e:36:81:25:af:5a:0e:b4:
32:aa:ba:81:ac:06:43:cd:3a:94:02:a9:3a:c4:e7:90:67:90:
db:0e:c9:9a:18:c7:6f:cf:44:94:f6:bf:1e:88:27:52:f9:5b:
f7:72:86:98:89:d5:37:54:6c:9f:ff:e5:94:1a:c7:c1:3e:e7:
74:6a:fd:35
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDC8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzUyOTkxMTAvBgNVBAUTKDgxQTcxNTFCMTc3NTkyRjg2ODIzQjY5RjQzNzYyNEU5
QzAwMkRFNDEwHhcNMjYwOTI0MTg1MDIzWhcNMjYxMDAxMTg1MDIzWjAYMRYwFAYD
VQQDEw02YWI1NzBlZi04ZDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr/s+4HUXOy8opHdyg8UmM3oPc9jPdGtSvA1jAqesVEDO5DCiJ9MUzR9C77xB
ISiSx5isc4sDaQ6SVw6k/vrFXXbUFeYH5LK6FcKrN8O6KQius09tG/1lNDjXfqr/
a1jOu0bHOp6OGkapUOwkUnoGcz8uSsTZp0tHDCZljmmd34929BF+jpf8jS/NapPL
JmutQOkbx0pwkW/0hgM5LLDgtcbl0Il5O2BYM55Yre/DP9V9cZ0hlU5FhYrN7gxF
I+6KcXhv4prUCn8+iw+B3N4VFb/KYhDBubn3ykze7LxzDDIi5yntS4HBtbo1ztHo
9YBmifqwgzN9okeOWtphOjwESQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDuEYVZ3
cacJD/xmD/XQeAW/U9i8MB8GA1UdIwQYMBaAFIGnFRsXdZL4aCO2n0N2JOnAAt5B
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTI5OS8yNjg5MEVEQTQy
QzUxMUVBQjI2Q0ZEMUJDNEY5QUUwMi9nYWNWR3hkMWt2aG9JN2FmUTNZazZjQUMz
a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dhY1ZHeGQxa3Zob0k3YWZRM1lrNmNBQzNrRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NTI5OS8yNjg5MEVEQTQyQzUxMUVBQjI2Q0ZEMUJDNEY5QUUwMi9nYWNWR3hkMWt2
aG9JN2FmUTNZazZjQUMza0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOQryhtYNckktGpjZHLfnpzWa/TlX0eGo4qmL7MA99nbuC19Bwmb7Vh2+SD2M
qn6fza3f1dXMlBNAHGToCxweNRSFpP0ajt3OmW3X9mrsYbbt1+WbPzscKaJDv4gA
SpEikzAgwAh4stuxigfBv8wSDj0nsLyBp0AyTXKocLX6M7kJcMMdxoFGqjeODLvM
BsRTE8r7+YhaV0FQlJhsRzihEIUogLIMJsvJe25MeUhFR51LH5JsL2lvWVqjuusi
JT42gSWvWg60Mqq6gawGQ806lAKpOsTnkGeQ2w7JmhjHb89ElPa/HognUvlb93KG
mInVN1Rsn//llBrHwT7ndGr9NQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 08:55:22 2026 by rpki-client