
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft
File: GkAQC15dw00ay1htJzOQptUXff8.mft (raw, json)
Hash identifier: RG0wNc/DAqUVKJpW8N1nx/hogPwomJvxFTdxeAY3vwk=
Subject key identifier: 47:19:A0:8E:C4:D4:76:D9:2B:D1:6B:59:FA:10:AF:93:94:C2:77:D1
Authority key identifier: 1A:40:10:0B:5E:5D:C3:4D:1A:CB:58:6D:27:33:90:A6:D5:17:7D:FF
Certificate issuer: /CN=A9194C99/serialNumber=1A40100B5E5DC34D1ACB586D273390A6D5177DFF
Certificate serial: 04CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkAQC15dw00ay1htJzOQptUXff8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft
Manifest number: 04B9
Signing time: Tue 22 Sep 2026 23:33:42 +0000
Manifest this update: Tue 22 Sep 2026 23:33:41 +0000
Manifest next update: Tue 29 Sep 2026 23:33:41 +0000
Files and hashes: 1: GkAQC15dw00ay1htJzOQptUXff8.crl (hash: HV3QWvZ79iafUrJQqeueKQszW+4ZEzyAO1qhM/HwKtM=)
2: F1F4D35A43AF11F1A5D478AA97833773.roa (hash: VI3eeJQdt+jfEigHcau2uDPGNXCcOfzwKNM66WXgDf4=)
3: 6DB9F0B0491911F1BE7DCD8A9C833773.roa (hash: g70kqKcQRF45XZyZmEG2xqQR/Ut/QH4FJUMA3s0GCEE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.crl
rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkAQC15dw00ay1htJzOQptUXff8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 23:33:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1227 (0x4cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194C99, serialNumber=1A40100B5E5DC34D1ACB586D273390A6D5177DFF
Validity
Not Before: Sep 22 23:33:41 2026 GMT
Not After : Sep 29 23:33:41 2026 GMT
Subject: CN=6ab31056-8df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:48:46:6d:0b:8e:5e:83:75:14:db:b6:20:f8:
d5:f2:20:dd:a3:ff:5e:f2:13:83:4a:a4:a7:04:05:
66:2a:b2:19:36:cc:05:85:db:e8:01:ad:20:b7:04:
5a:ca:b5:33:2a:91:e8:8c:b8:f2:b5:b8:d4:10:c5:
74:4a:71:87:2a:98:8b:e6:6f:7d:e8:5b:f4:a4:cf:
c3:f7:10:53:a8:ba:bb:77:d8:70:ad:41:8f:4d:62:
a7:5d:54:78:3c:d3:2b:57:ef:01:5a:4b:d4:7b:c9:
6d:85:96:7e:83:f6:31:c2:5a:66:da:29:0b:03:cb:
b5:de:83:ee:1d:f1:4f:a0:92:2b:1c:ca:ce:b8:8f:
46:51:b1:4a:88:47:52:40:1e:62:fe:4c:33:55:40:
6e:a9:f5:45:17:6a:a4:fb:24:57:96:96:41:3b:cf:
48:88:3d:57:04:fc:12:5f:69:c7:df:88:9f:69:ef:
d0:a0:55:2c:1f:46:2f:ed:b3:29:2b:7d:ce:ba:95:
a2:68:34:56:20:09:82:00:44:14:57:96:64:05:8e:
90:ad:3f:1b:a5:6a:00:a9:10:1c:4b:09:cc:1c:2c:
7c:bc:39:ae:93:ad:f7:74:15:fb:5c:b6:8b:ff:08:
d1:5c:82:8d:db:ab:ae:c4:75:0f:33:ca:4c:ba:df:
4b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:19:A0:8E:C4:D4:76:D9:2B:D1:6B:59:FA:10:AF:93:94:C2:77:D1
X509v3 Authority Key Identifier:
keyid:1A:40:10:0B:5E:5D:C3:4D:1A:CB:58:6D:27:33:90:A6:D5:17:7D:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkAQC15dw00ay1htJzOQptUXff8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:21:84:f8:d8:f7:86:f9:00:c5:2a:d8:d5:48:f4:9b:7b:18:
7c:74:df:1b:4b:c7:72:da:c6:ea:39:56:93:9c:52:4d:81:a7:
35:54:e1:e6:ed:6d:9b:89:d5:ae:81:e0:6d:69:62:08:d8:f7:
f4:11:b3:bd:25:2e:c4:f4:4c:13:e7:c2:67:f4:8c:dd:27:ce:
08:6c:61:92:08:ff:ae:22:bf:27:fb:bc:2f:81:ed:55:a1:10:
9a:cf:6c:d7:c9:de:96:99:4a:b2:fb:27:83:c7:70:be:95:d3:
cc:50:d9:7b:3b:3c:46:34:3b:e3:21:39:f3:6a:be:5e:8a:38:
a9:9b:15:b3:7b:f0:cc:99:55:34:b0:59:a7:84:e7:1d:bb:65:
9e:97:b4:4b:a6:d7:af:c3:75:77:22:96:38:1f:7f:ea:24:8c:
59:6b:6f:27:28:d9:d0:a8:95:ec:8f:bf:8e:17:93:a3:39:31:
4d:cd:57:6b:ff:51:bb:b0:6b:d8:68:94:c3:f3:d3:4a:0e:6d:
fc:10:60:cd:c5:2a:97:4e:9e:9a:9a:e8:ef:e6:d8:f3:79:52:
37:88:83:0c:0a:79:bc:fa:2c:ab:ea:34:db:75:61:96:de:65:
d7:eb:51:50:c8:b7:02:52:28:88:21:5c:fe:6d:d7:45:66:9c:
63:e4:10:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:09:54 2026 by rpki-client