
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft
File: gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft (raw, json)
Hash identifier: Dk8VSkDWQifPBJXP6xRsB/Z7JwE2Bu3xbabcVFRqP94=
Subject key identifier: 48:18:D1:62:C7:0D:8C:BA:23:30:6C:CB:04:53:BF:26:3A:1B:67:60
Authority key identifier: 80:A4:B8:FC:AE:CD:01:1E:82:AA:4E:2D:72:17:3C:A6:3E:9C:4E:51
Certificate issuer: /CN=A9155D1E/serialNumber=80A4B8FCAECD011E82AA4E2D72173CA63E9C4E51
Certificate serial: 0338
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gKS4_K7NAR6Cqk4tchc8pj6cTlE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft
Manifest number: 0332
Signing time: Sat 13 Jun 2026 01:06:03 +0000
Manifest this update: Sat 13 Jun 2026 01:06:03 +0000
Manifest next update: Sat 20 Jun 2026 01:06:03 +0000
Files and hashes: 1: gKS4_K7NAR6Cqk4tchc8pj6cTlE.crl (hash: Aj27mJCdAF2Dg6rpO4QfvTSUz/piBRN3dZ5My4404JA=)
2: C003531C10EB11ED9C882A38C4F9AE02.roa (hash: 4mLtegRFgk9fbTWJTkH5s5qPTSUzFVGI3R7GNiZDMVU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.crl
rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gKS4_K7NAR6Cqk4tchc8pj6cTlE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:06:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 824 (0x338)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155D1E, serialNumber=80A4B8FCAECD011E82AA4E2D72173CA63E9C4E51
Validity
Not Before: Jun 13 01:06:03 2026 GMT
Not After : Jun 20 01:06:03 2026 GMT
Subject: CN=6a2cacfb-f066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7b:7e:16:bb:cb:89:36:0f:a5:73:5e:11:c8:
37:22:08:75:2f:8e:96:b2:e6:84:a6:bd:4f:8f:5b:
d8:cb:4d:a7:83:ca:ed:5b:41:d2:cb:50:35:05:22:
d8:1a:92:6d:ed:84:d0:7f:1d:d5:c2:3a:9a:4c:10:
11:a6:fd:06:01:39:24:1a:2d:f6:a2:18:f2:64:c0:
49:b7:44:fb:48:67:91:4a:a9:14:65:d2:ec:3b:ac:
c6:bb:19:2d:f2:6f:a7:ab:2b:d3:5a:d9:42:49:5d:
e0:f8:14:1b:96:01:cd:5e:78:84:d1:dc:a1:17:de:
06:9d:32:b4:5e:7f:4e:8d:fc:ee:fc:73:f2:6e:71:
56:28:ca:2d:3d:57:5d:12:07:8b:11:7b:0b:c5:b7:
22:27:50:b6:d5:17:2a:e6:2b:fb:04:39:62:73:57:
b9:a6:f7:cf:bf:a1:3f:e6:fd:a7:2c:9a:6e:5e:8c:
b7:41:df:0a:65:18:da:2e:11:a2:46:01:b3:d5:06:
78:d3:3f:4c:3b:5b:1b:be:22:2d:19:38:8d:7c:52:
41:11:1b:8a:ab:2b:7b:ba:6f:1d:3f:a2:cf:94:a3:
0a:cc:4b:35:04:16:50:c9:4b:d4:f6:13:12:cb:22:
b3:66:87:26:ba:80:a5:3e:a8:b8:47:41:3d:51:b5:
db:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:18:D1:62:C7:0D:8C:BA:23:30:6C:CB:04:53:BF:26:3A:1B:67:60
X509v3 Authority Key Identifier:
keyid:80:A4:B8:FC:AE:CD:01:1E:82:AA:4E:2D:72:17:3C:A6:3E:9C:4E:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gKS4_K7NAR6Cqk4tchc8pj6cTlE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:c4:5d:5a:11:01:54:55:ca:16:b8:f0:20:37:fa:b7:db:c2:
bd:85:9f:08:63:da:6f:71:37:2c:2a:ff:d7:5f:be:5f:33:4e:
f0:1c:dc:89:70:2f:db:67:95:3c:b1:66:de:59:c9:f2:b9:50:
d4:57:a5:09:3b:4e:35:83:48:80:ed:fe:f1:b5:08:62:b1:66:
b4:60:af:97:f4:d7:a6:e9:d6:c9:6b:6c:22:52:c1:ab:71:85:
88:ed:2d:bf:f3:5e:09:64:6b:36:1b:21:67:68:4c:93:01:aa:
18:47:48:a5:d9:85:ff:7c:b5:29:7e:11:17:aa:b8:56:85:5c:
76:06:9f:ba:00:f9:1e:95:2b:e3:9d:36:ea:97:20:a3:85:32:
94:3c:de:1f:4e:86:6c:1d:98:0f:db:fd:a9:26:8c:1d:4e:b6:
41:6e:7a:0e:df:5c:a7:47:8a:70:84:6e:ff:2e:8a:f1:fa:cf:
2a:68:d7:85:c7:a8:89:13:8d:a6:bd:c2:5c:2c:19:74:af:c6:
58:4a:f7:73:85:7a:94:e7:52:4d:44:68:2f:76:46:ae:15:d7:
c5:4f:e6:1b:54:f3:f1:04:4d:0e:b3:bd:78:8b:65:bd:63:d8:
cd:ab:98:2e:eb:cb:2f:27:29:83:18:b7:02:c6:e5:11:02:8b:
6a:ed:a7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:56:00 2026 by rpki-client