
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft
File: gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft (raw, json)
Hash identifier: j+GSrGPngGy/H2w52gwie6dqtHUBevRrPYSnzGaCPpY=
Subject key identifier: FA:0F:9F:9C:4A:30:32:FE:7F:EB:2C:F2:05:D0:A6:18:1B:41:62:98
Authority key identifier: 80:08:4A:34:FD:4F:3B:93:2C:09:21:82:40:7B:89:05:D9:40:65:00
Certificate issuer: /CN=A9175155/serialNumber=80084A34FD4F3B932C092182407B8905D9406500
Certificate serial: 06DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft
Manifest number: 06AD
Signing time: Thu 16 Apr 2026 22:22:20 +0000
Manifest this update: Thu 16 Apr 2026 22:22:19 +0000
Manifest next update: Thu 23 Apr 2026 22:22:19 +0000
Files and hashes: 1: gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl (hash: pWFgz2KfFURVwfrW3Gu+olsUL+KY61pl2IAxYeudMtg=)
2: 86F4D41881C811ECB5F90D48C4F9AE02.roa (hash: DeneMHcuZrF9hDdFh94wwzaZjKMUOYRWB0wTW8HEivQ=)
3: 899A5138691611EFBED13942C4F9AE02.roa (hash: 641x4scZUN4ZCVnjjE3qhhOg1CGXgMpeMklKEZlPiCI=)
4: A6C94076624711EC9B815772C4F9AE02.roa (hash: V13ycXWWqywILndXonJ3QjvrQDnIDg003VYRA9hMyI8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl
rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:22:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1754 (0x6da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175155, serialNumber=80084A34FD4F3B932C092182407B8905D9406500
Validity
Not Before: Apr 16 22:22:19 2026 GMT
Not After : Apr 23 22:22:19 2026 GMT
Subject: CN=69e1611b-ebc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:af:e2:7c:39:a2:19:df:3f:f6:0e:87:ba:c7:
1a:b8:98:7b:08:be:3c:a9:a9:79:98:20:66:e3:f4:
a0:14:54:3d:4b:e7:cd:f2:c1:24:e2:89:a2:e2:2a:
a6:e0:f7:80:b8:89:28:82:72:97:e8:31:d9:c7:04:
62:d0:70:56:e4:d9:89:71:97:74:58:ee:f5:ce:de:
04:b9:9c:ff:f6:45:13:ed:83:3c:99:6b:8a:1e:ae:
24:b5:ef:3d:29:ab:a1:67:28:19:cc:f5:96:a7:51:
b2:4e:6c:95:6e:3b:04:86:07:e7:ac:1d:25:29:e0:
63:ed:4e:57:b4:34:95:d3:a3:2e:24:93:57:12:ed:
de:7a:92:2e:b6:bb:60:3a:72:23:a0:fa:22:12:9e:
d7:49:d3:34:2b:ba:9b:a6:c0:05:ca:fd:05:aa:f3:
5c:16:e7:88:df:f0:6e:e1:2b:3a:f9:b8:01:8e:57:
ac:3c:ad:da:6d:4f:29:49:65:a2:c4:39:e8:d6:15:
d7:f6:57:78:c7:68:ec:e3:d4:ff:7b:19:e6:5b:32:
a8:02:f4:47:38:ec:44:b4:fb:a2:e3:c0:ba:68:08:
0e:2a:35:17:2b:ce:01:1c:c1:3f:e3:76:d7:d2:eb:
92:e2:04:36:6a:34:65:e4:81:99:6a:fe:d0:d8:19:
0a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0F:9F:9C:4A:30:32:FE:7F:EB:2C:F2:05:D0:A6:18:1B:41:62:98
X509v3 Authority Key Identifier:
keyid:80:08:4A:34:FD:4F:3B:93:2C:09:21:82:40:7B:89:05:D9:40:65:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:b6:d2:fa:a0:69:b6:50:2d:3a:10:1a:9e:f5:21:64:52:1a:
20:5e:cb:ca:af:31:a0:90:c3:d4:d9:43:35:98:ae:ca:1d:78:
78:15:5e:ed:16:0f:b6:8f:a3:d3:aa:4c:43:60:e2:1d:19:90:
a9:17:2c:a0:df:8d:f9:05:75:3f:6d:64:a3:b8:39:4f:e2:2f:
83:ac:3e:79:30:43:73:8a:82:94:ff:af:49:08:c1:19:fd:26:
23:c4:00:89:29:e4:b2:ad:60:24:1c:bb:bb:6e:53:7c:b4:0c:
5c:a2:08:0b:a5:00:40:59:20:84:16:3f:55:5d:fe:81:6a:a2:
db:d2:f7:53:e6:62:68:73:3d:d7:2a:81:62:53:8d:f7:7e:4f:
3e:c0:a6:dc:27:56:9e:a5:ce:c0:02:9d:a6:d6:83:a6:10:ce:
dd:25:51:d1:05:89:a9:7e:f7:49:48:07:9b:3c:a4:1e:0a:cd:
09:b6:a1:98:dd:d7:42:87:ed:d7:54:a3:11:9a:62:c7:0b:69:
c0:1d:aa:d3:5d:56:81:0b:fa:e5:76:ab:54:ea:eb:14:4d:00:
3c:56:4d:96:2f:47:6c:74:f5:10:1b:72:2f:d2:5b:62:5f:4c:
2b:44:ef:6a:0d:73:23:19:1b:8d:3b:2d:08:85:42:8b:dc:5f:
b4:25:c9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:43:40 2026 by rpki-client