
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft
File: gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft (raw, json)
Hash identifier: McGbbbTrnlccs6d7jLzU8jNpI5vbMrAPWJrSXVgsDlw=
Subject key identifier: 1A:55:17:47:47:15:34:12:57:63:85:94:FE:84:8E:A1:CA:E5:8E:DC
Authority key identifier: 80:08:4A:34:FD:4F:3B:93:2C:09:21:82:40:7B:89:05:D9:40:65:00
Certificate issuer: /CN=A9175155/serialNumber=80084A34FD4F3B932C092182407B8905D9406500
Certificate serial: 06BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft
Manifest number: 0693
Signing time: Sat 28 Feb 2026 23:03:12 +0000
Manifest this update: Sat 28 Feb 2026 23:03:12 +0000
Manifest next update: Sat 07 Mar 2026 23:03:12 +0000
Files and hashes: 1: gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl (hash: asHtdmHLbaiCrLoX/c5uJlzhP72eV5AX+g97hURLOXs=)
2: 899A5138691611EFBED13942C4F9AE02.roa (hash: VYrhe6Mi0RTaO+P8HqkxU1Qva61wirf2XWWIcdNAN4k=)
3: A6C94076624711EC9B815772C4F9AE02.roa (hash: XosrUy+Xd/y9+zlNKWBW88xmxi0w+unp/BWLX4a8k/0=)
4: 86F4D41881C811ECB5F90D48C4F9AE02.roa (hash: jcE65YGPbY23C0JRfHdMvEfT+xppldiedci4zrgXKQc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl
rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 23:03:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1725 (0x6bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175155, serialNumber=80084A34FD4F3B932C092182407B8905D9406500
Validity
Not Before: Feb 28 23:03:12 2026 GMT
Not After : Mar 7 23:03:12 2026 GMT
Subject: CN=69a37430-6170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:05:53:20:cb:35:9b:0d:29:d1:19:ed:be:8c:
db:a0:b1:56:04:b5:90:a6:fe:c1:bb:ea:eb:f3:07:
72:d3:d9:5b:b9:41:2a:23:f4:4c:d3:36:4a:c8:41:
80:25:a2:62:b1:ad:e8:be:d8:f7:84:d4:7c:c9:f5:
52:20:f3:cc:44:b9:db:94:b4:18:18:c3:5f:38:f8:
6d:d8:a2:91:35:bf:28:ef:fa:53:81:f5:bc:e7:dc:
aa:d0:c2:94:fb:99:5c:98:2a:aa:43:af:29:a8:ef:
3e:80:2d:e5:63:c6:f9:65:92:0b:01:3f:f9:35:a1:
50:75:bc:46:fd:b3:74:2c:a3:d5:57:d3:a2:21:ee:
d2:7f:50:7e:3b:0d:08:aa:5d:f8:54:04:07:da:af:
a6:64:1f:6c:4d:5d:71:99:71:7c:12:79:b0:3f:4f:
4c:d6:ea:dd:cc:a8:64:e9:44:9b:08:1e:6d:c1:0d:
de:60:96:f6:ff:93:55:f6:e8:42:a5:09:69:bb:71:
57:4d:6d:f6:d0:72:53:02:ce:f7:33:a7:08:92:0d:
c1:c7:a5:13:b1:e9:b9:2f:3c:e1:62:84:26:46:68:
96:b8:70:d8:d8:fc:cc:02:02:f4:3d:e8:a3:2b:66:
4f:60:23:26:a3:96:59:04:38:37:b9:ca:7d:6c:00:
07:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:55:17:47:47:15:34:12:57:63:85:94:FE:84:8E:A1:CA:E5:8E:DC
X509v3 Authority Key Identifier:
keyid:80:08:4A:34:FD:4F:3B:93:2C:09:21:82:40:7B:89:05:D9:40:65:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:be:14:d6:80:f8:ac:6f:0d:08:f7:ae:74:58:cc:30:c6:1d:
6f:b8:cc:0b:7c:a3:4d:0a:31:a7:62:c9:4a:ee:f8:5f:90:39:
8d:b8:fd:0b:04:c0:77:1f:a6:9e:80:68:24:9a:2e:94:06:0e:
8e:f5:8d:be:d7:7b:25:b8:e2:44:f4:b6:34:3c:74:8e:f5:2e:
ad:a2:a8:67:67:82:32:88:b0:60:66:e2:d6:3b:63:ad:5a:da:
12:f8:68:e2:3b:f9:1c:ba:5f:61:5d:4a:e3:8d:4a:ed:7e:d9:
e2:39:c4:c0:23:e7:e2:4b:bf:63:c6:b5:6e:6a:b6:1c:02:54:
b5:33:52:80:9d:2c:54:c2:c9:1e:90:cb:28:20:2b:58:f2:fa:
6e:6f:a0:d3:07:0e:92:13:51:1f:80:93:bf:f5:d1:5f:f7:c5:
e2:8c:2d:ea:f6:a2:22:aa:40:09:9e:49:74:30:4e:e8:c5:22:
e9:84:dd:b5:68:5a:2b:64:5f:ef:9d:7c:3a:75:97:88:bb:45:
94:96:35:a0:30:bd:59:2e:95:b5:7f:d5:35:b7:d0:1c:72:07:
d8:a5:02:fd:cb:08:7e:74:9a:e0:be:11:b5:f8:2a:1c:50:41:
b6:36:32:99:01:0f:93:97:7f:2c:82:4c:c1:66:b0:b6:3d:00:
ab:6b:25:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:38:59 2026 by rpki-client