
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.mft
File: gxqJE23hJ6AKadPgb9DTcX986Zo.mft (raw, json)
Hash identifier: d6DuXQHVvo5vo0jswT7obhxUsSSFaeiIov3RNN0bOvM=
Subject key identifier: 47:CB:9E:9C:66:00:B3:BB:02:9A:99:29:70:6C:77:6A:81:88:0F:5D
Authority key identifier: 83:1A:89:13:6D:E1:27:A0:0A:69:D3:E0:6F:D0:D3:71:7F:7C:E9:9A
Certificate issuer: /CN=A9175964/serialNumber=831A89136DE127A00A69D3E06FD0D3717F7CE99A
Certificate serial: 012E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxqJE23hJ6AKadPgb9DTcX986Zo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.mft
Manifest number: 0126
Signing time: Mon 02 Mar 2026 12:36:32 +0000
Manifest this update: Mon 02 Mar 2026 12:36:31 +0000
Manifest next update: Mon 09 Mar 2026 12:36:31 +0000
Files and hashes: 1: gxqJE23hJ6AKadPgb9DTcX986Zo.crl (hash: pg7WfVms1/Ml1LMANqc3dUqMXHTesq5AVldW7yD9/gU=)
2: ECF347EC790211F0AEB6EC56C4F9AE02.roa (hash: E21PsZKvqAxQMcepIY2F6xG6o5K8GOgDKy3j1+9uS6U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.crl
rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxqJE23hJ6AKadPgb9DTcX986Zo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 12:36:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 302 (0x12e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175964, serialNumber=831A89136DE127A00A69D3E06FD0D3717F7CE99A
Validity
Not Before: Mar 2 12:36:31 2026 GMT
Not After : Mar 9 12:36:31 2026 GMT
Subject: CN=69a5844f-419f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8d:38:70:ec:2c:3f:90:27:86:21:11:9b:ea:
d9:36:82:2b:35:9a:e6:e0:ab:d7:6c:a1:07:30:7c:
f6:8f:5d:c0:94:b2:00:9b:26:98:59:da:4c:b2:af:
31:33:9f:f6:c6:6c:c3:92:70:0e:31:9f:78:d2:cf:
5c:12:bb:2b:25:51:8f:3c:9d:59:63:8c:f1:76:52:
ab:a4:8c:c6:fa:c8:0f:0a:7d:59:76:60:5d:7f:45:
69:c1:57:dc:f1:18:26:65:af:48:e9:45:a4:9c:21:
fb:e6:34:31:b9:b0:3c:13:ac:22:50:53:88:24:eb:
ef:bf:82:cd:e2:2d:64:ce:35:37:f7:c0:d4:d2:c7:
6a:26:8b:bf:95:90:bb:87:77:83:5d:80:fa:77:e0:
12:47:61:5d:e9:0a:13:f3:b8:d9:8e:00:a3:3a:70:
0e:89:99:a5:a0:2a:d4:cb:30:24:0f:fe:c6:b4:46:
0f:6d:ba:ee:d8:c4:24:d2:9e:3f:65:1a:d8:da:e0:
44:1f:a9:ef:c1:3d:85:f8:be:07:9e:cb:5d:bc:92:
02:46:04:ee:2e:b4:9e:d0:87:8a:b1:63:9c:08:40:
9a:57:b6:4e:2d:42:2f:63:19:ff:d7:03:35:3d:96:
d7:31:b3:48:b2:a7:4d:1d:3c:83:65:3c:56:27:86:
c4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:CB:9E:9C:66:00:B3:BB:02:9A:99:29:70:6C:77:6A:81:88:0F:5D
X509v3 Authority Key Identifier:
keyid:83:1A:89:13:6D:E1:27:A0:0A:69:D3:E0:6F:D0:D3:71:7F:7C:E9:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxqJE23hJ6AKadPgb9DTcX986Zo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:fb:25:8d:72:86:5f:ef:0f:df:f0:41:54:32:12:9d:fc:a5:
74:a4:a7:16:81:04:26:e0:b4:78:9f:5f:d3:77:2a:23:74:9f:
dd:29:1c:37:79:fd:af:9f:0e:a4:90:ec:1b:cc:b4:79:01:55:
56:78:8c:2b:d9:5f:9a:f2:90:e7:d2:91:93:9c:46:1b:b2:0c:
51:27:d2:7c:50:de:db:08:5d:3a:0b:fc:1f:b1:e7:c0:c3:22:
81:a2:9f:cb:93:e1:a7:14:b2:2b:3f:75:b5:2b:be:11:d3:6f:
61:cd:74:ac:42:28:b8:7e:6d:fa:56:bc:5f:69:e5:44:75:bd:
61:ad:56:5a:19:31:88:c1:cb:cf:6b:1a:8e:dd:da:09:34:38:
3f:a8:06:41:be:76:dc:70:ed:4a:e6:09:af:df:26:68:f9:56:
da:4c:35:ab:3f:cf:d7:06:4c:bc:6e:e4:4c:7d:ec:1c:52:28:
00:33:1d:da:3f:1f:bc:c8:b6:29:9b:32:52:60:49:66:af:f5:
7f:5b:ec:b1:af:6f:d0:94:3a:e4:5b:41:2d:60:de:6f:e1:b2:
d3:e2:11:d5:38:f9:7f:b4:11:0e:c8:0a:a2:cf:2e:95:5f:22:
4c:e2:d3:47:60:ab:61:45:4c:f1:25:35:c4:c9:fc:4e:06:e5:
52:f9:0d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:18:30 2026 by rpki-client