
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft
File: Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft (raw, json)
Hash identifier: f9m2kONqzZ/5GahhCYG3YRxwboKnCx31Gxao1+3Ad2c=
Subject key identifier: 30:6F:61:E7:FC:C7:6A:5E:61:AA:05:07:E3:0C:F0:6B:67:15:FF:17
Authority key identifier: 1A:9F:2B:BE:A5:22:F1:EE:25:92:35:9B:4B:52:FA:2B:41:A3:CD:C4
Certificate issuer: /CN=A9184017/serialNumber=1A9F2BBEA522F1EE2592359B4B52FA2B41A3CDC4
Certificate serial: 05C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft
Manifest number: 05B4
Signing time: Sat 26 Sep 2026 23:12:00 +0000
Manifest this update: Sat 26 Sep 2026 23:11:59 +0000
Manifest next update: Sat 03 Oct 2026 23:11:59 +0000
Files and hashes: 1: Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.crl (hash: FkQoYADD0HXinVRo+DHekP1cJcA73gAVc159pQcudz4=)
2: 4349B44E6DE711F1BCBC7BF05BA30FBC.roa (hash: JD1aPI73JLaEpdcBHYLIfnAT0px6Vx5cEfrWoHfyxZ0=)
3: A6DC22C63C7D11ECB08DFD13C4F9AE02.roa (hash: DQfdj3ZMSPB3txDb1HLKXJybAJALB43rjOD3LqwaGkM=)
4: 0F8709542D6E11EC8327E321C4F9AE02.roa (hash: qaKzx77+nBK5zsg6fuFgrv2QAFMiOydcXTk+cOmWTww=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.crl
rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 23:11:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1480 (0x5c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9184017, serialNumber=1A9F2BBEA522F1EE2592359B4B52FA2B41A3CDC4
Validity
Not Before: Sep 26 23:11:59 2026 GMT
Not After : Oct 3 23:11:59 2026 GMT
Subject: CN=6ab85140-cd75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:76:6d:3a:43:95:f4:83:14:09:8c:1b:b3:a6:
14:e6:01:c2:33:45:fa:01:6b:d7:1e:d4:30:11:c3:
74:67:0b:97:c5:b6:57:30:b1:a7:e4:d8:b8:73:d5:
84:7a:82:41:64:bb:40:88:e9:6c:bb:a5:fe:ff:22:
17:a1:49:d3:62:42:59:44:ab:f2:1d:e7:a5:68:20:
e9:31:d7:3e:0f:e8:87:46:e2:26:85:7f:82:bb:f4:
c2:43:5d:1a:56:3f:f8:3e:35:47:e7:e1:c0:f1:e9:
86:16:74:a9:6d:df:2e:b0:85:be:f6:9f:1b:27:79:
35:0f:60:1d:6d:e5:13:f5:5f:5e:b0:1f:22:94:20:
4b:f9:a1:94:19:35:a7:b0:6d:f0:a8:b4:b2:11:50:
33:c3:cc:be:ae:0d:88:42:18:cd:92:ab:33:54:fb:
b0:9f:af:9f:e3:da:3a:57:58:8d:79:55:ec:4a:ca:
e5:51:22:01:ae:b2:50:1b:21:67:19:f0:c5:52:3d:
e4:b0:0f:63:29:cc:9c:84:db:cb:37:fa:6a:f3:16:
58:68:50:df:71:29:f1:d2:7f:d7:58:e4:ef:9c:b8:
fd:2f:ad:92:e8:41:2e:97:49:dd:07:d4:03:3a:c0:
e1:3f:f4:b3:e8:1e:2e:50:65:a9:0e:d0:57:3a:52:
ac:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:6F:61:E7:FC:C7:6A:5E:61:AA:05:07:E3:0C:F0:6B:67:15:FF:17
X509v3 Authority Key Identifier:
keyid:1A:9F:2B:BE:A5:22:F1:EE:25:92:35:9B:4B:52:FA:2B:41:A3:CD:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:55:16:42:49:8b:32:ee:79:54:9d:ca:50:dc:4f:55:b2:11:
49:4e:af:d3:20:f6:80:be:c9:ac:16:47:69:0a:8f:f3:60:b9:
0e:b3:35:3e:ab:c2:24:36:d9:ef:42:1d:0c:3b:17:a0:ca:88:
8b:84:71:0a:93:4b:51:5a:24:d7:01:e4:13:6b:a9:cb:b1:2f:
ec:d4:75:70:2a:0e:88:f6:16:77:e8:e4:a4:ad:2e:16:53:46:
c3:f5:af:70:d4:dd:0c:55:22:ac:1f:61:e7:5b:d1:32:1f:4e:
38:79:43:a9:fd:90:91:47:aa:76:16:fe:60:14:bb:6c:72:5f:
e6:47:d1:d9:7a:8e:33:a8:50:30:1d:6e:0a:12:30:16:aa:63:
89:2c:64:d1:6a:8b:a4:1f:e9:64:31:6c:22:11:f0:e0:45:d4:
1e:45:e0:58:10:a9:10:59:b5:34:4e:1c:4b:6d:3a:19:43:c4:
b6:d4:67:c7:c6:d0:10:d0:7f:18:6c:fc:08:1e:91:01:0c:10:
4f:22:7a:f0:7e:10:82:dc:d1:3a:8b:77:88:5e:ad:c3:5c:38:
a5:9d:ed:18:92:84:a6:b4:39:39:c7:76:01:da:d1:4e:ef:93:
f9:0a:72:dc:35:2a:a2:59:fa:81:4d:b1:5c:ab:d4:33:46:39:
c7:8d:86:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:08:25 2026 by rpki-client