
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft
File: GkAQC15dw00ay1htJzOQptUXff8.mft (raw, json)
Hash identifier: iQUDpZerj8gl8cEJhEixj/uatzDwLbpyQE5oEsQJGWU=
Subject key identifier: E6:31:08:2D:62:93:25:64:1B:B7:B7:1C:70:2F:8F:D2:20:9D:DB:24
Authority key identifier: 1A:40:10:0B:5E:5D:C3:4D:1A:CB:58:6D:27:33:90:A6:D5:17:7D:FF
Certificate issuer: /CN=A9194C99/serialNumber=1A40100B5E5DC34D1ACB586D273390A6D5177DFF
Certificate serial: 0403
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkAQC15dw00ay1htJzOQptUXff8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft
Manifest number: 03FE
Signing time: Wed 05 Nov 2025 00:32:52 +0000
Manifest this update: Wed 05 Nov 2025 00:32:51 +0000
Manifest next update: Wed 12 Nov 2025 00:32:51 +0000
Files and hashes: 1: GkAQC15dw00ay1htJzOQptUXff8.crl (hash: 5eVjDnLyIHSf4+yJXaOD0wxSY7T9ED6e9oRIow6QNTQ=)
2: 8AB545D294A711ECA073AB56C4F9AE02.roa (hash: Vcf2mCMS48B4jAqDXmFIESOPS9I9k4iNYocNkMUmAvc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.crl
rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkAQC15dw00ay1htJzOQptUXff8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 00:32:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1027 (0x403)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194C99, serialNumber=1A40100B5E5DC34D1ACB586D273390A6D5177DFF
Validity
Not Before: Nov 5 00:32:51 2025 GMT
Not After : Nov 12 00:32:51 2025 GMT
Subject: CN=690a9b33-edfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cc:0b:b6:93:c2:94:64:89:b3:f6:dd:c1:1e:
ed:57:32:d0:e4:d6:8f:b8:13:c2:95:78:af:4e:9c:
4e:98:1e:be:76:ad:2a:74:97:30:1c:fe:c3:f4:fe:
87:ae:bf:4a:f3:21:e7:bc:b4:45:77:0f:87:92:2d:
17:bb:82:aa:f4:f3:dd:eb:c9:00:5f:4a:e0:1b:57:
67:f5:92:a3:6d:bd:92:81:d4:59:d0:d8:57:fc:d4:
be:f3:ef:97:00:65:23:2c:19:1b:fe:53:09:19:1e:
2b:d8:a4:8e:47:8e:92:33:c2:db:c3:f4:b4:84:28:
9c:7c:73:d1:64:92:a9:5d:d7:64:e6:ef:56:d8:ff:
a0:e0:fa:b2:56:16:13:4a:b2:ae:0e:41:17:70:f3:
c9:98:64:95:61:be:41:e9:a4:8e:03:f4:d4:2b:bf:
f0:42:b7:31:9f:37:2f:cb:2c:f5:ae:05:5d:58:39:
20:c4:92:88:1f:b2:3d:46:09:71:4f:4a:e6:2f:9e:
57:50:7c:10:a5:9c:34:a3:10:aa:1d:28:fa:be:56:
bd:03:88:e6:3e:b3:b2:32:9e:01:e9:f0:42:d1:b4:
4d:7d:24:58:73:55:99:5a:5c:27:f2:c9:8c:b2:cc:
b7:1d:42:cb:6f:07:e4:7d:57:22:03:95:46:0d:eb:
80:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:31:08:2D:62:93:25:64:1B:B7:B7:1C:70:2F:8F:D2:20:9D:DB:24
X509v3 Authority Key Identifier:
keyid:1A:40:10:0B:5E:5D:C3:4D:1A:CB:58:6D:27:33:90:A6:D5:17:7D:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkAQC15dw00ay1htJzOQptUXff8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:22:e1:8f:7e:19:c8:0e:3d:1d:4a:89:c6:b1:ea:29:b4:30:
dd:93:2c:df:25:b7:7b:ac:e1:9d:a0:04:12:cc:84:04:7a:6b:
7d:e5:89:66:3a:f6:85:03:b7:54:82:3b:12:6f:99:b6:21:c1:
a5:1a:aa:29:13:f5:39:3e:d2:1d:16:5d:85:ba:b5:65:88:44:
b0:4a:18:c7:c2:e6:59:94:42:e9:b4:c6:66:a0:82:10:bf:c3:
25:2d:ec:8c:b1:01:c4:9d:f0:d4:05:5d:05:91:e3:6c:d2:8d:
92:ba:6c:09:65:33:7d:11:d1:51:21:e5:c1:39:2d:a0:8f:ff:
d0:3b:c2:26:1f:07:67:48:2a:4d:aa:d4:a2:7f:f7:86:b6:61:
9c:bc:64:9a:1c:ff:0b:8e:a8:aa:ba:67:67:a7:50:e4:3d:82:
2a:fa:43:3f:72:fc:a4:aa:dc:01:bc:df:a1:f0:ed:7b:cd:b4:
44:99:c3:b9:9a:6f:49:a1:75:01:2d:fc:4d:b9:2b:7e:36:de:
b5:f2:8a:81:ee:4a:f1:2e:c4:5f:e9:51:90:f4:55:32:b4:b5:
9c:53:34:60:37:fc:78:53:4b:66:8e:9b:b6:e9:ed:03:48:2a:
e1:2d:4c:fc:27:41:42:39:91:19:f3:81:1d:f1:b9:f5:f3:92:
39:55:c8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:03:08 2025 by rpki-client