
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft
File: GkAQC15dw00ay1htJzOQptUXff8.mft (raw, json)
Hash identifier: vzG4HoTYxVBxZYG0NbljIIQWSEe2e02vajOCS0y+Pnc=
Subject key identifier: FA:A1:97:7E:84:C7:C3:A4:D9:64:19:83:9F:66:07:35:CC:E3:B1:1E
Authority key identifier: 1A:40:10:0B:5E:5D:C3:4D:1A:CB:58:6D:27:33:90:A6:D5:17:7D:FF
Certificate issuer: /CN=A9194C99/serialNumber=1A40100B5E5DC34D1ACB586D273390A6D5177DFF
Certificate serial: 0452
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkAQC15dw00ay1htJzOQptUXff8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft
Manifest number: 0446
Signing time: Sun 01 Mar 2026 01:03:01 +0000
Manifest this update: Sun 01 Mar 2026 01:03:00 +0000
Manifest next update: Sun 08 Mar 2026 01:03:00 +0000
Files and hashes: 1: GkAQC15dw00ay1htJzOQptUXff8.crl (hash: GOuV8s5o88CHXHynoAPlz0drMOc9T7Sg2/HzQpr9+ps=)
2: 5C954994FC7811F0BEBDC0A2546F56BC.roa (hash: QGTSlWG64XBWkttm9XK8t1ViYAfVTDcX+HMwDgfOELA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.crl
rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkAQC15dw00ay1htJzOQptUXff8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:03:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1106 (0x452)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194C99, serialNumber=1A40100B5E5DC34D1ACB586D273390A6D5177DFF
Validity
Not Before: Mar 1 01:03:00 2026 GMT
Not After : Mar 8 01:03:00 2026 GMT
Subject: CN=69a39045-b6ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bf:d1:c4:be:8a:31:de:ee:a4:b0:37:4e:29:
e4:42:a8:45:8c:e1:1e:2b:62:7c:1b:7b:97:76:5a:
56:e4:fa:03:bf:9a:87:1f:a5:90:0f:29:53:03:47:
bf:8b:3e:2c:59:c7:7c:f7:c3:0a:27:72:92:76:a1:
2c:d8:58:6a:0f:9b:f1:59:31:7f:12:31:0e:28:85:
ab:10:4a:fb:8b:8e:c4:2c:4e:7c:49:6c:d5:b9:a9:
0b:9c:fc:82:ad:0e:71:f3:ff:80:48:3d:f2:e0:d2:
7a:91:d7:4f:ea:0c:92:ad:c2:ad:c4:2c:f3:be:97:
11:11:fc:6a:a2:d5:48:b2:65:24:d8:8f:ba:df:fa:
97:2c:f7:0d:e2:3f:1a:36:4c:56:a9:59:79:1c:69:
c1:65:c7:98:ab:01:1b:c0:69:f6:46:d2:81:d4:d5:
4e:f3:43:13:77:34:11:7b:35:aa:9b:26:1a:b2:af:
be:69:bc:47:32:01:92:a2:5a:7a:a2:1c:07:48:9a:
34:a2:c8:f7:27:42:08:1c:a1:ed:cd:2f:c4:1d:99:
96:e9:24:10:fe:a0:28:85:f8:dc:99:d6:24:24:a9:
f8:5c:91:05:bd:06:58:12:af:00:33:ac:79:b8:70:
46:6b:de:77:fd:da:0b:7d:68:ed:cc:d4:f5:de:f8:
f2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A1:97:7E:84:C7:C3:A4:D9:64:19:83:9F:66:07:35:CC:E3:B1:1E
X509v3 Authority Key Identifier:
keyid:1A:40:10:0B:5E:5D:C3:4D:1A:CB:58:6D:27:33:90:A6:D5:17:7D:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkAQC15dw00ay1htJzOQptUXff8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:1a:fe:ae:62:6a:77:2c:10:12:37:8a:e2:9d:a8:1d:41:a4:
f6:0f:57:47:91:e2:19:01:7e:e8:26:44:ef:69:bb:e5:c7:6f:
17:a0:02:4b:ea:04:7d:a1:b6:58:78:b6:fc:83:c8:e0:fb:3b:
20:34:c0:c1:e4:a9:bf:79:f1:95:83:32:d8:02:56:08:63:f4:
80:10:ff:2d:61:a1:73:28:c5:ad:05:a0:c3:18:91:bb:5e:2e:
f6:15:8a:bf:fa:81:b7:9a:a7:6e:66:67:7b:44:70:20:99:ea:
bb:eb:3a:84:c3:21:6a:93:1f:6e:bc:0d:af:c8:65:a1:96:a2:
53:39:64:a7:97:b4:9d:85:12:15:3c:74:d3:f0:86:e1:13:e9:
32:de:94:b2:49:1a:e9:f2:bc:95:64:eb:d6:6f:c1:11:7a:c9:
2c:01:99:5b:83:cf:f0:6d:14:13:69:01:69:56:43:35:f3:fc:
bf:95:89:e2:02:89:7e:39:b8:dd:78:67:a5:8b:f3:b1:97:fc:
a5:05:d6:03:95:d6:ff:b0:f9:df:99:1a:fe:ee:02:20:b8:8f:
31:2b:4e:4e:05:8d:11:41:04:38:93:6c:f6:76:16:b3:0f:00:
d9:c5:d3:f2:5e:90:f6:1e:da:ec:e2:2a:4c:bd:40:d8:d7:b9:
f3:90:a9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:30:10 2026 by rpki-client