
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/gKMQDXuMTTM5AfsQQL4YZfr6NGA.mft
File: gKMQDXuMTTM5AfsQQL4YZfr6NGA.mft (raw, json)
Hash identifier: rwCdtJ4NHzvx5hKL1gZUulvWfK2I91pW1b59GK6Ybhg=
Subject key identifier: A6:E6:CB:23:18:CD:95:31:7A:7A:C4:CA:48:7E:3D:89:6A:B8:C3:9F
Authority key identifier: 80:A3:10:0D:7B:8C:4D:33:39:01:FB:10:40:BE:18:65:FA:FA:34:60
Certificate issuer: /CN=A911ABF4/serialNumber=80A3100D7B8C4D333901FB1040BE1865FAFA3460
Certificate serial: 21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gKMQDXuMTTM5AfsQQL4YZfr6NGA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/gKMQDXuMTTM5AfsQQL4YZfr6NGA.mft
Manifest number: 1B49
Signing time: Tue 06 Oct 2026 17:30:37 +0000
Manifest this update: Tue 06 Oct 2026 17:30:37 +0000
Manifest next update: Tue 13 Oct 2026 17:30:37 +0000
Files and hashes: 1: gKMQDXuMTTM5AfsQQL4YZfr6NGA.crl (hash: S6Ho96SLJTn39IJQscgBB8LytFv6YIYB5MIy7xbWC0I=)
2: C893B39E947411F1B0466A83A3EE528E.roa (hash: 0uSaktK4pCntcfFjzT2UBnBvc2jhKwlt40JEPITcSLc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/gKMQDXuMTTM5AfsQQL4YZfr6NGA.crl
rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/gKMQDXuMTTM5AfsQQL4YZfr6NGA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gKMQDXuMTTM5AfsQQL4YZfr6NGA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 17:30:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33 (0x21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911ABF4, serialNumber=80A3100D7B8C4D333901FB1040BE1865FAFA3460
Validity
Not Before: Oct 6 17:30:37 2026 GMT
Not After : Oct 13 17:30:37 2026 GMT
Subject: CN=6ac5303d-1c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8f:43:f4:91:de:20:92:29:19:b2:05:24:73:
44:96:43:eb:f0:e8:9e:c7:f1:28:cb:d4:2c:5a:0a:
3f:8c:d4:86:7f:ee:c7:49:5e:83:38:b1:d6:19:77:
03:75:f5:82:71:5d:6f:c9:e5:f9:68:c5:93:47:66:
cf:57:90:c3:84:e9:b3:76:91:7f:1c:0f:a1:78:dc:
db:fc:e7:4c:fb:1c:f2:35:4d:d3:a7:7d:00:52:cd:
ef:15:1c:60:91:92:19:c1:59:bb:37:3f:6d:f0:81:
a8:c3:44:06:44:9e:b2:15:29:74:43:df:a4:c0:71:
46:f8:23:d8:5f:40:aa:1e:3e:c4:b1:64:e8:96:c3:
ac:48:17:d0:a4:14:89:5f:9e:c5:94:e8:a6:78:09:
ae:b3:04:09:9c:f0:34:b3:51:c3:9d:42:64:d9:bf:
96:05:f3:c5:b4:c4:6e:71:b5:6e:f6:55:54:b3:40:
44:34:9b:78:3c:a1:0f:30:de:8c:8b:67:cd:a8:54:
39:07:06:3e:e5:ed:e3:a9:cc:a3:32:26:bc:35:06:
df:ff:66:16:af:b1:2d:ef:fd:b0:89:46:80:ac:0c:
22:f0:35:b3:23:dc:26:0f:6f:0f:70:35:00:12:88:
39:bd:f4:ae:d6:0b:6c:f7:e6:f8:f5:d2:69:b5:3a:
2c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E6:CB:23:18:CD:95:31:7A:7A:C4:CA:48:7E:3D:89:6A:B8:C3:9F
X509v3 Authority Key Identifier:
keyid:80:A3:10:0D:7B:8C:4D:33:39:01:FB:10:40:BE:18:65:FA:FA:34:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/gKMQDXuMTTM5AfsQQL4YZfr6NGA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gKMQDXuMTTM5AfsQQL4YZfr6NGA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/gKMQDXuMTTM5AfsQQL4YZfr6NGA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f7:50:2b:a9:24:98:d7:95:6d:72:1c:7f:90:7a:e5:2b:34:
0b:81:e5:e8:6d:6b:5d:2c:eb:4c:5f:89:77:e6:1c:5f:5b:27:
79:4b:a3:ee:dc:51:3f:46:27:e0:55:9a:36:ed:85:59:ab:30:
39:b1:14:3e:b2:4d:62:0c:16:74:8f:ca:9e:d3:5b:74:2d:7c:
f0:d9:f8:b4:4f:03:da:0f:a0:78:02:90:9a:73:5b:71:f6:d8:
46:3c:94:ee:be:04:89:4a:02:28:89:b4:9f:66:6e:ef:42:af:
36:18:1c:4a:9a:19:b8:20:a5:03:13:fb:b7:fa:17:d3:d7:07:
d2:11:f3:71:37:82:1a:aa:fd:1f:5c:f4:0f:68:d3:65:ba:de:
76:a5:33:0a:fa:c6:38:41:69:3d:ca:1f:c3:02:63:dd:f7:d2:
50:38:df:07:72:cc:18:65:68:1d:ac:c9:64:c9:d0:56:ef:92:
ba:64:85:54:86:92:3f:99:ff:32:98:b1:4a:bb:94:cc:5a:03:
d1:68:99:2c:bf:87:e3:bd:4c:ea:ec:8e:bf:a3:24:53:f3:29:
91:41:1b:1b:b1:a1:48:f8:f2:02:8c:e7:9f:82:14:a5:1c:8b:
a5:6c:92:d0:6c:2b:12:34:54:24:74:fb:f1:02:65:b4:38:7f:
79:53:13:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:48:06 2026 by rpki-client