
$ rpki-client -vvf rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft
File: Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft (raw, json)
Hash identifier: CylJAWomu31V6IuN7mYrGxqxZz/XW1OZKpRwlGp0weE=
Subject key identifier: 27:1D:68:A0:8D:BE:ED:AE:97:4C:DC:00:7C:18:4B:AB:98:AD:D8:9D
Authority key identifier: 1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99
Certificate issuer: /CN=A914FC2C/serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99
Certificate serial: 0397
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft
Manifest number: 0384
Signing time: Mon 27 Oct 2025 02:13:56 +0000
Manifest this update: Mon 27 Oct 2025 02:13:55 +0000
Manifest next update: Mon 03 Nov 2025 02:13:55 +0000
Files and hashes: 1: Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl (hash: oFRzFGArI+4G/nWs33XYry1upEmpsmDeh/ca8yi+Dss=)
2: F6542C72C53511ECA64F3010C4F9AE02.roa (hash: p0+cMHyUatjT2WLso8zM+Qkj3qxalubJRFVPjXCEC7c=)
3: 6E32028AD48511EF8239D526C4F9AE02.roa (hash: AA5WeVvXVNFXQwzizIn+RSDzp541QHk6IiOY/0z6xeo=)
4: F6D63384C53511ECA64F3010C4F9AE02.roa (hash: OVxLUiCstDCJM1i8OMKxBPVWt9kugvVdd+GEnlwY4Bo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl
rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Nov 2025 02:13:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 919 (0x397)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914FC2C, serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99
Validity
Not Before: Oct 27 02:13:55 2025 GMT
Not After : Nov 3 02:13:55 2025 GMT
Subject: CN=68fed563-94a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:00:9c:1f:6f:18:41:b4:17:02:de:3b:34:48:
89:35:8a:f8:c0:59:3b:8e:6a:c7:25:18:75:32:a1:
db:38:a2:af:1f:bd:06:45:e5:49:5a:a7:ac:3e:ac:
28:25:d3:a0:a6:4c:cc:ca:03:15:71:76:75:41:08:
d2:20:ff:5d:a9:2a:1f:d3:6b:3f:43:01:6a:18:5b:
3c:9a:c9:80:92:8d:83:66:c0:d4:fb:6b:b0:55:62:
37:c1:99:fa:a1:d0:04:84:bc:e1:51:d0:fb:d5:35:
6f:4f:17:ce:2a:5f:b6:f6:e2:52:97:eb:a7:77:65:
04:ad:a4:0e:c0:66:46:8c:a4:61:eb:61:a1:3f:b7:
c5:8e:2b:0f:dc:1f:e4:09:9d:d3:ed:57:b2:78:30:
9d:73:63:ff:bc:93:90:a5:5b:57:71:2f:46:80:f9:
38:a6:c9:1a:ca:64:9e:8c:e7:6c:74:7a:82:96:61:
88:6d:3d:3f:6d:54:79:7e:f0:4e:81:a3:20:c2:eb:
48:76:fd:f0:61:94:70:9c:c1:7e:a4:a0:42:db:e8:
b2:2a:23:5c:6a:57:27:70:bb:91:b0:2b:c7:47:f3:
c7:b5:0f:19:1c:c7:77:17:7a:ad:25:5e:d9:3a:30:
f7:9b:06:14:37:96:00:9f:00:48:3b:9d:9c:79:f4:
5c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:1D:68:A0:8D:BE:ED:AE:97:4C:DC:00:7C:18:4B:AB:98:AD:D8:9D
X509v3 Authority Key Identifier:
keyid:1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:1f:c0:a0:8a:a3:26:00:eb:b8:1e:a6:c9:76:1b:b9:36:c1:
84:fc:4c:24:4f:f3:4b:e9:69:85:73:71:b7:64:fc:a2:5c:b2:
8c:db:89:00:28:24:be:11:dc:8a:f0:9e:c2:c5:e4:c9:d6:44:
0a:7b:21:cc:8c:d6:bc:cd:fe:3d:dd:db:2b:e5:7c:7c:ab:8d:
9b:9c:ff:f1:a6:13:29:88:46:6f:9f:2f:bd:b6:f7:da:6e:81:
be:38:c3:5d:cb:5e:27:c0:d8:b6:b2:bd:78:f7:9b:88:4e:f3:
fd:5f:bf:21:af:57:81:70:85:ac:3e:fb:48:80:04:e5:07:9d:
d6:80:ec:06:be:4b:da:33:57:c3:be:0b:71:af:da:65:15:ca:
52:57:52:99:05:82:5c:17:d0:2c:59:1d:08:03:37:2f:83:82:
38:96:67:a5:a3:0c:c3:66:1e:93:ab:1c:e9:b3:44:9a:26:3c:
4d:65:94:48:2d:56:25:80:a4:42:1a:23:74:84:48:a3:bc:79:
36:43:79:ca:c8:6c:07:be:36:ea:00:88:3f:aa:b1:55:0e:92:
ef:7a:14:81:4d:66:a3:05:67:04:02:a5:d3:35:0e:1b:9e:14:
e9:d2:74:9f:8c:1c:f0:b6:ce:21:26:64:9d:3b:e2:d7:dc:2e:
f7:77:e5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 17:37:01 2025 by rpki-client