
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft
File: gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft (raw, json)
Hash identifier: zDaLwVdbn3KtMOw5N2y+epNztbzJz9TbFB8L4QP9r60=
Subject key identifier: 32:AC:6E:6D:42:01:6E:6A:53:17:3D:A7:EC:C3:89:F3:8E:6D:49:D6
Authority key identifier: 80:A4:B8:FC:AE:CD:01:1E:82:AA:4E:2D:72:17:3C:A6:3E:9C:4E:51
Certificate issuer: /CN=A9155D1E/serialNumber=80A4B8FCAECD011E82AA4E2D72173CA63E9C4E51
Certificate serial: 0363
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gKS4_K7NAR6Cqk4tchc8pj6cTlE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft
Manifest number: 035D
Signing time: Sat 05 Sep 2026 00:36:17 +0000
Manifest this update: Sat 05 Sep 2026 00:36:16 +0000
Manifest next update: Sat 12 Sep 2026 00:36:16 +0000
Files and hashes: 1: gKS4_K7NAR6Cqk4tchc8pj6cTlE.crl (hash: hf1t0Lu7sSjFbqDb3spa15tvwS833KPVUKE/P0t8J0k=)
2: C003531C10EB11ED9C882A38C4F9AE02.roa (hash: 4mLtegRFgk9fbTWJTkH5s5qPTSUzFVGI3R7GNiZDMVU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.crl
rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gKS4_K7NAR6Cqk4tchc8pj6cTlE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 00:36:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 867 (0x363)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155D1E, serialNumber=80A4B8FCAECD011E82AA4E2D72173CA63E9C4E51
Validity
Not Before: Sep 5 00:36:16 2026 GMT
Not After : Sep 12 00:36:16 2026 GMT
Subject: CN=6a9b6400-1f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b0:f7:9a:4e:19:1c:75:e5:a1:91:3c:ee:20:
0f:21:13:8e:a5:0f:2d:e2:cb:39:28:4d:02:60:9f:
27:66:2a:fe:92:5f:e8:a2:37:4b:95:6d:49:28:3d:
d2:70:fd:6e:22:99:89:aa:de:ef:f2:b0:e8:a9:7f:
50:19:e7:c7:c5:e9:77:95:9e:34:9b:51:64:69:43:
8a:fe:3b:d3:72:a9:95:8b:e1:cc:44:d7:58:b4:ae:
ca:bd:42:49:b1:55:33:51:31:3f:00:2c:ff:b8:3e:
90:3a:22:ac:5f:80:29:9c:cb:a6:d6:a9:40:9a:fb:
ad:30:13:b6:ce:ea:9e:59:d5:cb:1a:ec:e6:e7:b2:
90:30:6e:ed:37:eb:19:61:c7:54:8e:9d:a3:08:9e:
9f:93:02:67:95:4d:57:0f:d6:ca:8b:cf:73:59:51:
df:e0:ef:f3:85:92:04:7e:2e:c9:74:56:b3:3a:1f:
37:03:c7:ef:70:ac:5c:a5:26:11:fb:5c:50:73:a7:
04:0f:2d:b1:9f:40:35:dd:61:98:1e:e8:5b:92:89:
42:ed:96:3f:66:88:03:54:74:93:d9:02:97:7a:db:
f5:b7:b8:89:0b:d9:19:95:f0:b3:72:f0:4f:3e:4d:
15:df:7b:f8:8b:4e:1a:fe:c7:1e:f9:0c:d6:89:91:
db:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:AC:6E:6D:42:01:6E:6A:53:17:3D:A7:EC:C3:89:F3:8E:6D:49:D6
X509v3 Authority Key Identifier:
keyid:80:A4:B8:FC:AE:CD:01:1E:82:AA:4E:2D:72:17:3C:A6:3E:9C:4E:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gKS4_K7NAR6Cqk4tchc8pj6cTlE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:ef:4b:63:c7:a3:cf:25:6b:07:79:22:f7:ff:22:db:e9:99:
f1:53:d5:97:11:ce:d3:03:b5:f1:f0:cb:c4:8b:ce:51:f1:ed:
f9:d3:f5:4b:15:b9:dd:0a:66:25:81:08:b8:35:e7:8b:6b:f4:
5a:95:11:71:ed:5d:e7:3e:d6:30:eb:9b:11:d6:71:0a:b9:a5:
29:a6:c3:3b:3b:54:25:a9:af:53:b5:c2:44:d7:7c:b1:71:50:
3e:3a:73:ce:67:ea:9a:d6:7c:ee:68:08:c3:90:90:2b:b2:cb:
21:49:25:ae:dd:aa:49:db:0b:53:29:23:0a:6b:a8:74:12:5c:
f0:df:14:e8:57:6c:58:78:98:99:63:bf:58:69:be:e0:f2:31:
61:9d:29:86:38:e2:b1:07:62:8f:2b:21:b2:39:a9:d2:3b:22:
ca:20:04:50:4a:20:77:0f:d2:74:3e:0b:ca:e1:33:47:dc:bf:
02:10:95:d2:65:38:a3:51:dd:8a:f3:37:93:7f:10:14:a8:35:
e8:c9:12:60:ea:c0:40:d8:bd:1f:ec:a5:70:82:2f:21:9e:f8:
84:61:b0:85:52:95:89:fd:a1:53:85:95:fd:5c:b4:90:ce:0f:
4f:40:9f:01:35:06:83:c6:91:7c:df:c3:60:5a:e1:09:c6:73:
16:d1:e6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:31:05 2026 by rpki-client