
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.mft
File: gqha_fMpJW9H4LcAstFHVqEEwRI.mft (raw, json)
Hash identifier: aPEBuRcBvStaakUy+8G/pbh36B+pEQdj7SxEibm9zU8=
Subject key identifier: 61:E8:23:AD:97:93:5A:A4:33:DD:AC:2E:39:9B:D1:78:5D:37:49:3A
Authority key identifier: 82:A8:5A:FD:F3:29:25:6F:47:E0:B7:00:B2:D1:47:56:A1:04:C1:12
Certificate issuer: /CN=A9171C23/serialNumber=82A85AFDF329256F47E0B700B2D14756A104C112
Certificate serial: 068C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqha_fMpJW9H4LcAstFHVqEEwRI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.mft
Manifest number: 0680
Signing time: Thu 08 Oct 2026 22:43:18 +0000
Manifest this update: Thu 08 Oct 2026 22:43:18 +0000
Manifest next update: Thu 15 Oct 2026 22:43:18 +0000
Files and hashes: 1: gqha_fMpJW9H4LcAstFHVqEEwRI.crl (hash: +Vs1WZCJNfy8AqMmDbxRL2qJ2OZRm/9mhnE+mNTrc7Y=)
2: 7CC19FBCDCAA11EBB87DAD44C4F9AE02.roa (hash: dwOLIo85i88QUri8z75BNhlFRQpVGfhtzz7VRCqd+oc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.crl
rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqha_fMpJW9H4LcAstFHVqEEwRI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 22:43:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1676 (0x68c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171C23, serialNumber=82A85AFDF329256F47E0B700B2D14756A104C112
Validity
Not Before: Oct 8 22:43:18 2026 GMT
Not After : Oct 15 22:43:18 2026 GMT
Subject: CN=6ac81c86-0a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:19:ce:4b:13:1c:e7:6f:50:b0:98:c3:2a:ee:
40:69:ac:a5:e1:bc:4e:8d:ce:44:b6:9d:37:a3:d4:
5b:f5:90:71:ed:79:9f:6f:3d:93:45:c8:57:22:4c:
da:43:01:ba:8d:db:de:5d:03:9f:a1:89:10:2f:83:
40:30:29:51:e4:c5:0c:ef:a8:26:53:d3:7a:f9:a9:
a2:f2:8d:ef:a0:c5:68:0d:6a:32:f6:08:9f:08:36:
77:b9:8e:ac:69:3e:30:06:ee:6b:f4:dc:75:2a:58:
a4:74:c2:39:00:85:9c:15:30:cb:87:24:8f:75:d5:
b6:4d:ff:b0:4d:3d:31:fd:eb:29:c6:5d:ff:6b:1a:
35:cd:72:aa:c6:0e:ff:3a:22:f9:5b:49:49:64:f6:
c8:71:40:75:c7:8c:7f:01:82:d2:4a:0d:95:49:3c:
ae:7e:98:82:b5:a3:7f:9e:2e:f0:a4:f3:72:e6:ed:
64:36:17:a1:e3:65:b6:fb:d6:ee:bd:65:5d:9d:64:
d2:99:d3:60:25:58:93:5c:af:69:54:37:a2:3e:30:
de:c5:4b:25:5e:2e:da:fc:63:70:02:bf:05:b0:d9:
df:90:b3:2a:c1:52:33:6f:c8:8a:a8:37:f5:6e:c8:
74:c1:ab:4a:01:84:b0:2f:85:c3:ff:df:93:80:d4:
2a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E8:23:AD:97:93:5A:A4:33:DD:AC:2E:39:9B:D1:78:5D:37:49:3A
X509v3 Authority Key Identifier:
keyid:82:A8:5A:FD:F3:29:25:6F:47:E0:B7:00:B2:D1:47:56:A1:04:C1:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqha_fMpJW9H4LcAstFHVqEEwRI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:3a:6e:a1:91:87:0d:e3:bd:1b:0c:98:4b:76:6e:09:d7:e5:
f9:d0:66:fa:50:2d:45:88:8b:32:f1:12:0d:3a:44:f4:32:83:
8d:fa:7b:5c:61:1e:d1:e3:14:d8:99:40:a0:32:1f:58:af:dd:
ed:c6:1a:0c:da:fd:54:b9:24:8a:a4:57:8f:02:cf:d4:08:0b:
9e:8c:83:3f:c7:06:d4:b6:22:9d:78:3b:10:98:ab:e7:7c:21:
3b:fd:23:58:0e:3a:ed:64:69:64:17:95:89:8c:2b:22:9a:e9:
6a:80:81:92:31:4a:8d:50:7f:2f:5b:03:be:33:35:ba:86:bf:
30:05:5f:e2:5e:14:7d:cd:66:f0:a1:67:93:70:61:9c:c2:29:
5a:16:10:44:d5:b6:9a:71:e8:6b:19:47:bc:36:65:2d:be:42:
28:3c:a5:74:e6:85:f1:ef:ef:65:a6:9f:e8:42:a0:19:49:1f:
97:41:1f:50:ba:ec:c8:43:e2:26:79:5d:3c:b0:89:d0:42:b7:
4a:c9:07:0d:39:8c:a4:60:01:95:14:89:4b:68:56:3c:1e:20:
49:25:4f:37:a2:d2:c2:17:9e:d6:f7:bf:88:ed:b7:f3:a1:79:
d0:b6:bb:64:ad:3f:c7:e3:f6:e2:eb:20:bb:01:a2:06:ed:a3:
12:f7:b3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 17:38:21 2026 by rpki-client