
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft
File: gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft (raw, json)
Hash identifier: 9fokdJGP/RFkPVl7Umejq0ZtspVrjhV+Nu7pAbLF/R8=
Subject key identifier: DB:89:D9:5F:95:19:04:6C:B9:69:84:B2:4D:B2:48:30:A2:66:DB:EE
Authority key identifier: 80:08:4A:34:FD:4F:3B:93:2C:09:21:82:40:7B:89:05:D9:40:65:00
Certificate issuer: /CN=A9175155/serialNumber=80084A34FD4F3B932C092182407B8905D9406500
Certificate serial: 06D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft
Manifest number: 06A7
Signing time: Sat 04 Apr 2026 22:15:40 +0000
Manifest this update: Sat 04 Apr 2026 22:15:40 +0000
Manifest next update: Sat 11 Apr 2026 22:15:40 +0000
Files and hashes: 1: gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl (hash: W17ZjNE0MN0V+qI75/GOaDYVeYORJV7WV+p0H4LpFrw=)
2: 899A5138691611EFBED13942C4F9AE02.roa (hash: 641x4scZUN4ZCVnjjE3qhhOg1CGXgMpeMklKEZlPiCI=)
3: A6C94076624711EC9B815772C4F9AE02.roa (hash: V13ycXWWqywILndXonJ3QjvrQDnIDg003VYRA9hMyI8=)
4: 86F4D41881C811ECB5F90D48C4F9AE02.roa (hash: DeneMHcuZrF9hDdFh94wwzaZjKMUOYRWB0wTW8HEivQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl
rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 22:15:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1748 (0x6d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175155, serialNumber=80084A34FD4F3B932C092182407B8905D9406500
Validity
Not Before: Apr 4 22:15:40 2026 GMT
Not After : Apr 11 22:15:40 2026 GMT
Subject: CN=69d18d8c-4b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5e:e5:32:83:af:3f:1e:4d:22:5a:bb:ae:63:
10:f6:8a:6a:a4:1b:dd:2d:6b:a8:05:03:bf:f1:90:
d8:2e:45:ef:5a:64:36:ea:e1:c5:da:d3:aa:c7:5a:
d8:ba:09:00:fa:0f:5c:df:b6:93:d2:f1:53:50:4c:
36:1c:d6:dd:7e:99:6c:5f:cf:d7:bb:d4:e8:6c:0f:
33:ba:38:10:53:bc:0f:64:63:e6:6c:a8:07:96:4e:
7e:7c:2d:b4:a5:27:0d:47:94:2d:9c:85:9b:5b:d2:
c5:13:ff:14:00:07:db:35:7c:ee:40:ea:ea:7e:01:
c7:43:22:1d:1f:44:20:c0:1c:bc:98:49:1e:f0:22:
62:2d:cc:21:a6:fc:bf:e4:05:94:11:7c:03:7e:5d:
2b:90:81:41:23:22:bd:50:15:bf:18:b6:7d:15:0d:
e7:3d:06:48:23:be:bd:6c:16:c9:2c:93:23:9e:3c:
99:5e:a2:4e:ab:c6:68:9d:cf:36:35:a7:e0:be:65:
4e:11:9e:9c:cb:d1:d4:92:7f:6c:9d:17:15:28:ba:
41:91:22:53:ef:9a:84:95:20:56:68:57:fa:da:56:
f1:24:2c:5b:cd:2a:f9:1f:c5:23:e8:a4:be:6d:c6:
4b:f7:f6:53:8b:0a:57:5b:e2:28:b4:f0:57:3a:7e:
de:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:89:D9:5F:95:19:04:6C:B9:69:84:B2:4D:B2:48:30:A2:66:DB:EE
X509v3 Authority Key Identifier:
keyid:80:08:4A:34:FD:4F:3B:93:2C:09:21:82:40:7B:89:05:D9:40:65:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:48:a4:7c:8e:95:4b:38:b0:0c:e0:ba:ba:f3:da:2c:20:bf:
4f:d2:1b:46:b0:fb:b2:36:4a:cb:73:73:bd:7b:2e:0d:49:d7:
d9:c6:e8:f2:51:c3:36:5e:22:d0:55:df:4e:8d:01:f5:58:a5:
f8:85:b2:e9:b5:36:34:ba:a9:12:f6:79:4d:cb:a0:07:b7:49:
7e:10:75:dd:2a:7a:cd:a0:d4:58:7e:8a:bb:b2:8c:c0:78:69:
ee:0e:25:dd:4d:a4:9c:ab:e3:53:34:09:d7:78:ba:13:63:8f:
5b:da:e0:39:b1:5e:b2:de:78:aa:e2:d3:0b:94:63:05:06:bf:
66:e6:a0:a4:8c:51:60:42:f8:21:c7:de:21:6b:a0:6f:f8:12:
11:f2:b9:62:c8:d4:0b:2c:9e:db:7a:15:b9:b5:8d:ba:5a:92:
4f:67:d9:2f:8b:41:ba:7a:23:9c:07:32:e5:c2:23:86:bd:f2:
09:d2:3a:18:c0:7e:9a:62:cb:18:a4:f5:13:9d:75:0f:c5:cf:
58:ed:4b:32:e7:f7:35:b6:ed:c8:4c:fa:58:19:32:b0:ca:65:
82:25:67:ee:06:3f:0c:f7:0a:04:bc:11:92:1e:27:d6:fc:6f:
60:2b:45:5a:c7:06:9e:16:0e:65:ce:52:7b:c6:df:c7:da:bf:
d8:43:a4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:55:09 2026 by rpki-client