
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft
File: gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft (raw, json)
Hash identifier: SQBZ6mxsBBXZIiTJRQUH84msDN2o8RQQ4Ksb1G5P57w=
Subject key identifier: 1A:47:76:01:AA:F8:49:2D:15:F5:D6:12:EF:FB:F8:35:99:4D:7A:5A
Authority key identifier: 81:A7:15:1B:17:75:92:F8:68:23:B6:9F:43:76:24:E9:C0:02:DE:41
Certificate issuer: /CN=A9175299/serialNumber=81A7151B177592F86823B69F437624E9C002DE41
Certificate serial: 0C33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gacVGxd1kvhoI7afQ3Yk6cAC3kE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft
Manifest number: 0C1C
Signing time: Fri 02 Oct 2026 19:08:07 +0000
Manifest this update: Fri 02 Oct 2026 19:08:06 +0000
Manifest next update: Fri 09 Oct 2026 19:08:06 +0000
Files and hashes: 1: gacVGxd1kvhoI7afQ3Yk6cAC3kE.crl (hash: eWuVe9ga1AZzZjkRQSm6xZ+ihuzxbB1hqSFtlshgbro=)
2: 89340B10B5E011EE91DD4D53C4F9AE02.roa (hash: 6cuRYkKrSNBuAIRhtyOQTmq+Tuxf6pFsDwJm5X0jf/o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.crl
rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gacVGxd1kvhoI7afQ3Yk6cAC3kE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 19:08:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3123 (0xc33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175299, serialNumber=81A7151B177592F86823B69F437624E9C002DE41
Validity
Not Before: Oct 2 19:08:06 2026 GMT
Not After : Oct 9 19:08:06 2026 GMT
Subject: CN=6ac00117-b6c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e4:dd:49:8c:a0:b9:f7:ad:15:9f:fd:5c:83:
94:4d:ed:ef:89:03:2f:c4:c5:a0:42:e7:1b:b2:18:
2b:95:dc:60:c9:ce:39:68:90:66:99:41:66:91:f9:
e1:57:7b:f3:f1:d7:a4:d1:8d:a4:5d:39:86:0b:3a:
a8:d3:ae:5c:d1:45:aa:89:c1:92:34:7f:1a:10:90:
61:fd:e1:6d:15:d9:1b:d8:67:91:69:ba:90:8e:09:
ce:aa:d5:6d:7e:28:9b:d3:a3:12:1d:2f:ec:d4:76:
94:f4:e4:33:9d:78:14:f5:ee:4c:15:e6:95:c7:95:
4d:1e:5c:3e:af:47:30:e6:a8:e7:7d:88:75:5e:e0:
2c:06:47:e7:8e:cb:c4:b9:57:1d:21:30:6c:11:63:
e9:b0:ca:35:86:8f:06:c9:93:22:23:10:d6:12:37:
2d:71:f1:59:46:85:a8:33:a3:ff:fa:6f:83:da:7d:
10:59:79:03:09:21:bc:93:e7:a4:ee:4b:6d:6b:94:
4c:06:a6:41:c1:9e:3e:0d:b8:4c:7c:9a:3d:fd:8c:
51:ca:d6:c8:54:f1:d6:30:a5:29:bd:86:0c:1b:2b:
34:00:fc:32:40:2d:12:e9:e9:1a:22:25:8f:b2:45:
35:80:0a:4f:63:96:db:8c:20:a3:d4:fb:c8:9d:07:
67:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:47:76:01:AA:F8:49:2D:15:F5:D6:12:EF:FB:F8:35:99:4D:7A:5A
X509v3 Authority Key Identifier:
keyid:81:A7:15:1B:17:75:92:F8:68:23:B6:9F:43:76:24:E9:C0:02:DE:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gacVGxd1kvhoI7afQ3Yk6cAC3kE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:7a:60:e5:89:04:ad:ed:5c:08:28:81:f3:f2:d5:29:82:89:
21:c0:95:59:7d:cb:91:e3:da:40:83:ab:7b:69:e9:b0:c6:99:
ee:86:23:62:7e:90:8f:98:13:e9:a1:f8:d7:bf:d4:76:6a:c0:
6f:9c:d2:4a:4a:1a:84:4f:25:ff:58:ef:11:3f:28:03:0e:d9:
0d:c8:04:3e:2b:d0:49:b3:3a:08:01:92:ba:47:a2:dc:c1:37:
69:e1:64:05:02:1b:96:fa:ba:51:47:9c:2c:4c:92:fb:ca:3b:
d5:0b:62:c1:97:b9:22:3a:4f:24:1d:76:ad:58:37:e1:c8:50:
a8:51:a2:fb:b2:bc:e6:dc:72:60:cc:45:82:c0:c3:d6:8b:ac:
50:dd:5f:3e:34:fb:c2:8c:00:3d:c4:a1:a0:5a:33:0a:70:49:
4d:74:c6:9c:b0:81:ea:44:97:5c:79:61:25:f3:db:80:c8:45:
16:7c:3b:c6:1c:21:42:bb:ed:3a:33:2e:87:21:b2:3d:1e:47:
de:83:be:84:80:b0:db:0c:c7:dd:58:5a:f4:17:aa:93:25:9d:
13:df:71:a2:37:57:95:e6:99:a6:08:e9:83:71:82:21:0a:78:
71:fe:40:d7:47:c4:7e:4c:f3:e7:d0:3b:3e:12:50:e5:7a:e1:
7f:f9:9f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 11:43:52 2026 by rpki-client