
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft
File: Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft (raw, json)
Hash identifier: N6EJ8E1aKUlPCxBBrQhtQxahYgbdVwctz+k7vkj5U5M=
Subject key identifier: C5:1F:20:9B:A4:BA:5B:D7:E5:2E:4B:0C:B5:31:85:AF:6D:21:D6:53
Authority key identifier: 1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99
Certificate issuer: /CN=A914FC2C/serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99
Certificate serial: 0450
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft
Manifest number: 0437
Signing time: Mon 05 Oct 2026 00:15:56 +0000
Manifest this update: Mon 05 Oct 2026 00:15:56 +0000
Manifest next update: Mon 12 Oct 2026 00:15:56 +0000
Files and hashes: 1: Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl (hash: 6X9XKxn4zQ5BqN42yrwT66O/eHfmbL+3jmzxPdsMshQ=)
2: F6542C72C53511ECA64F3010C4F9AE02.roa (hash: jJu8AXToVSwmPXjvxRWlorAWWupdkIcDt1NMIoSlpMQ=)
3: 6E32028AD48511EF8239D526C4F9AE02.roa (hash: Kn3RxDk3qhm1BoA1PXfblo/JTZSCcatO617eVns4pg0=)
4: F6D63384C53511ECA64F3010C4F9AE02.roa (hash: 1bYkzomJmZpRc+K7ziy2g69pmgRMlSXIQoUyRXbC0j0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl
rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 00:15:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1104 (0x450)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914FC2C, serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99
Validity
Not Before: Oct 5 00:15:56 2026 GMT
Not After : Oct 12 00:15:56 2026 GMT
Subject: CN=6ac2ec3c-2132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:37:69:b2:6e:92:4d:c3:d7:be:a1:b8:28:64:
e0:e9:68:83:84:ce:a1:df:75:1e:11:db:04:e5:23:
56:ed:5a:64:6e:86:04:e2:4a:1a:ab:70:3a:ad:f1:
b8:4c:cf:74:cd:16:9c:55:9a:fb:0b:77:79:f5:3b:
ce:bb:ac:82:9a:fc:2f:44:73:8b:99:cc:e9:2d:9b:
bc:27:38:7f:42:0c:6f:c9:55:3b:d5:12:22:59:05:
83:b4:1d:7e:64:b9:69:f5:0c:ad:b1:a5:b3:21:7e:
7a:4b:81:55:34:7c:c7:12:e7:b1:2b:c6:20:87:bf:
68:ad:bb:41:26:5d:df:49:f8:66:40:2a:c6:f4:fc:
80:b9:6d:86:90:0b:ae:7e:ed:35:20:2e:3c:f4:cf:
b9:be:ae:30:46:0b:46:50:0d:bf:61:10:64:56:82:
a1:20:f4:de:79:7b:e7:bc:02:ba:41:16:8f:4a:c1:
d9:9c:56:1a:34:a7:4d:30:e7:92:e9:33:bb:9b:e8:
d3:f9:94:05:43:d3:9f:62:17:40:2c:9f:fd:d7:7c:
77:34:a8:ac:9d:00:63:16:01:90:0f:b7:b3:54:8a:
84:c1:84:f5:48:5e:b9:37:06:5b:11:be:61:92:84:
cd:84:90:15:50:10:5e:b9:62:3f:02:a6:68:b4:36:
77:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:1F:20:9B:A4:BA:5B:D7:E5:2E:4B:0C:B5:31:85:AF:6D:21:D6:53
X509v3 Authority Key Identifier:
keyid:1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:f7:74:2c:47:0c:71:c9:d4:8c:cf:cd:9c:ce:8a:e7:8b:20:
f6:f6:bb:4d:09:eb:f3:47:ad:ab:c8:51:31:53:b4:ff:9c:e3:
8a:7e:9a:1a:87:e9:fd:e6:77:bd:dd:62:d6:1e:c5:52:bd:98:
da:38:fc:86:da:f8:12:22:c5:68:e4:1a:95:60:14:f6:2b:44:
ff:58:84:39:c6:54:4f:5a:32:63:60:ee:ae:8a:8d:b2:2d:27:
d0:21:e3:ad:35:5c:0a:fd:85:53:5a:42:6b:18:52:43:c6:eb:
9b:b5:aa:64:57:62:2f:6d:3e:db:f2:e0:cd:1e:8e:da:02:06:
87:da:35:3a:3d:dc:e4:de:9b:20:e9:2c:5f:a8:a6:e1:6c:df:
c8:f6:13:f3:25:80:2a:6f:4b:d6:92:b9:5a:8c:48:96:65:a1:
e4:44:eb:d3:8d:ef:51:93:8d:75:46:3f:3d:04:10:62:32:c6:
d6:7e:60:d1:c0:fe:20:9b:50:5e:62:6f:4e:b9:f2:29:ae:91:
c6:49:a4:74:ba:a8:ce:d0:65:fc:f0:82:41:e9:e1:97:45:7b:
d2:52:10:35:5c:80:d0:d8:04:e9:8c:11:3a:33:02:f2:db:a7:
d7:05:ab:be:f0:9b:eb:03:d0:85:f9:dc:e1:2e:29:d3:7f:d5:
25:17:6d:83
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEZDMkMxMTAvBgNVBAUTKDFBRDlCRDlEQzc3MzE1QkQxMDJEQUY1QUE5RjkyNTY2
QjJDMkZCOTkwHhcNMjYxMDA1MDAxNTU2WhcNMjYxMDEyMDAxNTU2WjAYMRYwFAYD
VQQDEw02YWMyZWMzYy0yMTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0Tdpsm6STcPXvqG4KGTg6WiDhM6h33UeEdsE5SNW7VpkboYE4koaq3A6rfG4
TM90zRacVZr7C3d59TvOu6yCmvwvRHOLmczpLZu8Jzh/QgxvyVU71RIiWQWDtB1+
ZLlp9QytsaWzIX56S4FVNHzHEuexK8Ygh79orbtBJl3fSfhmQCrG9PyAuW2GkAuu
fu01IC489M+5vq4wRgtGUA2/YRBkVoKhIPTeeXvnvAK6QRaPSsHZnFYaNKdNMOeS
6TO7m+jT+ZQFQ9OfYhdALJ/913x3NKisnQBjFgGQD7ezVIqEwYT1SF65NwZbEb5h
koTNhJAVUBBeuWI/AqZotDZ3OwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMUfIJuk
ulvX5S5LDLUxha9tIdZTMB8GA1UdIwQYMBaAFBrZvZ3HcxW9EC2vWqn5JWaywvuZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkMyQy9CMDRFOTE5Q0M1
MzMxMUVDOTZERjMxMEZDNEY5QUUwMi9HdG05bmNkekZiMFFMYTlhcWZrbFpyTEMt
NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0d0bTluY2R6RmIwUUxhOWFxZmtsWnJMQy01ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RkMyQy9CMDRFOTE5Q0M1MzMxMUVDOTZERjMxMEZDNEY5QUUwMi9HdG05bmNkekZi
MFFMYTlhcWZrbFpyTEMtNWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEvd0LEcMccnUjM/NnM6K54sg9va7TQnr80etq8hRMVO0/5zjin6aGofp/eZ3
vd1i1h7FUr2Y2jj8htr4EiLFaOQalWAU9itE/1iEOcZUT1oyY2DuroqNsi0n0CHj
rTVcCv2FU1pCaxhSQ8brm7WqZFdiL20+2/LgzR6O2gIGh9o1Oj3c5N6bIOksX6im
4WzfyPYT8yWAKm9L1pK5WoxIlmWh5ETr043vUZONdUY/PQQQYjLG1n5g0cD+IJtQ
XmJvTrnyKa6RxkmkdLqoztBl/PCCQenhl0V70lIQNVyA0NgE6YwROjMC8tun1wWr
vvCb6wPQhfnc4S4p03/VJRdtgw==
-----END CERTIFICATE-----
Generated at Tue Oct 6 19:57:45 2026 by rpki-client