
$ rpki-client -vvf rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft
File: Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft (raw, json)
Hash identifier: 7A3jPMpklhtNeiJk1dXYMFY2FZTp0epl3SooKfzmHMA=
Subject key identifier: 76:3E:3A:45:53:DC:40:7F:6D:2B:5A:D9:84:2A:2C:31:9A:EB:7B:25
Authority key identifier: 1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99
Certificate issuer: /CN=A914FC2C/serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99
Certificate serial: 0421
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft
Manifest number: 0408
Signing time: Sun 05 Jul 2026 00:48:50 +0000
Manifest this update: Sun 05 Jul 2026 00:48:49 +0000
Manifest next update: Sun 12 Jul 2026 00:48:49 +0000
Files and hashes: 1: Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl (hash: ncs4fxqvxF4O13PPbFDEKSUA6980R797k9nOoIu3EMY=)
2: 6E32028AD48511EF8239D526C4F9AE02.roa (hash: Kn3RxDk3qhm1BoA1PXfblo/JTZSCcatO617eVns4pg0=)
3: F6D63384C53511ECA64F3010C4F9AE02.roa (hash: 1bYkzomJmZpRc+K7ziy2g69pmgRMlSXIQoUyRXbC0j0=)
4: F6542C72C53511ECA64F3010C4F9AE02.roa (hash: jJu8AXToVSwmPXjvxRWlorAWWupdkIcDt1NMIoSlpMQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl
rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Jul 2026 00:48:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1057 (0x421)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914FC2C, serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99
Validity
Not Before: Jul 5 00:48:49 2026 GMT
Not After : Jul 12 00:48:49 2026 GMT
Subject: CN=6a49a9f1-7979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:54:15:5d:cf:88:b1:58:b4:f0:cf:80:03:82:
67:8c:dc:a8:d1:70:83:68:d7:b0:a9:e2:16:d7:83:
53:45:1d:92:32:b0:16:0e:67:35:b1:de:52:53:b6:
e6:d8:6c:58:c1:29:3f:66:5f:bc:82:2f:05:2f:40:
07:db:33:ad:68:a0:63:cb:d9:69:8a:5a:03:ec:88:
79:83:19:0f:f6:c4:82:4c:37:f9:73:db:21:95:9f:
7a:55:73:ee:e2:78:a7:6c:02:fd:b6:f1:d3:04:37:
65:9f:c9:00:4f:7c:3f:c7:ae:ac:b1:42:66:11:d3:
5e:d9:5d:a1:4a:22:ad:d4:5e:35:16:9e:cc:a3:69:
25:d7:f0:d5:53:4b:a1:3a:74:ea:05:87:b0:73:33:
ca:98:f0:1c:60:4d:ee:89:b7:2f:db:10:20:f9:85:
56:be:93:d4:54:f2:79:c1:ca:b1:f0:b7:6c:55:5e:
f0:70:bc:ea:0a:01:dc:09:15:5e:fc:63:69:f0:79:
62:86:f6:98:a6:9c:34:d2:b7:51:c1:5c:0b:43:d0:
49:95:60:3b:f5:d7:d6:71:3f:d1:19:39:50:72:e1:
9f:55:9a:b2:31:84:e4:a0:93:06:fe:15:7a:76:cb:
b2:bb:43:6f:64:ff:69:15:cc:c5:aa:ed:72:41:31:
b5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:3E:3A:45:53:DC:40:7F:6D:2B:5A:D9:84:2A:2C:31:9A:EB:7B:25
X509v3 Authority Key Identifier:
keyid:1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:df:80:46:c5:c3:cd:0f:53:ab:be:3f:5a:fc:65:70:b8:ad:
8b:51:b3:22:e3:c8:1a:7c:bf:e1:85:b2:82:47:80:43:70:29:
95:26:14:02:0c:09:7f:ab:90:9a:14:4c:67:9b:b4:64:0d:f2:
1d:19:f9:66:75:66:a4:08:f2:57:a1:db:ac:e3:83:5a:73:c4:
d9:90:af:db:31:0a:00:42:e1:c7:28:d1:a9:50:39:e8:3a:b3:
f4:13:ef:53:90:ae:bc:e0:f0:9b:6d:e9:4c:bd:b2:00:76:1b:
94:34:4f:ec:78:a7:34:26:b9:4c:bd:56:02:7f:51:00:0d:71:
64:67:b7:21:cc:3c:11:f7:04:2c:da:30:f7:bc:e3:f1:05:0e:
40:34:6f:b0:6f:44:34:58:b6:a0:22:17:c2:b0:32:77:e6:84:
fd:f4:bc:42:5a:07:dc:b2:32:4f:9d:0e:6f:c7:bc:8e:39:e5:
8d:81:2d:ed:9b:05:7e:72:af:81:73:1c:72:4d:d0:49:b2:63:
6c:58:b6:06:eb:de:d0:58:a1:04:28:71:97:c7:b3:fb:ca:71:
7d:f5:88:6e:62:1a:6e:e0:6b:c9:89:74:2c:6d:f3:69:5a:f6:
33:1a:0c:dc:f9:1a:d5:e0:f0:cf:cc:45:68:1e:b0:51:52:f2:
d6:21:e6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 21:30:02 2026 by rpki-client