
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.mft
File: GcmgwhkwwW6kFprC6-3H5snXtS8.mft (raw, json)
Hash identifier: PECeOzkdf55Lg385gS9ZHru7v606ULiah2MyRYPwXjU=
Subject key identifier: 6B:3A:D9:85:25:EF:C6:48:96:7A:6C:00:6D:A8:D2:D7:CE:80:91:EB
Authority key identifier: 19:C9:A0:C2:19:30:C1:6E:A4:16:9A:C2:EB:ED:C7:E6:C9:D7:B5:2F
Certificate issuer: /CN=A916BCBA/serialNumber=19C9A0C21930C16EA4169AC2EBEDC7E6C9D7B52F
Certificate serial: AD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GcmgwhkwwW6kFprC6-3H5snXtS8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.mft
Manifest number: A5
Signing time: Tue 27 Oct 2026 07:40:11 +0000
Manifest this update: Tue 27 Oct 2026 07:40:11 +0000
Manifest next update: Tue 03 Nov 2026 07:40:11 +0000
Files and hashes: 1: GcmgwhkwwW6kFprC6-3H5snXtS8.crl (hash: VktfNP4yfLB0yRQLiV9mZq3Hufka7wJzx9jwoqlbCmQ=)
2: 167F2222E8D211F091D937E6616F56BC.roa (hash: 0E82N6ZpJ00Wpvb+o7s9s0h0XYP+6whK+5TGTD19wRQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.crl
rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GcmgwhkwwW6kFprC6-3H5snXtS8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 07:40:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173 (0xad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BCBA, serialNumber=19C9A0C21930C16EA4169AC2EBEDC7E6C9D7B52F
Validity
Not Before: Oct 27 07:40:11 2026 GMT
Not After : Nov 3 07:40:11 2026 GMT
Subject: CN=6ae0555b-5cd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7c:b1:5a:28:8d:65:c9:95:f5:27:bd:ff:2d:
4a:e2:83:d3:ad:ea:12:c7:95:10:00:8c:30:ea:80:
a4:f0:33:65:c8:67:05:96:e4:9d:e5:8f:2d:32:48:
26:44:a3:de:da:aa:58:61:86:33:1b:8d:42:2a:96:
b6:cf:47:f5:36:16:19:71:ca:1c:f1:4a:4a:6e:1e:
dc:89:ac:68:0f:3d:8b:19:30:45:d0:9d:b6:4f:32:
94:d8:94:c0:b0:59:91:1e:e2:00:1f:75:25:b7:ac:
0f:5b:8a:73:e0:d6:e9:c5:7c:ea:66:46:57:a3:4b:
dc:36:23:a0:50:1a:45:d3:70:ac:e6:23:f9:ee:26:
cf:07:bc:57:0d:d9:1d:7d:da:27:25:2c:d9:26:9c:
80:47:04:aa:ca:7a:e2:cc:1a:04:c4:ef:c3:d2:b0:
44:5e:78:29:6e:ec:ad:8a:40:1e:15:f4:17:5b:ef:
5b:e5:a5:df:99:0d:d6:4d:b7:a3:73:2e:13:79:81:
2b:d5:f2:7f:c1:3f:e5:a3:ae:57:26:35:d3:e0:a9:
f3:1a:f1:e6:34:eb:e4:c7:68:fd:60:bf:1f:5a:de:
da:86:37:57:40:5d:79:79:ef:f7:a9:68:e2:df:7a:
17:5e:d0:01:3c:47:9e:1e:35:ce:15:a2:a4:66:51:
21:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:3A:D9:85:25:EF:C6:48:96:7A:6C:00:6D:A8:D2:D7:CE:80:91:EB
X509v3 Authority Key Identifier:
keyid:19:C9:A0:C2:19:30:C1:6E:A4:16:9A:C2:EB:ED:C7:E6:C9:D7:B5:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GcmgwhkwwW6kFprC6-3H5snXtS8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:08:34:d6:0f:e1:3a:c7:36:d7:ab:4a:1c:0c:10:1a:5d:2b:
06:d2:67:40:c5:22:a6:f5:96:c2:ca:db:75:4f:eb:51:cf:6d:
1c:5e:8d:d9:07:70:63:a7:75:b0:ab:9e:cd:66:d4:3e:b9:a4:
85:89:f6:24:e6:b7:2d:0a:55:9f:56:0b:76:1b:ae:de:87:7e:
28:47:0f:ab:4f:19:46:65:95:b3:09:8f:86:e7:b4:e2:de:0c:
c2:b1:a9:06:b3:18:8d:b7:e2:3f:65:f5:8d:94:8b:01:a4:61:
96:5e:70:b4:1a:3c:d3:93:70:0e:cf:a2:8a:76:3e:19:0f:92:
40:49:1f:8e:df:65:b6:d1:70:c7:31:7c:a9:c4:fd:cc:16:18:
c0:00:a2:10:2d:1f:5f:dd:46:24:f7:14:4a:af:ea:d1:f8:35:
f2:14:41:7c:d9:24:7b:77:ea:47:c0:e1:e9:75:79:8a:b0:84:
98:4b:fe:55:22:ad:9f:fc:e8:71:bc:49:be:54:0d:d1:cc:47:
1d:a4:27:39:97:39:41:25:c4:80:f9:47:ed:ec:8e:dd:53:54:
3b:d5:51:95:03:6f:db:c2:55:c5:2d:b9:0c:ee:fc:fe:bb:60:
74:7f:e5:1d:a5:1b:fe:d7:8d:ed:1c:3e:c7:cd:45:d6:fe:ac:
bd:0c:22:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:36:20 2026 by rpki-client