
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.mft
File: Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.mft (raw, json)
Hash identifier: ZaFUkTlJP795aB/bu5LN9skvLJuAW3Ei2wjS0fe9rTQ=
Subject key identifier: 32:7E:D0:3B:9F:8D:37:10:FF:B2:65:61:99:13:AB:A6:D7:2E:A9:3F
Authority key identifier: 1A:4D:31:4C:1F:D0:10:62:2E:87:49:1C:E4:82:7B:62:39:66:70:9C
Certificate issuer: /CN=A917B4EE/serialNumber=1A4D314C1FD010622E87491CE4827B623966709C
Certificate serial: 0733
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.mft
Manifest number: 072B
Signing time: Fri 02 Oct 2026 22:17:44 +0000
Manifest this update: Fri 02 Oct 2026 22:17:43 +0000
Manifest next update: Fri 09 Oct 2026 22:17:43 +0000
Files and hashes: 1: Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.crl (hash: 8I7PGAbkETfRAcMi+MxcpgTBWy4juP5QSc5TXIcjLqE=)
2: 851D827C977511EBA99DCE72C4F9AE02.roa (hash: b2HFAZWqbmjxGG1BiTFKA8Smfl3OYOZD2WwpabEkiK8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.crl
rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 22:17:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1843 (0x733)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B4EE, serialNumber=1A4D314C1FD010622E87491CE4827B623966709C
Validity
Not Before: Oct 2 22:17:43 2026 GMT
Not After : Oct 9 22:17:43 2026 GMT
Subject: CN=6ac02d88-acea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:61:59:8e:c3:3c:59:cb:d0:6c:1b:f6:27:89:
1e:dd:19:fb:74:ac:0d:5a:50:f6:9f:ce:9d:df:ec:
b7:f6:db:82:e2:4d:4b:b0:b1:27:1a:1d:81:2f:dc:
1a:55:78:c3:49:4a:99:b0:2e:fa:92:d9:41:8b:05:
b2:27:67:ae:87:dd:e8:57:38:96:46:0b:9f:6e:0b:
33:5a:c5:73:71:f8:58:2c:9a:a5:ef:9f:b8:38:71:
68:cf:43:1f:45:f7:4d:c3:57:3b:70:5b:f2:97:cb:
82:ff:90:78:23:4b:96:f1:ee:a1:d7:d2:02:3f:52:
b9:64:b6:a1:32:f9:b9:e0:73:4b:86:fa:3b:7d:29:
ac:ce:5f:b3:c2:93:e5:8a:ab:a0:71:85:3a:67:c3:
6c:c2:8b:4d:83:c2:aa:0d:79:5f:3c:62:9d:03:86:
7e:24:ec:bd:2f:a9:87:f5:78:c0:24:1f:6e:25:46:
8d:b5:21:3c:99:8f:ab:74:a1:d5:73:c1:99:6f:a2:
98:f9:4b:d0:d1:4d:e1:a4:74:00:f7:2e:1d:d1:8f:
54:9a:a7:22:1e:44:63:bd:99:26:ea:c4:12:ab:39:
00:e2:77:a7:01:3f:34:c4:4b:19:c4:36:76:55:63:
3e:10:16:b4:a9:96:db:18:0e:cf:3e:36:d4:14:25:
09:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:7E:D0:3B:9F:8D:37:10:FF:B2:65:61:99:13:AB:A6:D7:2E:A9:3F
X509v3 Authority Key Identifier:
keyid:1A:4D:31:4C:1F:D0:10:62:2E:87:49:1C:E4:82:7B:62:39:66:70:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:9d:b8:4e:90:26:c9:be:4f:6d:b9:2f:86:e7:f0:3d:01:fb:
74:00:c3:d4:20:55:ec:f9:cd:7c:e9:ab:d1:e8:41:3a:7b:09:
80:1a:19:54:4f:30:db:69:c0:b9:a2:66:9a:ad:e5:5c:50:bb:
98:e0:4d:a4:10:3b:ce:2a:e1:db:15:39:6c:65:d9:7f:c7:8e:
b0:9b:86:ed:54:73:92:5c:bc:6e:73:c8:d2:01:c2:5e:40:eb:
68:66:73:cc:be:dd:0d:d3:25:d5:3b:4c:fb:13:7d:7a:46:40:
00:4e:1f:c5:73:7b:0c:8c:0b:73:72:f6:40:0f:2f:ea:a1:e9:
1f:05:40:94:c2:35:73:9e:e3:1d:04:31:67:c2:c3:9e:2f:ac:
80:07:77:fc:36:19:4a:13:95:a1:c8:e7:94:7c:ff:55:b0:24:
cf:5b:0d:3f:83:39:2a:4b:6b:cd:76:bc:a4:9a:52:b1:3f:19:
7e:fa:76:ff:b0:42:40:38:cb:04:90:fc:e2:e7:23:4e:d9:32:
6f:45:35:4f:5a:5f:1a:e2:16:b8:ab:de:45:d5:85:4e:f9:bc:
e5:13:74:f1:9a:74:4c:97:b4:75:34:b0:72:99:a5:07:39:05:
e6:02:1f:96:34:d7:4d:e8:53:cb:89:e4:29:93:e9:e6:ea:38:
f8:cd:e0:f2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBzMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0I0RUUxMTAvBgNVBAUTKDFBNEQzMTRDMUZEMDEwNjIyRTg3NDkxQ0U0ODI3QjYy
Mzk2NjcwOUMwHhcNMjYxMDAyMjIxNzQzWhcNMjYxMDA5MjIxNzQzWjAYMRYwFAYD
VQQDEw02YWMwMmQ4OC1hY2VhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsmFZjsM8WcvQbBv2J4ke3Rn7dKwNWlD2n86d3+y39tuC4k1LsLEnGh2BL9wa
VXjDSUqZsC76ktlBiwWyJ2euh93oVziWRgufbgszWsVzcfhYLJql75+4OHFoz0Mf
RfdNw1c7cFvyl8uC/5B4I0uW8e6h19ICP1K5ZLahMvm54HNLhvo7fSmszl+zwpPl
iqugcYU6Z8NswotNg8KqDXlfPGKdA4Z+JOy9L6mH9XjAJB9uJUaNtSE8mY+rdKHV
c8GZb6KY+UvQ0U3hpHQA9y4d0Y9UmqciHkRjvZkm6sQSqzkA4nenAT80xEsZxDZ2
VWM+EBa0qZbbGA7PPjbUFCUJvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDJ+0Duf
jTcQ/7JlYZkTq6bXLqk/MB8GA1UdIwQYMBaAFBpNMUwf0BBiLodJHOSCe2I5ZnCc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjRFRS8zQTcyN0M3RTk3
NzQxMUVCQUU4M0ZENzFDNEY5QUUwMi9HazB4VEJfUUVHSXVoMGtjNUlKN1lqbG1j
SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0drMHhUQl9RRUdJdWgwa2M1SUo3WWpsbWNKdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QjRFRS8zQTcyN0M3RTk3NzQxMUVCQUU4M0ZENzFDNEY5QUUwMi9HazB4VEJfUUVH
SXVoMGtjNUlKN1lqbG1jSncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeJ24TpAmyb5PbbkvhufwPQH7dADD1CBV7PnNfOmr0ehBOnsJgBoZVE8w22nA
uaJmmq3lXFC7mOBNpBA7zirh2xU5bGXZf8eOsJuG7VRzkly8bnPI0gHCXkDraGZz
zL7dDdMl1TtM+xN9ekZAAE4fxXN7DIwLc3L2QA8v6qHpHwVAlMI1c57jHQQxZ8LD
ni+sgAd3/DYZShOVocjnlHz/VbAkz1sNP4M5KktrzXa8pJpSsT8Zfvp2/7BCQDjL
BJD84ucjTtkyb0U1T1pfGuIWuKveRdWFTvm85RN08Zp0TJe0dTSwcpmlBzkF5gIf
ljTXTehTy4nkKZPp5uo4+M3g8g==
-----END CERTIFICATE-----
Generated at Sun Oct 4 08:37:31 2026 by rpki-client