
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft
File: GNJBabAlTqfymUPFBeK1kxr6uSY.mft (raw, json)
Hash identifier: b/xk1BT6d/xFBpbqNZqVmmgfhR6XwaAcBlr/DJaH2Kk=
Subject key identifier: E4:F0:31:87:C9:B8:EB:37:7E:95:AF:ED:20:11:50:48:F1:D4:01:5E
Authority key identifier: 18:D2:41:69:B0:25:4E:A7:F2:99:43:C5:05:E2:B5:93:1A:FA:B9:26
Certificate issuer: /CN=A917C44C/serialNumber=18D24169B0254EA7F29943C505E2B5931AFAB926
Certificate serial: 04B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNJBabAlTqfymUPFBeK1kxr6uSY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft
Manifest number: 04AC
Signing time: Sat 03 Oct 2026 00:12:01 +0000
Manifest this update: Sat 03 Oct 2026 00:12:00 +0000
Manifest next update: Sat 10 Oct 2026 00:12:00 +0000
Files and hashes: 1: GNJBabAlTqfymUPFBeK1kxr6uSY.crl (hash: tHR760gAOs6ftJGrEQqdTcoJ2ebxERHZXuP4WujkMhU=)
2: DAF4B31C983E11ECA0050128C4F9AE02.roa (hash: 3v0l+mNUK1QMbnnyeVFXpatXq2cbTwunHprjgz1Y/Vw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.crl
rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNJBabAlTqfymUPFBeK1kxr6uSY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 00:11:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1204 (0x4b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C44C, serialNumber=18D24169B0254EA7F29943C505E2B5931AFAB926
Validity
Not Before: Oct 3 00:12:00 2026 GMT
Not After : Oct 10 00:12:00 2026 GMT
Subject: CN=6ac04851-2195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:91:ff:45:db:11:f5:5e:6a:81:71:ce:96:ab:
d0:9d:2a:9a:aa:b0:3a:de:a2:b4:8c:11:36:1b:03:
5c:4b:46:c5:c4:5f:7e:66:80:24:16:22:b6:11:bf:
a6:94:23:d2:07:f7:5d:83:bf:1a:c8:1d:29:43:ef:
84:8e:1f:f9:ae:63:b3:2c:d7:af:1b:ee:81:5d:f8:
f5:1d:d7:18:51:6a:d4:1e:d7:b7:95:2d:cf:4c:bd:
b1:69:84:9c:57:0a:0f:13:85:e1:c9:68:14:f5:b2:
81:04:f4:41:ab:60:77:52:54:5b:43:4b:13:06:4e:
bf:d8:27:db:73:85:5d:7f:ec:f6:7c:5d:7d:7d:c5:
cc:ca:f1:8a:20:fd:6c:c6:90:a0:c5:bd:2c:3f:3f:
50:7d:ef:d9:f2:ef:6e:0c:81:9e:3d:d7:82:78:24:
2e:b1:0d:f5:4c:b0:e1:f2:0c:b8:4e:23:d9:6b:e7:
b3:cf:fb:97:c5:56:45:48:9e:50:88:b9:a2:e7:6f:
c4:c6:91:f0:16:a9:32:02:4e:98:7a:02:34:13:a3:
d6:a6:13:b9:cc:82:74:fd:f7:53:4d:a3:1d:37:22:
a9:c6:55:94:f0:dd:84:71:35:c5:d6:d9:4e:72:d2:
51:58:da:05:21:25:3f:21:24:c8:2c:72:64:1f:f0:
fe:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F0:31:87:C9:B8:EB:37:7E:95:AF:ED:20:11:50:48:F1:D4:01:5E
X509v3 Authority Key Identifier:
keyid:18:D2:41:69:B0:25:4E:A7:F2:99:43:C5:05:E2:B5:93:1A:FA:B9:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNJBabAlTqfymUPFBeK1kxr6uSY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:1a:27:84:2a:95:6a:75:da:ec:84:78:42:1e:fe:c0:6e:b0:
39:a6:4c:67:44:65:d5:34:e5:b7:ee:1a:ef:70:73:db:d1:93:
09:00:9c:8b:95:d4:76:46:4a:f7:49:05:7e:f5:6b:5e:4f:3f:
d7:54:da:23:3f:93:bc:82:0d:6b:e4:13:f6:65:1f:a0:91:c7:
81:45:b9:82:be:44:66:ae:0b:26:3c:1f:cd:c1:35:93:f7:51:
8b:0a:68:7a:f0:49:45:0d:b5:e6:ae:1e:cb:4a:80:61:0b:a3:
7b:cb:d1:1d:9b:2d:25:e0:94:cd:69:59:b8:f9:04:15:60:47:
68:2d:d9:85:10:b8:2a:c9:1e:eb:ba:fa:d5:c6:e1:2a:1f:8c:
86:65:99:c3:e2:81:32:54:51:45:0d:9e:9a:43:61:f9:af:1e:
e4:76:bf:0d:0c:a8:a7:9f:06:50:7e:5d:14:8d:f7:73:fd:6a:
b6:98:dd:35:ed:3a:b1:21:e9:31:6d:5e:91:71:f0:17:54:78:
36:28:57:42:95:e8:1a:5f:43:49:18:6d:4b:cf:aa:bd:72:7d:
5f:14:5f:8f:21:be:36:3b:45:41:42:6f:29:fc:27:61:ea:b5:
b9:0e:a2:8d:41:ab:c2:d4:91:b2:4c:c4:1d:76:c7:1a:74:3c:
1e:79:c7:44
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0M0NEMxMTAvBgNVBAUTKDE4RDI0MTY5QjAyNTRFQTdGMjk5NDNDNTA1RTJCNTkz
MUFGQUI5MjYwHhcNMjYxMDAzMDAxMjAwWhcNMjYxMDEwMDAxMjAwWjAYMRYwFAYD
VQQDEw02YWMwNDg1MS0yMTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlpH/RdsR9V5qgXHOlqvQnSqaqrA63qK0jBE2GwNcS0bFxF9+ZoAkFiK2Eb+m
lCPSB/ddg78ayB0pQ++Ejh/5rmOzLNevG+6BXfj1HdcYUWrUHte3lS3PTL2xaYSc
VwoPE4XhyWgU9bKBBPRBq2B3UlRbQ0sTBk6/2Cfbc4Vdf+z2fF19fcXMyvGKIP1s
xpCgxb0sPz9Qfe/Z8u9uDIGePdeCeCQusQ31TLDh8gy4TiPZa+ezz/uXxVZFSJ5Q
iLmi52/ExpHwFqkyAk6YegI0E6PWphO5zIJ0/fdTTaMdNyKpxlWU8N2EcTXF1tlO
ctJRWNoFISU/ISTILHJkH/D+4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOTwMYfJ
uOs3fpWv7SARUEjx1AFeMB8GA1UdIwQYMBaAFBjSQWmwJU6n8plDxQXitZMa+rkm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzQ0Qy80QjVCMjlBQTk0
NTgxMUVDOTkwNTdBM0FDNEY5QUUwMi9HTkpCYWJBbFRxZnltVVBGQmVLMWt4cjZ1
U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dOSkJhYkFsVHFmeW1VUEZCZUsxa3hyNnVTWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QzQ0Qy80QjVCMjlBQTk0NTgxMUVDOTkwNTdBM0FDNEY5QUUwMi9HTkpCYWJBbFRx
ZnltVVBGQmVLMWt4cjZ1U1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAuhonhCqVanXa7IR4Qh7+wG6wOaZMZ0Rl1TTlt+4a73Bz29GTCQCci5XUdkZK
90kFfvVrXk8/11TaIz+TvIINa+QT9mUfoJHHgUW5gr5EZq4LJjwfzcE1k/dRiwpo
evBJRQ215q4ey0qAYQuje8vRHZstJeCUzWlZuPkEFWBHaC3ZhRC4Kske67r61cbh
Kh+MhmWZw+KBMlRRRQ2emkNh+a8e5Ha/DQyop58GUH5dFI33c/1qtpjdNe06sSHp
MW1ekXHwF1R4NihXQpXoGl9DSRhtS8+qvXJ9XxRfjyG+NjtFQUJvKfwnYeq1uQ6i
jUGrwtSRskzEHXbHGnQ8HnnHRA==
-----END CERTIFICATE-----
Generated at Sun Oct 4 17:39:05 2026 by rpki-client