
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft
File: GNJBabAlTqfymUPFBeK1kxr6uSY.mft (raw, json)
Hash identifier: e734Tx5TTHyNIQr33iztiIlK+saFVhEDsRtTSVYztWY=
Subject key identifier: 55:CE:0C:7E:C7:54:44:C6:45:48:E7:01:7E:FD:ED:24:77:DF:4E:59
Authority key identifier: 18:D2:41:69:B0:25:4E:A7:F2:99:43:C5:05:E2:B5:93:1A:FA:B9:26
Certificate issuer: /CN=A917C44C/serialNumber=18D24169B0254EA7F29943C505E2B5931AFAB926
Certificate serial: 043B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNJBabAlTqfymUPFBeK1kxr6uSY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft
Manifest number: 0435
Signing time: Wed 18 Feb 2026 23:31:21 +0000
Manifest this update: Wed 18 Feb 2026 23:31:21 +0000
Manifest next update: Wed 25 Feb 2026 23:31:21 +0000
Files and hashes: 1: GNJBabAlTqfymUPFBeK1kxr6uSY.crl (hash: thPScb+1IPrpfzzpYyPvPN0doYJdA49eLuetxrbD4eo=)
2: DAF4B31C983E11ECA0050128C4F9AE02.roa (hash: 4RoaW2Y7MrH0o0r3MnJLXpqeqGt1wKbknWzh8clZN9I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.crl
rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNJBabAlTqfymUPFBeK1kxr6uSY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 23:31:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1083 (0x43b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C44C, serialNumber=18D24169B0254EA7F29943C505E2B5931AFAB926
Validity
Not Before: Feb 18 23:31:21 2026 GMT
Not After : Feb 25 23:31:21 2026 GMT
Subject: CN=69964bc9-33ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ff:f7:6b:15:0f:87:23:5b:fb:99:f1:31:e7:
a3:ca:9d:85:6f:24:00:1e:5c:e0:2a:1f:5e:2f:2e:
c7:21:4b:6d:bc:e4:0c:b1:dc:08:b4:c5:dc:a6:68:
36:a6:d1:cd:a3:38:06:90:61:40:7d:65:1c:77:9e:
0e:2d:70:02:26:13:e4:70:00:98:b9:57:40:05:2a:
d0:0f:d9:44:6a:05:43:1e:a3:ce:b7:13:d5:1c:ac:
55:72:c5:85:70:6d:c2:26:ed:cd:15:06:17:e7:ee:
80:67:74:21:23:9d:72:2d:29:18:4d:f5:bb:9a:5c:
61:60:e6:19:fb:42:66:fa:87:38:b0:6e:06:48:73:
09:ce:74:03:f2:5e:42:89:e1:d8:13:b9:39:9d:21:
24:1f:ae:f7:3d:e7:04:8d:ea:67:09:a9:b5:a7:a2:
5b:5e:ad:1c:13:01:8d:a7:49:d6:a9:70:20:3e:54:
e6:9e:80:04:86:06:0a:4b:11:10:ce:12:3d:fd:c8:
45:71:e0:7b:09:9b:e2:a8:4b:6a:cf:5f:79:e9:e5:
fd:8b:12:42:ba:13:a5:89:0c:89:b3:18:8e:09:71:
89:0a:ce:dd:2a:d7:bc:09:0f:14:d9:1e:ab:5e:99:
d6:a7:fe:e0:1e:6d:b5:b4:65:8b:53:d0:a1:2a:09:
28:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:CE:0C:7E:C7:54:44:C6:45:48:E7:01:7E:FD:ED:24:77:DF:4E:59
X509v3 Authority Key Identifier:
keyid:18:D2:41:69:B0:25:4E:A7:F2:99:43:C5:05:E2:B5:93:1A:FA:B9:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNJBabAlTqfymUPFBeK1kxr6uSY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:92:31:fe:7a:1e:b0:e3:9c:75:aa:38:76:16:51:1c:c7:27:
6f:be:19:f3:41:79:9d:06:5f:64:b8:99:cc:69:bc:50:e9:05:
e2:e3:95:45:41:4c:65:00:1d:c5:96:15:de:3c:ae:f3:54:54:
92:a8:a5:06:36:71:64:d3:e1:66:6e:02:b8:7b:09:a6:4b:39:
0f:b3:54:c8:8f:ce:28:58:53:b1:eb:2f:af:4c:f1:5f:f7:af:
51:d9:e1:4c:98:e0:1a:7a:98:d2:f3:66:c1:6b:eb:46:81:e1:
46:94:0d:d8:a1:9f:06:ab:49:95:25:c4:d5:87:88:6d:f9:0f:
f7:d2:7f:ed:5a:29:1f:05:0f:a6:71:39:5b:06:34:6e:43:bf:
ea:37:2a:e6:c8:b1:6c:3e:b7:7c:71:49:ce:35:f0:a7:07:80:
3f:de:02:a8:37:4b:0d:8c:7d:29:06:e5:d6:c1:a7:d2:ab:83:
2f:fd:77:f2:33:73:a6:4a:d4:af:80:3f:49:76:86:52:6c:7e:
92:95:3c:6e:b2:c3:28:5d:cc:3a:ef:3f:4d:b1:01:bc:39:cb:
1e:5c:6d:d9:e7:c4:9c:08:6a:13:00:8a:a6:d0:5e:1f:34:7e:
06:d1:a5:41:88:5e:9f:c2:66:8c:13:48:35:af:f1:36:bc:1e:
99:1f:71:a0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0M0NEMxMTAvBgNVBAUTKDE4RDI0MTY5QjAyNTRFQTdGMjk5NDNDNTA1RTJCNTkz
MUFGQUI5MjYwHhcNMjYwMjE4MjMzMTIxWhcNMjYwMjI1MjMzMTIxWjAYMRYwFAYD
VQQDDA02OTk2NGJjOS0zM2FiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmv/3axUPhyNb+5nxMeejyp2FbyQAHlzgKh9eLy7HIUttvOQMsdwItMXcpmg2
ptHNozgGkGFAfWUcd54OLXACJhPkcACYuVdABSrQD9lEagVDHqPOtxPVHKxVcsWF
cG3CJu3NFQYX5+6AZ3QhI51yLSkYTfW7mlxhYOYZ+0Jm+oc4sG4GSHMJznQD8l5C
ieHYE7k5nSEkH673PecEjepnCam1p6JbXq0cEwGNp0nWqXAgPlTmnoAEhgYKSxEQ
zhI9/chFceB7CZviqEtqz1956eX9ixJCuhOliQyJsxiOCXGJCs7dKte8CQ8U2R6r
XpnWp/7gHm21tGWLU9ChKgkotwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFXODH7H
VETGRUjnAX797SR3305ZMB8GA1UdIwQYMBaAFBjSQWmwJU6n8plDxQXitZMa+rkm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzQ0Qy80QjVCMjlBQTk0
NTgxMUVDOTkwNTdBM0FDNEY5QUUwMi9HTkpCYWJBbFRxZnltVVBGQmVLMWt4cjZ1
U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dOSkJhYkFsVHFmeW1VUEZCZUsxa3hyNnVTWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QzQ0Qy80QjVCMjlBQTk0NTgxMUVDOTkwNTdBM0FDNEY5QUUwMi9HTkpCYWJBbFRx
ZnltVVBGQmVLMWt4cjZ1U1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCtkjH+eh6w45x1qjh2FlEcxydvvhnzQXmdBl9kuJnMabxQ6QXi45VF
QUxlAB3FlhXePK7zVFSSqKUGNnFk0+FmbgK4ewmmSzkPs1TIj84oWFOx6y+vTPFf
969R2eFMmOAaepjS82bBa+tGgeFGlA3YoZ8Gq0mVJcTVh4ht+Q/30n/tWikfBQ+m
cTlbBjRuQ7/qNyrmyLFsPrd8cUnONfCnB4A/3gKoN0sNjH0pBuXWwafSq4Mv/Xfy
M3OmStSvgD9JdoZSbH6SlTxussMoXcw67z9NsQG8OcseXG3Z58ScCGoTAIqm0F4f
NH4G0aVBiF6fwmaME0g1r/E2vB6ZH3Gg
-----END CERTIFICATE-----
Generated at Thu Feb 19 21:25:04 2026 by rpki-client