
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft
File: GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft (raw, json)
Hash identifier: woH1j5uKHdjrKINJBcX8G8sW9Tets6KrFoZIP6eQv10=
Subject key identifier: B4:B4:39:2E:9F:24:55:59:4C:DA:17:E2:92:A5:D4:B7:FD:32:CF:15
Authority key identifier: 19:48:CC:14:F3:0E:D8:3C:AA:52:C8:EC:4B:08:C4:4C:A8:3A:62:9E
Certificate issuer: /CN=A917C615/serialNumber=1948CC14F30ED83CAA52C8EC4B08C44CA83A629E
Certificate serial: 0D8E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUjMFPMO2DyqUsjsSwjETKg6Yp4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft
Manifest number: 0D6F
Signing time: Mon 28 Sep 2026 18:08:55 +0000
Manifest this update: Mon 28 Sep 2026 18:08:54 +0000
Manifest next update: Mon 05 Oct 2026 18:08:54 +0000
Files and hashes: 1: GUjMFPMO2DyqUsjsSwjETKg6Yp4.crl (hash: eyhURChVlx/i9FO5sbEIzCQAnZdvuKlrnXqO0Mr38vE=)
2: fJnNJysfFnJZhwNg-xYouA3ZQgY.asa (hash: eeRBJjN/rZzzyTGMnMswne4db36QBc0hDwGn8eXvBSg=)
3: A0632940737D11F091340126C4F9AE02.roa (hash: XYU/OfbvTvF81SZSB9Dz1TfcctHinmn1NKkNjqg6sxk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.crl
rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUjMFPMO2DyqUsjsSwjETKg6Yp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 18:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3470 (0xd8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C615, serialNumber=1948CC14F30ED83CAA52C8EC4B08C44CA83A629E
Validity
Not Before: Sep 28 18:08:54 2026 GMT
Not After : Oct 5 18:08:54 2026 GMT
Subject: CN=6abaad37-86fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4e:6b:71:11:7d:78:32:72:fe:25:4f:1c:84:
fe:c2:c1:4f:eb:09:36:91:dd:f7:87:a7:a1:21:ab:
4a:77:af:97:d0:90:91:df:fd:3a:54:02:f4:70:a9:
4d:c1:cb:92:5e:cc:ac:c0:e9:7b:17:e9:db:93:ee:
62:1f:9c:3d:df:61:52:fa:49:59:3f:47:0d:fc:13:
35:34:5d:6e:0b:6b:ba:42:50:89:cc:f0:82:fd:64:
9b:48:31:4e:3a:ec:2f:a8:78:10:0e:72:c5:e0:75:
f1:22:41:66:09:16:e4:eb:6f:9b:db:ab:05:47:d8:
c6:19:44:c3:f0:f9:6e:ad:79:5f:fa:59:6d:79:48:
84:ad:9c:64:0f:47:1a:67:3d:24:fd:63:49:cd:9c:
65:60:f9:52:27:67:8c:ec:e9:d0:b8:36:79:47:2a:
a5:cd:0e:5c:c1:bb:30:88:20:07:97:5a:04:ad:d5:
c2:c1:3c:dd:ad:f2:fa:d1:9e:1f:1b:c7:ca:8b:6e:
e3:69:85:57:1b:0f:f9:d7:fe:33:b2:ae:d3:b0:8f:
81:3a:37:06:c4:a9:90:1e:d7:ee:17:86:62:18:99:
a6:7f:86:98:c1:ff:18:e8:83:8a:b3:d5:fc:eb:3b:
83:d4:ca:9e:1f:39:78:06:5b:35:16:2f:15:1f:4c:
a0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B4:39:2E:9F:24:55:59:4C:DA:17:E2:92:A5:D4:B7:FD:32:CF:15
X509v3 Authority Key Identifier:
keyid:19:48:CC:14:F3:0E:D8:3C:AA:52:C8:EC:4B:08:C4:4C:A8:3A:62:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUjMFPMO2DyqUsjsSwjETKg6Yp4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:09:d7:2e:ab:38:6c:de:17:cb:62:d8:4f:92:10:b2:a0:12:
07:ab:a4:3d:25:44:72:c9:fe:53:cf:8f:a9:ed:e3:41:9e:d5:
95:d0:96:71:8a:f6:a3:a0:ef:75:c5:91:ba:af:32:b8:aa:3d:
5e:13:a1:e3:7e:ef:92:88:b2:58:7d:22:43:bf:74:11:21:08:
c5:a7:94:c0:2e:9e:ed:0b:76:7c:3c:d7:43:79:3b:59:07:b1:
37:5c:8a:94:5e:70:35:b7:30:5c:0b:cb:6b:78:fc:6b:3b:d2:
28:b3:a2:7e:9b:7b:8d:44:32:bd:4d:21:29:80:d7:e1:2d:d5:
30:6b:dc:1f:31:e1:97:1d:e1:41:d3:ab:a9:25:a1:3e:80:30:
2d:0c:06:2f:43:af:dd:51:c9:e3:21:b3:a3:40:70:6c:89:54:
d7:42:86:3e:21:14:f4:ae:c4:5e:ae:51:a0:ff:02:40:ec:f4:
a1:a3:67:88:38:70:d8:6b:01:e5:25:d2:3e:21:f9:15:4f:bd:
71:65:9e:af:c0:33:88:2b:ea:84:27:e3:c9:c7:56:ba:b7:a2:
79:cb:c7:0a:37:9d:00:8d:d4:2a:11:8f:ce:da:60:ad:a5:7f:
6c:b4:50:3b:67:fc:16:dc:3a:16:9b:46:d3:bc:d9:1b:0f:bf:
3b:9d:47:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:18:18 2026 by rpki-client