
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft
File: GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft (raw, json)
Hash identifier: 8rKLuOPllILd8A/mQImzyVFqjJW4xWU1TsqX6EkhzUE=
Subject key identifier: A2:0E:1B:8A:06:8B:1A:FD:42:5D:CA:3D:66:99:18:61:68:04:86:C3
Authority key identifier: 18:9F:2D:EC:5A:70:3F:7D:6C:FD:5F:96:AA:B5:A2:E8:A8:DD:94:06
Certificate issuer: /CN=A917D472/serialNumber=189F2DEC5A703F7D6CFD5F96AAB5A2E8A8DD9406
Certificate serial: 01B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJ8t7FpwP31s_V-WqrWi6KjdlAY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft
Manifest number: 01AE
Signing time: Wed 07 Oct 2026 04:30:40 +0000
Manifest this update: Wed 07 Oct 2026 04:30:39 +0000
Manifest next update: Wed 14 Oct 2026 04:30:39 +0000
Files and hashes: 1: GJ8t7FpwP31s_V-WqrWi6KjdlAY.crl (hash: sF0l8OMNYom2Qs9hhRudZ1d18Su6x/May8ikbFB3X5Q=)
2: B7FDD0B031E711EF9FBC7372C4F9AE02.roa (hash: d7Yg2G8iGCmUekKjYtBEorDHzHbZJ7UzJDRjYURu2SE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.crl
rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJ8t7FpwP31s_V-WqrWi6KjdlAY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 04:30:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 436 (0x1b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D472, serialNumber=189F2DEC5A703F7D6CFD5F96AAB5A2E8A8DD9406
Validity
Not Before: Oct 7 04:30:39 2026 GMT
Not After : Oct 14 04:30:39 2026 GMT
Subject: CN=6ac5caf0-53c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:86:1d:89:04:f7:34:46:44:2d:fe:34:e9:13:
4c:59:e0:f8:15:cd:83:07:f4:08:8e:f5:32:f7:ff:
e4:c7:bd:b9:c0:4f:b2:8a:84:47:9e:11:77:2c:54:
00:bd:85:b3:f3:9d:21:19:2e:ff:ec:65:48:4c:32:
7e:fc:c4:6d:b3:53:d0:1e:69:d4:72:9f:f9:ef:bc:
21:e1:d1:99:66:0f:44:2c:b6:fa:c4:18:90:b0:02:
d8:eb:8c:73:db:3e:cd:4e:6a:c7:1f:5e:b4:d3:b9:
33:f7:6e:2c:89:e6:1f:f3:3f:62:8f:44:32:0c:dc:
d5:c8:bf:b4:f0:36:25:a1:29:0f:36:7e:51:10:0c:
4d:73:82:cc:d9:87:8a:c1:aa:5e:de:a8:37:f7:82:
73:e7:57:e5:43:15:ea:69:60:f7:5f:a9:7b:2b:6f:
4e:e2:59:fe:9d:e7:17:ee:3b:49:3b:54:3a:73:72:
59:d1:3e:c8:d9:6d:58:30:5f:04:11:23:cd:1f:b6:
d8:07:ba:03:cb:d2:47:db:c2:c3:83:33:7e:78:21:
61:17:04:f3:73:99:86:fc:45:9f:5c:60:ce:ac:02:
d0:05:01:5a:cd:37:f9:8f:68:79:08:b2:b0:97:79:
54:2c:2d:36:e9:c6:bf:e2:33:bc:cf:b7:6e:33:3a:
96:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:0E:1B:8A:06:8B:1A:FD:42:5D:CA:3D:66:99:18:61:68:04:86:C3
X509v3 Authority Key Identifier:
keyid:18:9F:2D:EC:5A:70:3F:7D:6C:FD:5F:96:AA:B5:A2:E8:A8:DD:94:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJ8t7FpwP31s_V-WqrWi6KjdlAY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:7d:b7:72:2f:90:60:2f:00:fd:1b:39:e4:48:9d:2a:7f:e6:
00:a8:3d:7c:12:a9:39:eb:e7:e7:52:18:f7:09:41:c7:5d:b4:
9d:7a:cd:4d:07:6d:ea:b6:b6:71:a5:db:a5:f2:8a:36:59:62:
3c:2f:e0:d7:89:ac:84:4c:d2:73:f0:a9:b5:6d:1a:3b:12:47:
ff:6d:bf:69:71:53:30:9f:3e:51:2d:8d:e4:8e:55:c6:91:1a:
ff:96:ac:8d:a8:48:ed:2d:3b:31:02:90:7a:cb:87:95:b3:03:
41:50:46:7f:8f:d6:23:33:61:fd:ac:15:0a:3e:e0:c1:a2:93:
a1:f4:96:30:87:83:72:5a:1a:4a:36:4f:94:a4:e7:f6:8e:f5:
c2:cf:dc:0e:82:df:46:8e:d8:2d:e4:27:56:89:9f:35:38:8b:
72:cc:96:00:b5:a9:49:9c:aa:17:15:9b:30:dc:06:f8:05:46:
7a:93:1e:d5:e3:14:93:72:a7:47:b1:47:ae:0f:b9:1a:d7:b3:
f8:50:4e:bf:d2:08:fd:eb:cf:37:69:70:ea:18:44:6c:b6:1e:
89:68:e5:18:81:6f:95:7c:42:3e:85:6a:ea:6e:10:34:f2:29:
35:35:11:d0:bc:aa:f7:d0:35:b7:f6:cf:a0:da:47:7e:77:2b:
50:20:33:55
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0Q0NzIxMTAvBgNVBAUTKDE4OUYyREVDNUE3MDNGN0Q2Q0ZENUY5NkFBQjVBMkU4
QThERDk0MDYwHhcNMjYxMDA3MDQzMDM5WhcNMjYxMDE0MDQzMDM5WjAYMRYwFAYD
VQQDEw02YWM1Y2FmMC01M2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs4YdiQT3NEZELf406RNMWeD4Fc2DB/QIjvUy9//kx725wE+yioRHnhF3LFQA
vYWz850hGS7/7GVITDJ+/MRts1PQHmnUcp/577wh4dGZZg9ELLb6xBiQsALY64xz
2z7NTmrHH16007kz924sieYf8z9ij0QyDNzVyL+08DYloSkPNn5REAxNc4LM2YeK
wape3qg394Jz51flQxXqaWD3X6l7K29O4ln+necX7jtJO1Q6c3JZ0T7I2W1YMF8E
ESPNH7bYB7oDy9JH28LDgzN+eCFhFwTzc5mG/EWfXGDOrALQBQFazTf5j2h5CLKw
l3lULC026ca/4jO8z7duMzqW2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKIOG4oG
ixr9Ql3KPWaZGGFoBIbDMB8GA1UdIwQYMBaAFBifLexacD99bP1flqq1ouio3ZQG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDQ3Mi8xM0E4RkI0NDMx
RTYxMUVGQUU5RUU0NjBDNEY5QUUwMi9HSjh0N0Zwd1AzMXNfVi1XcXJXaTZLamRs
QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dKOHQ3RnB3UDMxc19WLVdxcldpNktqZGxBWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RDQ3Mi8xM0E4RkI0NDMxRTYxMUVGQUU5RUU0NjBDNEY5QUUwMi9HSjh0N0Zwd1Az
MXNfVi1XcXJXaTZLamRsQVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAV323ci+QYC8A/Rs55EidKn/mAKg9fBKpOevn51IY9wlBx120nXrNTQdt6ra2
caXbpfKKNlliPC/g14mshEzSc/CptW0aOxJH/22/aXFTMJ8+US2N5I5VxpEa/5as
jahI7S07MQKQesuHlbMDQVBGf4/WIzNh/awVCj7gwaKTofSWMIeDcloaSjZPlKTn
9o71ws/cDoLfRo7YLeQnVomfNTiLcsyWALWpSZyqFxWbMNwG+AVGepMe1eMUk3Kn
R7FHrg+5Gtez+FBOv9II/evPN2lw6hhEbLYeiWjlGIFvlXxCPoVq6m4QNPIpNTUR
0Lyq99A1t/bPoNpHfncrUCAzVQ==
-----END CERTIFICATE-----
Generated at Wed Oct 7 18:07:42 2026 by rpki-client