
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft
File: GaNgWeMX739niFziUq7bkZWPXmg.mft (raw, json)
Hash identifier: znxEwHNIMzPm6mE0k/ck/Hm6d4ys6ps7ogGr+hU6vGU=
Subject key identifier: 88:0A:8A:5A:F4:2C:22:86:75:CD:DA:4E:8D:1B:1C:97:CD:51:CF:EA
Authority key identifier: 19:A3:60:59:E3:17:EF:7F:67:88:5C:E2:52:AE:DB:91:95:8F:5E:68
Certificate issuer: /CN=A917D857/serialNumber=19A36059E317EF7F67885CE252AEDB91958F5E68
Certificate serial: 0214
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft
Manifest number: 020F
Signing time: Fri 03 Jul 2026 03:33:26 +0000
Manifest this update: Fri 03 Jul 2026 03:33:25 +0000
Manifest next update: Fri 10 Jul 2026 03:33:25 +0000
Files and hashes: 1: GaNgWeMX739niFziUq7bkZWPXmg.crl (hash: qbFK+UXmP3+UgUvIdxo2imaauq+Upx8QhdRcmhgNtEw=)
2: BD9131004E2811EEBC65304DC4F9AE02.roa (hash: A4DYwCMJtHqL8FOrLyHdgaT304qseoK7Vf9HSfcF82c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.crl
rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 10 Jul 2026 03:33:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 532 (0x214)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D857, serialNumber=19A36059E317EF7F67885CE252AEDB91958F5E68
Validity
Not Before: Jul 3 03:33:25 2026 GMT
Not After : Jul 10 03:33:25 2026 GMT
Subject: CN=6a472d85-01fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:18:be:d2:70:99:8a:58:4e:d0:6a:6c:b7:84:
98:b6:45:30:f9:7d:fc:16:b9:66:5e:47:24:45:a5:
3a:60:12:50:ec:3a:d3:1a:cc:51:4b:64:84:6d:fb:
73:8a:4c:10:f6:a0:e2:f7:9a:b5:97:39:03:22:4b:
84:37:fa:20:4d:be:79:81:87:ee:e9:0f:66:f9:3b:
cd:aa:2b:5a:58:40:ec:58:9a:ab:a4:e1:69:10:07:
a7:f6:d6:bd:0d:da:77:73:87:39:d4:54:50:09:a3:
b8:9a:96:d9:f0:f1:37:53:bb:ca:22:44:08:b1:57:
45:24:68:0c:cb:ba:de:5c:8d:16:32:ec:af:11:7f:
90:3d:fb:4b:42:37:b5:5d:d8:25:31:21:e6:24:66:
e2:9f:9d:d1:dd:5e:98:aa:2b:28:a8:f2:0a:bf:44:
e9:0d:59:d0:54:70:c9:5a:03:fa:58:7f:75:60:4f:
a2:4e:d9:28:a1:9c:a3:61:51:7b:20:e6:7b:fe:81:
0d:16:59:ab:16:d7:d4:21:ba:4b:13:8a:bd:22:d3:
db:80:28:23:18:75:65:9a:83:eb:44:98:28:e7:15:
4a:fc:99:50:e4:3c:d4:11:01:fd:09:0f:6c:19:98:
70:dc:51:e7:67:ce:d9:ff:9d:6b:53:46:b9:ca:20:
92:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:0A:8A:5A:F4:2C:22:86:75:CD:DA:4E:8D:1B:1C:97:CD:51:CF:EA
X509v3 Authority Key Identifier:
keyid:19:A3:60:59:E3:17:EF:7F:67:88:5C:E2:52:AE:DB:91:95:8F:5E:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:dc:6f:c4:d3:47:dd:e4:1d:88:10:43:df:61:30:2e:4a:52:
2e:f8:f5:f6:60:6c:c3:ff:47:6a:5b:9e:b7:a5:e6:b2:a8:a5:
3f:8d:f6:79:7a:15:b1:22:a1:3d:25:9b:7d:c0:23:c3:12:cc:
35:5b:4a:f3:07:09:cf:5f:0d:5e:d5:7e:cb:56:b0:5c:4b:73:
f8:e1:64:df:6f:e8:27:6b:32:c2:85:02:e0:4b:f6:25:67:49:
fe:b5:25:18:70:fc:af:14:5b:2f:50:f0:ce:db:c0:62:7b:d7:
b6:36:2c:f3:f3:9d:82:a0:bd:d2:9a:56:21:15:cf:c1:60:7b:
c2:2f:f5:64:2a:7f:2f:d1:b4:81:15:4c:e4:6f:7e:81:17:ad:
4e:8b:d1:ac:94:08:0b:48:15:a0:73:39:86:5e:a5:42:a3:3c:
43:36:8c:a1:fd:d1:d2:bb:f4:14:c8:a0:1d:20:85:59:8a:c4:
bf:62:ad:6a:12:06:9b:77:44:48:45:53:56:94:86:1d:3d:ef:
7b:56:d1:48:09:bd:d3:28:d1:93:ca:48:ac:16:b1:f2:92:87:
78:d7:aa:65:9b:db:08:82:e1:e1:de:98:49:97:04:53:76:24:
e3:9c:4d:5e:60:ab:83:10:fb:38:45:69:23:5c:5e:15:ec:96:
5f:df:7d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 4 16:08:24 2026 by rpki-client