
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.mft
File: GxesPclsojRSUCPv02J-ks2IR0g.mft (raw, json)
Hash identifier: MbAOb84qPw2s1Zh8Vam03epPSubyS+Tqj3QmW+7ff+s=
Subject key identifier: DB:C3:09:29:72:10:31:FE:4C:26:1F:D8:59:C0:39:5C:E3:E4:EB:4E
Authority key identifier: 1B:17:AC:3D:C9:6C:A2:34:52:50:23:EF:D3:62:7E:92:CD:88:47:48
Certificate issuer: /CN=A917DBF2/serialNumber=1B17AC3DC96CA234525023EFD3627E92CD884748
Certificate serial: 1E41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GxesPclsojRSUCPv02J-ks2IR0g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.mft
Manifest number: 1DED
Signing time: Thu 10 Sep 2026 16:04:36 +0000
Manifest this update: Thu 10 Sep 2026 16:04:35 +0000
Manifest next update: Thu 17 Sep 2026 16:04:35 +0000
Files and hashes: 1: GxesPclsojRSUCPv02J-ks2IR0g.crl (hash: 74nlFTJuIds+dGFHdGldhiMlSl++a5pc7+Bo8H544IA=)
2: 907B9B20E8AD11EBAA895D0AC4F9AE02.roa (hash: BRkeotXr+WaPofrhA/ccsuUEV0af6klyrqasow7IzzQ=)
3: C154DA14E85C11EBA2171A25C4F9AE02.roa (hash: IPxwuDAs+rs/dWI7IwZQIjs7sZfbx/rQmmj734bJ2/s=)
4: 89654CDAB83B11EFAA80DD09C4F9AE02.roa (hash: Y2B9BXK6GgEUgrdOgkuvUr+OvwRamCav5yIYFYLKyOo=)
5: 4E2669F4FF3B11EB910E8847C4F9AE02.roa (hash: hsIMVES/RshZRMg/IYSKfaC8xNA1Vhhbh6ui/TW2WWo=)
6: 4D609E86FF3B11EB910E8847C4F9AE02.roa (hash: WhkLj0w45a5YtVE3jvzrZ8Dxr8O2vOWWoHPkacPIXzA=)
7: C2EECBA0E85C11EBA2171A25C4F9AE02.roa (hash: 3ijGtnKRZtAGtvocDeUrSBYus200G7y6Dr0KE05wtXM=)
8: 8A1AF86E94BC11EC9E49DB41C4F9AE02.roa (hash: YuvkBqlEeFCoXBaOZasT0zM29UlrwmymL5NE2blVSiE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.crl
rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GxesPclsojRSUCPv02J-ks2IR0g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 16:04:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7745 (0x1e41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917DBF2, serialNumber=1B17AC3DC96CA234525023EFD3627E92CD884748
Validity
Not Before: Sep 10 16:04:35 2026 GMT
Not After : Sep 17 16:04:35 2026 GMT
Subject: CN=6aa2d514-ae4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:02:83:1e:59:9e:05:fb:81:ca:83:51:1c:9a:
c1:f5:9e:44:85:be:24:fa:06:fa:75:e5:81:47:1d:
d1:c9:a6:c8:d3:ad:b9:6a:bc:64:be:7a:c6:0d:9a:
5e:01:ba:c6:0d:fe:bb:59:fe:78:a6:c3:2d:10:6e:
6f:e0:90:8a:1e:f7:d8:d0:51:cc:8c:00:3b:5d:3b:
eb:3e:9b:7e:5a:2f:29:3f:0b:da:1e:67:47:04:a0:
41:b9:4c:fc:1f:ae:2b:42:09:df:d2:0c:2b:03:1e:
e1:23:de:1f:9a:a1:94:c7:b2:ac:0a:03:5d:b6:bc:
6a:da:8a:f0:38:2d:14:71:42:16:95:08:28:21:6a:
47:0e:ac:95:e8:66:68:28:2e:a4:5f:fa:0f:cc:a7:
98:bb:d9:a8:8b:da:5d:fa:30:ba:1a:86:fb:50:af:
b8:21:55:ec:b1:2c:f4:87:e6:bb:e0:ed:90:76:bf:
3b:00:c4:45:6a:2b:ea:68:df:17:85:41:5c:96:92:
46:d0:16:de:63:1d:d2:7d:57:c0:65:03:da:21:5f:
3d:34:b1:d7:95:13:0f:16:bb:dc:4a:82:0c:91:1f:
85:dc:53:e7:85:76:21:45:2b:66:ae:d4:af:53:5f:
c6:02:93:b2:7b:69:7a:08:2c:fd:c4:ca:7e:21:31:
70:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C3:09:29:72:10:31:FE:4C:26:1F:D8:59:C0:39:5C:E3:E4:EB:4E
X509v3 Authority Key Identifier:
keyid:1B:17:AC:3D:C9:6C:A2:34:52:50:23:EF:D3:62:7E:92:CD:88:47:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GxesPclsojRSUCPv02J-ks2IR0g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:41:e9:67:71:e7:59:87:7d:e9:ab:17:67:e3:88:0d:cc:97:
f9:a9:97:21:32:41:57:bb:61:e8:be:71:cd:07:08:7a:40:3d:
00:6c:53:03:a2:09:e5:7c:bd:5a:93:58:bc:fd:6c:7e:f5:7a:
dc:65:ea:c7:9c:90:61:a1:94:1c:92:fc:69:36:e2:c9:31:e4:
18:e9:ac:6a:96:40:a8:be:04:35:79:2f:b1:d3:4f:ad:0c:fc:
45:2e:c6:7a:1a:af:62:1e:0d:55:6d:f0:01:b6:cd:65:70:a6:
41:19:13:db:a7:4b:36:4f:7d:5e:78:c9:7a:b8:43:c6:1e:25:
9e:2a:e2:a6:3d:2e:7a:61:9c:75:b4:58:ba:60:a5:46:0d:79:
f0:dc:ed:3c:1e:60:dc:4f:41:de:90:03:ee:17:f4:3e:51:51:
7b:53:aa:aa:97:f0:ce:91:b1:26:a6:01:6d:a0:1a:f2:c8:6b:
14:8b:a1:e8:4e:c0:20:a2:3e:10:fc:28:ac:ba:34:f8:9f:2f:
4a:0d:69:e6:6d:93:0d:e5:50:40:0f:54:71:ea:b7:57:58:69:
c6:a0:cf:a5:87:79:84:b0:b8:b6:18:86:fc:7d:49:1e:12:cd:
67:ac:22:5c:13:c5:ae:a4:1b:db:27:ee:f5:55:b7:38:e6:22:
65:1c:2e:eb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0RCRjIxMTAvBgNVBAUTKDFCMTdBQzNEQzk2Q0EyMzQ1MjUwMjNFRkQzNjI3RTky
Q0Q4ODQ3NDgwHhcNMjYwOTEwMTYwNDM1WhcNMjYwOTE3MTYwNDM1WjAYMRYwFAYD
VQQDEw02YWEyZDUxNC1hZTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5AKDHlmeBfuByoNRHJrB9Z5Ehb4k+gb6deWBRx3RyabI0625arxkvnrGDZpe
AbrGDf67Wf54psMtEG5v4JCKHvfY0FHMjAA7XTvrPpt+Wi8pPwvaHmdHBKBBuUz8
H64rQgnf0gwrAx7hI94fmqGUx7KsCgNdtrxq2orwOC0UcUIWlQgoIWpHDqyV6GZo
KC6kX/oPzKeYu9moi9pd+jC6Gob7UK+4IVXssSz0h+a74O2Qdr87AMRFaivqaN8X
hUFclpJG0BbeYx3SfVfAZQPaIV89NLHXlRMPFrvcSoIMkR+F3FPnhXYhRStmrtSv
U1/GApOye2l6CCz9xMp+ITFwRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNvDCSly
EDH+TCYf2FnAOVzj5OtOMB8GA1UdIwQYMBaAFBsXrD3JbKI0UlAj79NifpLNiEdI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REJGMi9FMzQ0NTAxNkMy
RjgxMUU2OTk3QUVCNkJDNEY5QUUwMi9HeGVzUGNsc29qUlNVQ1B2MDJKLWtzMklS
MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0d4ZXNQY2xzb2pSU1VDUHYwMkota3MySVIwZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
REJGMi9FMzQ0NTAxNkMyRjgxMUU2OTk3QUVCNkJDNEY5QUUwMi9HeGVzUGNsc29q
UlNVQ1B2MDJKLWtzMklSMGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVkHpZ3HnWYd96asXZ+OIDcyX+amXITJBV7th6L5xzQcIekA9AGxTA6IJ5Xy9
WpNYvP1sfvV63GXqx5yQYaGUHJL8aTbiyTHkGOmsapZAqL4ENXkvsdNPrQz8RS7G
ehqvYh4NVW3wAbbNZXCmQRkT26dLNk99XnjJerhDxh4lniripj0uemGcdbRYumCl
Rg158NztPB5g3E9B3pAD7hf0PlFRe1OqqpfwzpGxJqYBbaAa8shrFIuh6E7AIKI+
EPworLo0+J8vSg1p5m2TDeVQQA9Uceq3V1hpxqDPpYd5hLC4thiG/H1JHhLNZ6wi
XBPFrqQb2yfu9VW3OOYiZRwu6w==
-----END CERTIFICATE-----
Generated at Fri Sep 11 08:23:08 2026 by rpki-client