
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft
File: GNXPyKr1F7B20fycLmX2kUNdOl8.mft (raw, json)
Hash identifier: T4LzB8TBiItwpn0xzBJvIie7BMI7bo1lwoD1bQh16b4=
Subject key identifier: 69:B8:1A:31:AC:E4:E1:1B:4A:65:DF:2E:A3:70:6F:AE:44:F8:4D:CD
Authority key identifier: 18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F
Certificate issuer: /CN=A917E0AC/serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F
Certificate serial: 0A5E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft
Manifest number: 0A4A
Signing time: Thu 06 Aug 2026 19:32:42 +0000
Manifest this update: Thu 06 Aug 2026 19:32:41 +0000
Manifest next update: Thu 13 Aug 2026 19:32:41 +0000
Files and hashes: 1: GNXPyKr1F7B20fycLmX2kUNdOl8.crl (hash: Yj4gh1JcVDUxVllPsRmM/vA52TODnwOJXCHOFXSgfPA=)
2: 1584607CF14511ECA1AE5F4EC4F9AE02.roa (hash: POm408iE+nAwo8TdURTFaonfBCRS6Twa2e9BS7lBMnI=)
3: 36F0A6E6370811ECA61C8B38C4F9AE02.roa (hash: 9sxsLCohbrBBuOHRRUIEDZ6mWAhiElHi4Y+R/2Te8q4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl
rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 13 Aug 2026 19:32:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2654 (0xa5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E0AC, serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F
Validity
Not Before: Aug 6 19:32:41 2026 GMT
Not After : Aug 13 19:32:41 2026 GMT
Subject: CN=6a74e15a-c763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9d:8f:04:42:27:1a:57:51:30:56:03:4f:53:
08:5e:9e:2e:45:d6:5b:8e:5b:04:9f:60:60:10:e1:
1f:af:3c:e6:d5:f8:93:b9:0d:32:16:26:25:ae:f9:
92:3a:16:0a:ee:46:68:c8:73:c0:2e:38:95:a5:65:
63:55:10:64:42:b5:a7:5d:2a:9e:f3:81:77:aa:4f:
1e:c3:45:b7:9c:60:49:1d:1b:f2:6e:fb:06:81:f6:
45:ae:1d:f1:77:50:27:7e:83:4b:45:fb:f4:a2:5d:
82:c5:2f:09:14:35:5f:ea:16:f1:53:c6:65:79:28:
7f:b1:4b:21:d5:1e:b6:1b:9a:af:8b:99:ee:b6:61:
db:a5:24:24:29:37:d2:2b:bf:a2:62:12:73:ea:6a:
46:de:13:9e:a0:bc:7b:56:54:1b:5a:99:1b:e2:bb:
c8:47:fa:b8:1b:64:62:12:5b:e4:5a:99:f6:25:2e:
f8:29:2d:51:81:75:e7:71:ab:f7:c7:16:67:2d:98:
74:a5:8f:46:cb:88:c4:e7:83:a5:8f:7d:06:47:ce:
66:47:da:39:5d:2d:00:af:04:4f:1d:bb:49:b4:a9:
9d:a9:42:8b:33:74:d6:b2:9e:c1:9d:f9:81:40:24:
50:7a:25:aa:66:99:80:2c:f2:a1:c4:54:dd:ad:53:
20:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B8:1A:31:AC:E4:E1:1B:4A:65:DF:2E:A3:70:6F:AE:44:F8:4D:CD
X509v3 Authority Key Identifier:
keyid:18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:bc:ca:d8:1e:74:07:39:7e:f9:61:fa:7c:5f:15:e5:fe:0b:
bc:c4:19:b0:37:11:e6:31:84:94:62:f5:f5:84:46:37:04:13:
9a:13:f4:b8:f6:21:fa:aa:4f:4c:6e:c5:71:7f:98:4b:28:5e:
7d:91:de:10:51:fb:b8:e8:f9:40:ee:76:30:a0:33:ae:ba:f9:
c1:1a:45:d7:d0:08:3c:39:c1:2a:2f:e5:95:08:cb:bf:95:06:
39:ff:8e:1d:82:42:4e:8d:58:fe:56:0c:93:68:b5:61:1f:22:
25:21:ba:a6:5f:b4:94:c7:cf:33:ef:f7:8d:a0:99:8f:ef:aa:
dc:ae:09:97:90:21:30:5e:5c:c2:6c:1d:6d:db:89:fc:f9:6a:
fd:6f:ab:49:ca:1d:ee:42:c7:30:2e:49:d9:7c:36:be:e3:79:
77:38:7d:87:78:11:9b:04:b7:cd:98:f1:8b:2e:63:08:db:c7:
3e:23:02:93:8f:c7:b9:22:df:21:7a:18:2d:36:cb:b0:6b:e3:
f5:c8:c4:94:71:93:4e:ae:27:56:35:7f:ba:4b:3d:e7:f2:b4:
49:21:c4:90:52:46:84:56:c1:5b:58:76:e6:a4:10:5a:f5:fd:
1b:4c:0e:68:e6:01:84:7e:9e:b9:df:fe:5e:35:6a:1a:83:21:
c9:2a:9c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 10:39:44 2026 by rpki-client