
$ rpki-client -vvf rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft
File: Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft (raw, json)
Hash identifier: sbK6VdWhFmNMjHd+z2bhBQGmmgL1whG7uNC5hP0U6fo=
Subject key identifier: E9:14:8A:21:4C:8C:A7:67:A1:5F:1C:05:E4:E9:2F:01:14:3E:FD:E0
Authority key identifier: 1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99
Certificate issuer: /CN=A914FC2C/serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99
Certificate serial: 0400
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft
Manifest number: 03EA
Signing time: Mon 11 May 2026 00:34:41 +0000
Manifest this update: Mon 11 May 2026 00:34:40 +0000
Manifest next update: Mon 18 May 2026 00:34:40 +0000
Files and hashes: 1: Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl (hash: hIj8AUzn8ScwUa2ontzfVchhs1/WL/hvkrp+iqcIChI=)
2: F6D63384C53511ECA64F3010C4F9AE02.roa (hash: Olp3ZD+KVecOlfGoX1LPX5Wca4ynuugi2374UO2D6d4=)
3: F6542C72C53511ECA64F3010C4F9AE02.roa (hash: tIlegLOK6K2gzpC3EMxXzCQPQ5ijkvaOZu7GF+ennV8=)
4: 6E32028AD48511EF8239D526C4F9AE02.roa (hash: +jMfdrNgrz1Nzrt0QgBnBGHQwacuV0bREddxSJbErg4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl
rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 00:34:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1024 (0x400)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914FC2C, serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99
Validity
Not Before: May 11 00:34:40 2026 GMT
Not After : May 18 00:34:40 2026 GMT
Subject: CN=6a012421-cc99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5b:a4:50:42:42:60:6c:70:58:90:34:2b:a9:
5f:d7:0f:be:a2:93:2d:c6:c0:0c:d8:81:03:e8:f1:
03:9f:94:e1:1d:94:f2:f8:cd:cb:57:d2:08:23:2a:
4f:5b:b2:fa:d1:95:51:67:a6:66:bb:d0:d9:d2:5d:
e6:9a:89:e2:2f:83:dc:8e:e5:53:14:86:2a:28:08:
a5:f7:2f:23:ae:0f:b1:1a:55:d9:02:4a:77:f9:a8:
f0:fd:4a:dd:4c:bb:16:bc:d1:c4:d4:d9:1d:91:39:
9f:91:52:dd:4a:79:da:dd:d6:e2:88:90:2b:2a:25:
6e:6d:91:b6:16:02:74:f4:b5:e4:03:85:59:9f:22:
69:62:2b:64:61:bf:4e:0f:1e:b6:0d:6b:6e:9d:69:
b9:8f:df:1f:16:b4:79:89:a5:ab:a1:8e:3a:60:b3:
76:9a:27:46:95:10:25:da:df:a6:41:19:95:e2:b4:
53:92:76:5c:92:55:52:2b:f8:7f:88:f8:9e:f6:e0:
51:9d:43:5f:6e:cc:a1:83:a0:3d:95:20:17:11:85:
2d:d9:69:c8:35:37:7a:1e:a0:00:99:85:af:58:6e:
b4:25:ed:fb:3c:23:48:00:ef:1c:af:84:15:f4:59:
ca:5a:17:4c:ea:9d:4c:62:9c:ba:1f:fb:28:76:7d:
f8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:14:8A:21:4C:8C:A7:67:A1:5F:1C:05:E4:E9:2F:01:14:3E:FD:E0
X509v3 Authority Key Identifier:
keyid:1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:87:fa:72:f8:11:74:78:27:f6:11:55:54:50:e4:b2:0a:f8:
2a:6b:1d:59:a1:70:93:23:99:bf:8d:61:41:3f:f5:17:e2:8f:
93:a5:2a:fd:e4:62:cc:02:6f:fe:00:33:bc:41:a5:c1:39:e2:
d6:a8:3d:2b:9f:c5:e2:af:17:98:b1:d6:f4:ae:57:93:75:97:
9b:07:b4:08:15:9e:bd:79:f1:22:ea:4c:44:ea:9a:18:d2:bd:
66:6d:ad:3d:92:86:79:8c:0b:39:06:58:ac:c2:7c:2d:e7:4b:
38:95:e9:c9:f4:d2:39:d2:a1:b5:1d:40:46:ac:ed:12:5a:bb:
1c:f1:f2:dd:9d:84:16:d7:1b:48:a7:f3:ae:25:a7:8d:8c:ef:
e2:9a:27:6c:4d:4f:74:fe:fc:69:76:4d:83:49:1c:ed:8c:cb:
8e:f1:fb:e4:31:7a:50:8e:f0:a9:6b:a3:0c:ce:5b:ba:4a:8d:
7b:45:0c:29:77:7f:05:0d:fe:f0:ed:6f:6a:81:86:f1:cc:6f:
4d:44:08:2f:ef:e9:5d:e7:46:15:9e:15:0e:36:ba:c3:94:1d:
59:09:30:a3:00:dc:bf:d6:0e:0a:2f:52:42:af:e0:ba:e2:79:
94:92:e9:79:b9:87:ab:76:76:d7:85:01:83:1b:97:37:e9:f9:
4b:58:17:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:05:44 2026 by rpki-client