
$ rpki-client -vvf rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.mft
File: GcmgwhkwwW6kFprC6-3H5snXtS8.mft (raw, json)
Hash identifier: 6tzadDfAeHsGHNwoShbNlu2A6VbhbQyOP5C8YPLnbjI=
Subject key identifier: 39:A9:6C:23:7B:87:25:6E:EB:89:7D:DA:13:45:99:B5:AA:7A:B2:70
Authority key identifier: 19:C9:A0:C2:19:30:C1:6E:A4:16:9A:C2:EB:ED:C7:E6:C9:D7:B5:2F
Certificate issuer: /CN=A916BCBA/serialNumber=19C9A0C21930C16EA4169AC2EBEDC7E6C9D7B52F
Certificate serial: 78
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GcmgwhkwwW6kFprC6-3H5snXtS8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.mft
Manifest number: 71
Signing time: Thu 23 Jul 2026 09:54:12 +0000
Manifest this update: Thu 23 Jul 2026 09:54:12 +0000
Manifest next update: Thu 30 Jul 2026 09:54:12 +0000
Files and hashes: 1: GcmgwhkwwW6kFprC6-3H5snXtS8.crl (hash: LQO6aGKQRGJ0M/7M5p4nmNQOxsbZzEMj4Ba8a5wr2oc=)
2: 167F2222E8D211F091D937E6616F56BC.roa (hash: hqoxp1DZQxlSqrDmlnlQZc0fxw5C7ZE4Da6abuSlt+s=)
3: 18EB15B84C6C11F1A78F0F88C2833773.roa (hash: Gx1/bgiTTtC0ZtbXuD3ZiQ31WylCA/sLch7wjwJEjVs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.crl
rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GcmgwhkwwW6kFprC6-3H5snXtS8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:54:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120 (0x78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BCBA, serialNumber=19C9A0C21930C16EA4169AC2EBEDC7E6C9D7B52F
Validity
Not Before: Jul 23 09:54:12 2026 GMT
Not After : Jul 30 09:54:12 2026 GMT
Subject: CN=6a61e4c4-83ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:96:5c:c7:7f:dd:64:d0:c5:8e:ad:41:e3:0f:
9f:d9:aa:8a:6b:3e:2e:fe:8c:d4:ba:6a:ef:8a:02:
9a:d5:a8:bd:8e:0d:f0:58:f1:9a:db:67:36:21:6d:
1f:cb:6d:a2:da:27:4c:79:28:49:f3:42:53:09:dd:
e0:e4:ef:cc:cc:6b:e2:93:84:3b:32:90:e5:7c:13:
48:f8:e4:c1:2d:05:e9:41:72:ec:8a:c6:14:28:f3:
ac:4c:76:14:64:c3:3d:e8:48:a2:cf:19:d9:8a:1d:
69:c3:9b:4b:73:a6:d6:70:8f:ef:f3:29:53:83:a3:
8d:ad:40:6a:45:ab:25:96:98:b7:70:2e:73:a8:91:
9e:ec:32:86:bc:e8:a0:cc:f8:ed:72:28:6b:2f:9d:
d7:42:3f:26:cf:0c:c4:2d:fc:b8:c3:0f:42:d3:1b:
d6:90:a1:8e:3e:6b:f7:fc:ff:0f:7c:bf:78:c0:44:
0e:3b:53:03:ef:27:2f:92:6c:c5:e1:43:76:c8:17:
54:63:89:a1:78:7d:3f:95:b3:73:63:72:fd:5c:1b:
f8:f7:3e:c3:ea:16:ec:cf:e7:fc:24:ea:d4:37:f2:
48:74:a6:23:c0:60:ec:ca:44:a8:3d:0d:c8:10:3d:
ad:11:3e:c3:4f:88:f5:a7:94:0d:19:02:f3:91:22:
3d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A9:6C:23:7B:87:25:6E:EB:89:7D:DA:13:45:99:B5:AA:7A:B2:70
X509v3 Authority Key Identifier:
keyid:19:C9:A0:C2:19:30:C1:6E:A4:16:9A:C2:EB:ED:C7:E6:C9:D7:B5:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GcmgwhkwwW6kFprC6-3H5snXtS8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:f8:a3:06:a9:28:b6:9c:16:5f:b6:f5:9e:54:c7:2e:50:f6:
14:91:cd:fb:e4:76:f2:2a:1c:ba:e4:29:a2:c7:97:20:62:cc:
33:23:b1:8f:56:6d:1e:de:a5:c3:1b:ba:c7:6e:6d:59:f0:2d:
e6:20:ff:dd:d9:53:ba:9a:b4:a2:6e:8e:03:8f:62:a8:49:bf:
10:53:0c:1d:c2:f0:d8:62:fe:f5:9c:04:45:2f:d8:32:38:ad:
f9:1f:6d:51:1e:f4:2f:ad:39:a3:b8:1b:c9:ea:7f:ba:f6:5d:
9e:7f:f8:d8:6b:0d:af:cd:ce:77:ec:1e:f6:96:01:ea:0d:62:
d6:15:90:b2:de:49:9e:91:27:0a:f5:b3:f4:f7:76:4c:c8:8b:
94:dc:64:0c:00:10:20:25:23:b1:fc:47:42:eb:55:9b:6d:6f:
94:3f:e6:a8:c2:3c:a2:a9:19:37:77:eb:1e:2a:3c:35:e6:00:
73:4a:ed:05:2f:2d:44:5e:c0:95:69:60:9b:74:24:25:94:e2:
dc:bd:26:9c:53:c6:90:f0:08:62:e9:4d:c4:15:08:1e:e2:bd:
fa:79:3a:7a:f2:4d:42:76:83:50:2a:6e:c5:f7:01:2e:84:ee:
88:4f:e0:d6:dd:2d:13:dd:26:fe:b5:db:22:93:f2:6d:82:30:
c3:62:11:d7
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
QkNCQTExMC8GA1UEBRMoMTlDOUEwQzIxOTMwQzE2RUE0MTY5QUMyRUJFREM3RTZD
OUQ3QjUyRjAeFw0yNjA3MjMwOTU0MTJaFw0yNjA3MzAwOTU0MTJaMBgxFjAUBgNV
BAMTDTZhNjFlNGM0LTgzZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDhllzHf91k0MWOrUHjD5/ZqoprPi7+jNS6au+KAprVqL2ODfBY8ZrbZzYhbR/L
baLaJ0x5KEnzQlMJ3eDk78zMa+KThDsykOV8E0j45MEtBelBcuyKxhQo86xMdhRk
wz3oSKLPGdmKHWnDm0tzptZwj+/zKVODo42tQGpFqyWWmLdwLnOokZ7sMoa86KDM
+O1yKGsvnddCPybPDMQt/LjDD0LTG9aQoY4+a/f8/w98v3jARA47UwPvJy+SbMXh
Q3bIF1RjiaF4fT+Vs3Njcv1cG/j3PsPqFuzP5/wk6tQ38kh0piPAYOzKRKg9DcgQ
Pa0RPsNPiPWnlA0ZAvORIj3NAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUOalsI3uH
JW7riX3aE0WZtap6snAwHwYDVR0jBBgwFoAUGcmgwhkwwW6kFprC6+3H5snXtS8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCQ0JBLzM0MDBDNzE4RTYy
QzExRjA5NzZBOTVGQjZGNkY1NkJDL0djbWd3aGt3d1c2a0ZwckM2LTNINXNuWHRT
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvR2NtZ3doa3d3VzZrRnByQzYtM0g1c25YdFM4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZC
Q0JBLzM0MDBDNzE4RTYyQzExRjA5NzZBOTVGQjZGNkY1NkJDL0djbWd3aGt3d1c2
a0ZwckM2LTNINXNuWHRTOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAV+KMGqSi2nBZftvWeVMcuUPYUkc375HbyKhy65Cmix5cgYswzI7GPVm0e3qXD
G7rHbm1Z8C3mIP/d2VO6mrSibo4Dj2KoSb8QUwwdwvDYYv71nARFL9gyOK35H21R
HvQvrTmjuBvJ6n+69l2ef/jYaw2vzc537B72lgHqDWLWFZCy3kmekScK9bP093ZM
yIuU3GQMABAgJSOx/EdC61WbbW+UP+aowjyiqRk3d+seKjw15gBzSu0FLy1EXsCV
aWCbdCQllOLcvSacU8aQ8Ahi6U3EFQge4r36eTp68k1CdoNQKm7F9wEuhO6IT+DW
3S0T3Sb+tdsik/JtgjDDYhHX
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:14:30 2026 by rpki-client