
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.mft
File: GcmgwhkwwW6kFprC6-3H5snXtS8.mft (raw, json)
Hash identifier: 3l+f935uxSkTGNlItyeROPXHIIFeaZ/S/dGRFRO/RCY=
Subject key identifier: 66:66:DE:87:C9:3B:9A:13:1D:62:1F:63:10:47:9E:C7:7F:01:6B:2E
Authority key identifier: 19:C9:A0:C2:19:30:C1:6E:A4:16:9A:C2:EB:ED:C7:E6:C9:D7:B5:2F
Certificate issuer: /CN=A916BCBA/serialNumber=19C9A0C21930C16EA4169AC2EBEDC7E6C9D7B52F
Certificate serial: 9B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GcmgwhkwwW6kFprC6-3H5snXtS8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.mft
Manifest number: 94
Signing time: Tue 29 Sep 2026 08:06:29 +0000
Manifest this update: Tue 29 Sep 2026 08:06:28 +0000
Manifest next update: Tue 06 Oct 2026 08:06:28 +0000
Files and hashes: 1: GcmgwhkwwW6kFprC6-3H5snXtS8.crl (hash: Rv6oG1gdDq2TgKaenShSqw+NBR2gLWJ9IHYudbrhxK0=)
2: 18EB15B84C6C11F1A78F0F88C2833773.roa (hash: Gx1/bgiTTtC0ZtbXuD3ZiQ31WylCA/sLch7wjwJEjVs=)
3: 167F2222E8D211F091D937E6616F56BC.roa (hash: hqoxp1DZQxlSqrDmlnlQZc0fxw5C7ZE4Da6abuSlt+s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.crl
rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GcmgwhkwwW6kFprC6-3H5snXtS8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 08:06:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155 (0x9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BCBA, serialNumber=19C9A0C21930C16EA4169AC2EBEDC7E6C9D7B52F
Validity
Not Before: Sep 29 08:06:28 2026 GMT
Not After : Oct 6 08:06:28 2026 GMT
Subject: CN=6abb7185-44c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e1:51:12:29:d9:23:93:88:d9:60:35:0e:fa:
e5:50:a9:16:ac:f7:11:29:0f:13:8e:40:0d:66:21:
cd:d1:9b:9a:e8:c0:ce:56:8a:c6:db:3d:72:b5:41:
25:63:b5:c2:ad:59:5d:e3:a9:0c:25:3a:3b:a7:43:
03:a9:ba:4a:f6:e4:bc:32:47:63:7d:fe:a9:95:7d:
1d:49:fc:b9:11:84:cf:5f:8a:43:d0:4b:ed:e4:14:
2a:80:06:ae:35:9b:5e:32:d3:b5:a8:7e:2f:a4:45:
8e:7d:5d:33:93:bd:fd:23:d2:10:9b:50:04:7f:56:
02:ae:a9:ea:61:c0:67:ee:9a:49:f3:58:c5:9a:fc:
9d:f3:36:89:a4:c8:8d:dc:4d:9d:2c:02:49:b5:ea:
77:6c:38:c8:94:8b:20:05:47:8c:06:d1:75:60:20:
72:93:2a:e9:c4:14:7f:39:6a:68:5c:42:af:36:2c:
b8:5f:e9:97:a9:79:73:14:6e:d9:3a:7c:27:38:35:
f0:89:c1:5d:a9:26:40:0a:6a:87:8c:79:18:e0:4d:
b7:02:fd:65:73:5a:7e:53:c7:f7:28:9f:be:1b:96:
f8:70:c1:d2:d4:8c:76:9d:47:b0:d5:42:29:49:65:
32:32:44:94:d9:b8:8f:22:f4:70:24:f6:5c:bf:c3:
23:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:66:DE:87:C9:3B:9A:13:1D:62:1F:63:10:47:9E:C7:7F:01:6B:2E
X509v3 Authority Key Identifier:
keyid:19:C9:A0:C2:19:30:C1:6E:A4:16:9A:C2:EB:ED:C7:E6:C9:D7:B5:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GcmgwhkwwW6kFprC6-3H5snXtS8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:8a:e6:57:ba:03:43:ef:96:cd:87:6d:30:37:df:96:04:f1:
03:7c:b5:05:fd:2e:5b:b9:fb:34:08:f0:a1:fa:93:1e:2e:1b:
3e:bb:8c:51:86:c1:9c:ea:3b:4a:d3:d0:69:6a:6a:18:b5:bb:
dd:40:a7:e5:48:6a:14:49:dd:a1:f3:ad:84:8d:94:f1:65:21:
01:f9:87:15:39:64:9f:91:59:a3:a0:72:bf:c9:83:0d:44:9c:
4c:be:e5:34:b2:20:b8:ec:9c:f5:02:5a:72:fc:62:cc:44:d6:
46:04:fa:ae:0b:13:04:7e:54:46:59:fa:96:9b:60:56:4f:15:
38:13:d5:97:6b:9b:db:76:8a:b7:d5:a9:83:01:07:a0:d3:b1:
cc:5d:b3:50:76:24:f2:98:d5:18:54:ee:99:27:32:12:6f:12:
11:d0:61:fc:c3:8c:f4:58:d0:cf:8e:c2:bc:15:78:c4:de:f4:
b9:d6:75:54:82:b4:54:16:09:88:1f:a3:e2:63:e7:46:a9:0b:
21:13:31:d4:33:67:8e:a7:29:39:dd:ec:df:be:28:2f:8b:9a:
a2:7e:97:f2:5e:90:79:4d:00:21:84:28:90:09:ae:28:a9:40:
03:7c:2c:a9:4b:f1:33:a4:d6:ae:44:85:de:65:43:5c:b5:83:
07:2c:72:c0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkJDQkExMTAvBgNVBAUTKDE5QzlBMEMyMTkzMEMxNkVBNDE2OUFDMkVCRURDN0U2
QzlEN0I1MkYwHhcNMjYwOTI5MDgwNjI4WhcNMjYxMDA2MDgwNjI4WjAYMRYwFAYD
VQQDEw02YWJiNzE4NS00NGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAquFREinZI5OI2WA1DvrlUKkWrPcRKQ8TjkANZiHN0Zua6MDOVorG2z1ytUEl
Y7XCrVld46kMJTo7p0MDqbpK9uS8Mkdjff6plX0dSfy5EYTPX4pD0Evt5BQqgAau
NZteMtO1qH4vpEWOfV0zk739I9IQm1AEf1YCrqnqYcBn7ppJ81jFmvyd8zaJpMiN
3E2dLAJJtep3bDjIlIsgBUeMBtF1YCBykyrpxBR/OWpoXEKvNiy4X+mXqXlzFG7Z
OnwnODXwicFdqSZACmqHjHkY4E23Av1lc1p+U8f3KJ++G5b4cMHS1Ix2nUew1UIp
SWUyMkSU2biPIvRwJPZcv8MjMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGZm3ofJ
O5oTHWIfYxBHnsd/AWsuMB8GA1UdIwQYMBaAFBnJoMIZMMFupBaawuvtx+bJ17Uv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkNCQS8zNDAwQzcxOEU2
MkMxMUYwOTc2QTk1RkI2RjZGNTZCQy9HY21nd2hrd3dXNmtGcHJDNi0zSDVzblh0
UzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0djbWd3aGt3d1c2a0ZwckM2LTNINXNuWHRTOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QkNCQS8zNDAwQzcxOEU2MkMxMUYwOTc2QTk1RkI2RjZGNTZCQy9HY21nd2hrd3dX
NmtGcHJDNi0zSDVzblh0UzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAm4rmV7oDQ++WzYdtMDfflgTxA3y1Bf0uW7n7NAjwofqTHi4bPruMUYbBnOo7
StPQaWpqGLW73UCn5UhqFEndofOthI2U8WUhAfmHFTlkn5FZo6Byv8mDDUScTL7l
NLIguOyc9QJacvxizETWRgT6rgsTBH5URln6lptgVk8VOBPVl2ub23aKt9WpgwEH
oNOxzF2zUHYk8pjVGFTumScyEm8SEdBh/MOM9FjQz47CvBV4xN70udZ1VIK0VBYJ
iB+j4mPnRqkLIRMx1DNnjqcpOd3s374oL4uaon6X8l6QeU0AIYQokAmuKKlAA3ws
qUvxM6TWrkSF3mVDXLWDByxywA==
-----END CERTIFICATE-----
Generated at Wed Sep 30 08:24:43 2026 by rpki-client