
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft
File: GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft (raw, json)
Hash identifier: EGb37JzEVYmmCmkntHU/Wgc0e73LxJv9wP3TsrLRi4M=
Subject key identifier: 7B:E3:05:7E:52:A7:FC:FA:BD:63:3F:56:8D:2C:29:3F:0C:B4:0A:A6
Authority key identifier: 18:9F:2D:EC:5A:70:3F:7D:6C:FD:5F:96:AA:B5:A2:E8:A8:DD:94:06
Certificate issuer: /CN=A917D472/serialNumber=189F2DEC5A703F7D6CFD5F96AAB5A2E8A8DD9406
Certificate serial: 0167
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJ8t7FpwP31s_V-WqrWi6KjdlAY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft
Manifest number: 0162
Signing time: Wed 13 May 2026 04:55:34 +0000
Manifest this update: Wed 13 May 2026 04:55:34 +0000
Manifest next update: Wed 20 May 2026 04:55:34 +0000
Files and hashes: 1: GJ8t7FpwP31s_V-WqrWi6KjdlAY.crl (hash: u5xnloQiglaGTVWZaz01BQE/6Ypzoh717eNlxUgNmXU=)
2: B7FDD0B031E711EF9FBC7372C4F9AE02.roa (hash: TVQSdwEfSaIR1+dTOJsBoZylToFNXJ9xhYYLtuRExiI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.crl
rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJ8t7FpwP31s_V-WqrWi6KjdlAY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 04:55:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 359 (0x167)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D472, serialNumber=189F2DEC5A703F7D6CFD5F96AAB5A2E8A8DD9406
Validity
Not Before: May 13 04:55:34 2026 GMT
Not After : May 20 04:55:34 2026 GMT
Subject: CN=6a040446-2b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e8:a2:7b:c6:6c:ea:80:64:85:66:36:7c:83:
f5:f3:89:e3:95:db:0c:08:a6:77:8e:7f:d4:9c:6c:
93:85:7a:91:21:77:15:99:64:67:67:e5:00:85:2b:
ae:d2:a4:c2:ce:41:8c:69:8b:41:b4:de:98:f4:6c:
dc:a7:20:04:d4:56:ff:13:a0:ab:ca:c6:48:49:61:
ba:61:83:a4:b9:a8:59:34:54:2c:c4:c8:60:a1:f1:
79:06:48:78:ac:cd:cd:13:80:f5:b7:10:9d:88:c4:
bb:8b:b4:e8:b9:86:21:c7:50:ba:b5:56:01:7b:ba:
2b:68:4d:5f:f2:94:43:b4:50:52:04:51:71:78:d5:
30:64:cb:bf:f4:3f:f9:78:70:84:2a:63:59:5d:dc:
86:0b:12:81:3f:23:44:49:0e:4e:e3:81:e1:f0:56:
8f:2d:d0:4b:0d:0e:ee:45:c9:5b:e5:19:d0:1d:72:
6f:b8:9b:59:d1:33:f0:0f:ed:41:b0:5b:fa:ac:41:
74:24:88:3d:f8:27:1c:fa:4a:52:ea:fe:40:0b:3b:
1c:c3:e2:d3:8d:bc:2e:4e:be:15:a8:35:f0:11:8a:
82:2f:f3:7f:8e:d3:3f:3d:c5:85:fc:da:d2:e8:54:
0d:1e:ad:17:ae:6a:34:46:0c:1d:58:5a:2a:e6:31:
3f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E3:05:7E:52:A7:FC:FA:BD:63:3F:56:8D:2C:29:3F:0C:B4:0A:A6
X509v3 Authority Key Identifier:
keyid:18:9F:2D:EC:5A:70:3F:7D:6C:FD:5F:96:AA:B5:A2:E8:A8:DD:94:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJ8t7FpwP31s_V-WqrWi6KjdlAY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cb:98:43:66:e1:dd:37:11:52:c6:6a:8e:6d:40:7e:58:66:0f:
f1:1c:b7:34:c8:86:8c:97:10:43:11:ac:7c:92:1e:b3:a6:5a:
46:81:35:41:5e:5e:81:1b:77:b4:33:f2:5d:bb:c7:fb:72:60:
9a:b6:c1:42:e5:c4:db:f4:7f:a1:5b:33:62:42:af:69:b2:cc:
ff:af:d1:36:89:1a:b9:c6:c5:a0:33:14:30:8f:28:5f:e7:4a:
41:0a:a6:2b:e0:68:24:78:58:04:f4:fb:8b:d1:60:16:cb:51:
12:1f:0d:ad:24:9b:5e:6e:55:6d:18:82:33:aa:34:2a:75:57:
73:6f:e1:45:00:9a:c1:a7:a3:87:4e:e6:b8:cd:2a:6b:20:9b:
38:87:ea:f7:63:84:01:b2:30:2d:6f:54:0c:fa:a9:32:a0:84:
f2:87:cf:5f:3a:ca:41:01:9f:99:8c:38:89:cd:ba:fa:78:9d:
b2:04:84:3c:69:38:16:d2:26:a4:fc:47:3e:b5:0c:e0:10:19:
b3:b0:fb:6f:31:c1:50:f7:27:3d:6b:eb:62:49:c7:95:c1:d3:
36:46:d3:bd:3e:c0:47:c3:85:0d:65:33:1f:e8:3e:4a:78:db:
79:3d:34:e6:dc:dd:77:4a:f0:68:da:f4:8f:d5:67:98:55:6f:
f5:d4:ff:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:48:58 2026 by rpki-client