
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft
File: GaNgWeMX739niFziUq7bkZWPXmg.mft (raw, json)
Hash identifier: 82lKoCnDJqxMHKPMmKiLH97ZeEEvrQvGjkARNpHzOQE=
Subject key identifier: 20:19:2E:8F:06:8D:91:A2:2D:DD:A3:C9:65:DB:4A:A9:BD:27:56:DD
Authority key identifier: 19:A3:60:59:E3:17:EF:7F:67:88:5C:E2:52:AE:DB:91:95:8F:5E:68
Certificate issuer: /CN=A917D857/serialNumber=19A36059E317EF7F67885CE252AEDB91958F5E68
Certificate serial: 023F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft
Manifest number: 023A
Signing time: Fri 25 Sep 2026 02:34:30 +0000
Manifest this update: Fri 25 Sep 2026 02:34:29 +0000
Manifest next update: Fri 02 Oct 2026 02:34:29 +0000
Files and hashes: 1: GaNgWeMX739niFziUq7bkZWPXmg.crl (hash: ITz8NehI/aEJynX1tRB+RBPBilCStSM50ztRhJ/NvGc=)
2: BD9131004E2811EEBC65304DC4F9AE02.roa (hash: A4DYwCMJtHqL8FOrLyHdgaT304qseoK7Vf9HSfcF82c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.crl
rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 02:34:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 575 (0x23f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D857, serialNumber=19A36059E317EF7F67885CE252AEDB91958F5E68
Validity
Not Before: Sep 25 02:34:29 2026 GMT
Not After : Oct 2 02:34:29 2026 GMT
Subject: CN=6ab5ddb5-2bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:60:8e:70:b8:7a:ff:1e:ec:a0:a2:46:cd:38:
1b:2e:5d:60:45:08:1a:9d:1d:c2:0d:cc:7d:af:aa:
f9:29:0b:a8:70:38:fe:bb:e6:6f:35:60:1a:f0:fa:
04:75:39:99:cb:f8:ad:8e:ff:5b:c9:21:c9:b4:7a:
a3:6a:d1:af:8d:48:2f:7e:d8:06:a2:aa:10:03:e3:
6f:e1:4f:08:86:d3:45:8b:ce:4a:4c:a8:99:dc:f7:
c1:36:f8:c0:25:5a:79:4b:0e:1f:8c:39:4b:2a:f0:
69:44:82:91:cd:bd:cd:60:c0:52:f8:97:3c:8e:88:
ec:fc:16:2d:be:75:63:75:7f:3b:2e:d6:5b:52:52:
05:a8:fe:66:fb:14:e0:17:cf:02:4a:f6:eb:66:e5:
11:38:7c:3a:42:bb:f0:87:65:32:e3:0b:93:00:76:
b7:1f:88:7b:c9:e9:27:b7:6a:2d:08:59:73:8f:65:
ba:a8:f4:0d:33:4c:0d:13:7d:d0:e9:75:b6:b3:d4:
63:05:fc:53:af:11:a2:79:5d:80:ce:9a:7d:43:b2:
c7:09:bf:67:37:ba:c6:fd:cd:b2:9d:79:16:68:74:
d8:d3:c5:c4:6e:03:cb:63:cd:9a:c2:0f:6b:e6:a8:
01:54:78:db:f8:e8:36:37:89:de:ed:8b:29:6b:96:
1e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:19:2E:8F:06:8D:91:A2:2D:DD:A3:C9:65:DB:4A:A9:BD:27:56:DD
X509v3 Authority Key Identifier:
keyid:19:A3:60:59:E3:17:EF:7F:67:88:5C:E2:52:AE:DB:91:95:8F:5E:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:fe:fa:88:5e:f6:69:d7:11:5d:2e:13:1f:41:aa:f8:d2:39:
88:b9:3f:c5:22:b2:55:69:f6:c2:e4:a6:b1:2b:24:ec:09:d4:
44:e8:94:cc:f2:d3:b8:67:b4:b8:0a:ff:35:91:37:5e:f7:3e:
d1:99:ab:24:88:c3:93:ef:6c:67:66:6a:c7:23:c6:3b:31:42:
5c:6f:a9:4b:ec:9e:60:80:87:1d:7d:4b:69:1f:75:fb:56:f1:
7c:22:35:47:c4:7c:d8:32:92:e8:6f:cd:8c:53:97:d1:2f:5d:
98:ed:6c:f5:17:bc:69:04:7d:05:38:1f:30:1c:d1:45:17:96:
56:c9:1d:8b:67:4e:84:70:96:c9:7e:23:ca:30:e9:6e:8a:7a:
dc:4b:81:d6:1b:03:01:18:47:82:95:5e:81:75:e8:33:42:a2:
d6:59:c8:3c:70:91:3f:f4:d0:48:6e:5b:b9:6c:cc:14:19:29:
5c:c7:c4:89:7f:32:a0:2e:55:5c:7b:14:8a:be:02:5d:bb:97:
a6:9c:d1:5e:44:48:a0:90:9c:ff:10:09:69:fc:c9:12:50:25:
8d:d2:c5:1c:b6:ab:18:d3:34:59:fa:c3:ba:8c:34:6f:32:03:
21:a4:f2:a6:79:a6:b9:d6:d2:d6:1a:bd:e8:56:ac:86:5b:14:
0f:3e:7d:6f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0Q4NTcxMTAvBgNVBAUTKDE5QTM2MDU5RTMxN0VGN0Y2Nzg4NUNFMjUyQUVEQjkx
OTU4RjVFNjgwHhcNMjYwOTI1MDIzNDI5WhcNMjYxMDAyMDIzNDI5WjAYMRYwFAYD
VQQDEw02YWI1ZGRiNS0yYmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3WCOcLh6/x7soKJGzTgbLl1gRQganR3CDcx9r6r5KQuocDj+u+ZvNWAa8PoE
dTmZy/itjv9bySHJtHqjatGvjUgvftgGoqoQA+Nv4U8IhtNFi85KTKiZ3PfBNvjA
JVp5Sw4fjDlLKvBpRIKRzb3NYMBS+Jc8jojs/BYtvnVjdX87LtZbUlIFqP5m+xTg
F88CSvbrZuUROHw6Qrvwh2Uy4wuTAHa3H4h7yeknt2otCFlzj2W6qPQNM0wNE33Q
6XW2s9RjBfxTrxGieV2Azpp9Q7LHCb9nN7rG/c2ynXkWaHTY08XEbgPLY82awg9r
5qgBVHjb+Og2N4ne7Yspa5YeFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCAZLo8G
jZGiLd2jyWXbSqm9J1bdMB8GA1UdIwQYMBaAFBmjYFnjF+9/Z4hc4lKu25GVj15o
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDg1Ny82MUM1Q0RCODRF
MjgxMUVFOTRGREIzNENDNEY5QUUwMi9HYU5nV2VNWDczOW5pRnppVXE3YmtaV1BY
bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dhTmdXZU1YNzM5bmlGemlVcTdia1pXUFhtZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RDg1Ny82MUM1Q0RCODRFMjgxMUVFOTRGREIzNENDNEY5QUUwMi9HYU5nV2VNWDcz
OW5pRnppVXE3YmtaV1BYbWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAd/76iF72adcRXS4TH0Gq+NI5iLk/xSKyVWn2wuSmsSsk7AnUROiUzPLTuGe0
uAr/NZE3Xvc+0ZmrJIjDk+9sZ2ZqxyPGOzFCXG+pS+yeYICHHX1LaR91+1bxfCI1
R8R82DKS6G/NjFOX0S9dmO1s9Re8aQR9BTgfMBzRRReWVskdi2dOhHCWyX4jyjDp
bop63EuB1hsDARhHgpVegXXoM0Ki1lnIPHCRP/TQSG5buWzMFBkpXMfEiX8yoC5V
XHsUir4CXbuXppzRXkRIoJCc/xAJafzJElAljdLFHLarGNM0WfrDuow0bzIDIaTy
pnmmudbS1hq96FashlsUDz59bw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 21:41:59 2026 by rpki-client