
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft
File: GaNgWeMX739niFziUq7bkZWPXmg.mft (raw, json)
Hash identifier: 8K/ttMPmqAvYXD78nfjDu6UX0OJY4tHjl6MoePE+bKM=
Subject key identifier: 0D:4A:D7:1D:5B:F9:FB:A6:9D:F4:FC:EB:87:71:1D:9C:E0:61:DF:EB
Authority key identifier: 19:A3:60:59:E3:17:EF:7F:67:88:5C:E2:52:AE:DB:91:95:8F:5E:68
Certificate issuer: /CN=A917D857/serialNumber=19A36059E317EF7F67885CE252AEDB91958F5E68
Certificate serial: 021E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft
Manifest number: 0219
Signing time: Thu 23 Jul 2026 04:05:37 +0000
Manifest this update: Thu 23 Jul 2026 04:05:36 +0000
Manifest next update: Thu 30 Jul 2026 04:05:36 +0000
Files and hashes: 1: GaNgWeMX739niFziUq7bkZWPXmg.crl (hash: XmY24sSoIgFbN9OLsvUHV6AzQqf4L1G4cMlvA+keSiM=)
2: BD9131004E2811EEBC65304DC4F9AE02.roa (hash: A4DYwCMJtHqL8FOrLyHdgaT304qseoK7Vf9HSfcF82c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.crl
rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 542 (0x21e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D857, serialNumber=19A36059E317EF7F67885CE252AEDB91958F5E68
Validity
Not Before: Jul 23 04:05:36 2026 GMT
Not After : Jul 30 04:05:36 2026 GMT
Subject: CN=6a619311-b1e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a9:c6:2b:8b:7e:69:74:45:4c:d3:58:0b:a9:
29:7b:a0:ae:01:fc:80:de:06:9b:88:ae:51:46:49:
b5:40:40:56:01:ac:5f:d2:f2:dd:9f:78:1a:90:e3:
c8:e5:61:59:18:4e:3d:89:a7:cf:94:9f:a0:bc:07:
d8:e8:18:56:e9:4f:0f:e2:72:6e:17:6e:47:2c:71:
19:8e:fc:9d:75:35:ba:f9:5b:8b:22:91:2c:be:9d:
84:b2:c1:0d:35:c9:5d:58:32:84:82:6b:6e:53:58:
4a:7f:c2:a0:00:3f:96:e5:54:af:8b:90:d9:34:a0:
21:40:67:14:6c:4c:9b:c1:bd:b7:8a:b5:c3:cc:9a:
4e:66:b5:eb:bc:8a:34:18:02:a9:1b:91:07:e0:07:
37:94:10:15:3e:ef:00:ac:c9:1f:ec:f2:0a:90:be:
46:4d:eb:2f:5b:0a:77:56:95:96:b9:53:7f:f8:26:
0d:18:17:c9:03:77:f7:cd:54:af:46:70:8b:79:d6:
19:9b:14:dc:83:09:a4:e4:a6:04:a7:76:89:71:46:
44:55:bf:67:e7:fe:b9:cf:f1:ec:c7:0c:48:2c:c7:
1e:ff:2c:29:92:06:26:b0:02:81:d6:f8:b5:cf:f5:
92:09:cd:68:a5:47:93:34:f8:3f:4e:53:11:c3:1e:
66:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:4A:D7:1D:5B:F9:FB:A6:9D:F4:FC:EB:87:71:1D:9C:E0:61:DF:EB
X509v3 Authority Key Identifier:
keyid:19:A3:60:59:E3:17:EF:7F:67:88:5C:E2:52:AE:DB:91:95:8F:5E:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:6d:89:b2:4e:00:e0:16:78:32:a8:8b:fe:cb:3d:d2:96:0a:
a7:33:a3:6e:61:9a:13:fc:40:52:9c:18:64:24:a7:82:f7:8a:
16:75:b3:f8:18:99:88:c4:1d:9b:40:09:30:2d:1d:40:02:d9:
4e:10:d9:bf:68:b7:28:f6:45:78:89:c3:85:85:c5:0c:e8:8d:
e8:ab:4c:55:1e:74:d8:d0:ac:b7:12:92:68:e9:cc:14:49:8c:
85:dd:f1:95:96:4a:79:4e:c6:42:ff:cc:f3:e4:8e:94:ea:78:
a0:b3:46:24:f1:a5:84:6d:df:69:15:bf:3d:ed:80:df:6f:4f:
cc:06:2c:16:f6:c4:f0:5d:02:9a:d4:aa:db:57:55:70:ab:ac:
eb:fb:ae:15:90:11:0f:da:17:6f:bc:6a:4d:cc:c0:be:74:41:
87:cf:db:6a:7f:cd:87:f2:cc:ed:ab:0f:fd:8a:76:0b:5d:31:
ad:6d:ae:c2:80:c7:c8:4b:44:25:e7:44:2e:f6:5c:78:40:d9:
ee:70:d0:09:2f:ec:eb:9d:17:ba:d0:69:8d:c5:dd:4a:c7:52:
65:54:6e:ff:f3:a5:a5:c9:42:63:37:e4:cd:0b:68:fc:bc:c0:
6a:e4:a4:56:dc:8d:0a:5e:37:33:31:0d:b6:07:cc:7b:8f:f3:
8c:f7:de:67
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0Q4NTcxMTAvBgNVBAUTKDE5QTM2MDU5RTMxN0VGN0Y2Nzg4NUNFMjUyQUVEQjkx
OTU4RjVFNjgwHhcNMjYwNzIzMDQwNTM2WhcNMjYwNzMwMDQwNTM2WjAYMRYwFAYD
VQQDEw02YTYxOTMxMS1iMWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqanGK4t+aXRFTNNYC6kpe6CuAfyA3gabiK5RRkm1QEBWAaxf0vLdn3gakOPI
5WFZGE49iafPlJ+gvAfY6BhW6U8P4nJuF25HLHEZjvyddTW6+VuLIpEsvp2EssEN
NcldWDKEgmtuU1hKf8KgAD+W5VSvi5DZNKAhQGcUbEybwb23irXDzJpOZrXrvIo0
GAKpG5EH4Ac3lBAVPu8ArMkf7PIKkL5GTesvWwp3VpWWuVN/+CYNGBfJA3f3zVSv
RnCLedYZmxTcgwmk5KYEp3aJcUZEVb9n5/65z/HsxwxILMce/ywpkgYmsAKB1vi1
z/WSCc1opUeTNPg/TlMRwx5m4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA1K1x1b
+fumnfT864dxHZzgYd/rMB8GA1UdIwQYMBaAFBmjYFnjF+9/Z4hc4lKu25GVj15o
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDg1Ny82MUM1Q0RCODRF
MjgxMUVFOTRGREIzNENDNEY5QUUwMi9HYU5nV2VNWDczOW5pRnppVXE3YmtaV1BY
bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dhTmdXZU1YNzM5bmlGemlVcTdia1pXUFhtZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RDg1Ny82MUM1Q0RCODRFMjgxMUVFOTRGREIzNENDNEY5QUUwMi9HYU5nV2VNWDcz
OW5pRnppVXE3YmtaV1BYbWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAW2Jsk4A4BZ4MqiL/ss90pYKpzOjbmGaE/xAUpwYZCSngveKFnWz+BiZiMQd
m0AJMC0dQALZThDZv2i3KPZFeInDhYXFDOiN6KtMVR502NCstxKSaOnMFEmMhd3x
lZZKeU7GQv/M8+SOlOp4oLNGJPGlhG3faRW/Pe2A329PzAYsFvbE8F0CmtSq21dV
cKus6/uuFZARD9oXb7xqTczAvnRBh8/ban/Nh/LM7asP/Yp2C10xrW2uwoDHyEtE
JedELvZceEDZ7nDQCS/s650XutBpjcXdSsdSZVRu//OlpclCYzfkzQto/LzAauSk
VtyNCl43MzENtgfMe4/zjPfeZw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:23:36 2026 by rpki-client