
$ rpki-client -vvf rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.mft
File: GxesPclsojRSUCPv02J-ks2IR0g.mft (raw, json)
Hash identifier: vDQHCXFAsQLE2vLwJOmgeJeefhx5BMDq3e5GXiczHRs=
Subject key identifier: 9A:A7:4B:F5:80:7E:D6:6D:30:17:CA:6A:03:9E:B0:4F:7B:8B:8F:D3
Authority key identifier: 1B:17:AC:3D:C9:6C:A2:34:52:50:23:EF:D3:62:7E:92:CD:88:47:48
Certificate issuer: /CN=A917DBF2/serialNumber=1B17AC3DC96CA234525023EFD3627E92CD884748
Certificate serial: 1E03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GxesPclsojRSUCPv02J-ks2IR0g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.mft
Manifest number: 1DAF
Signing time: Tue 12 May 2026 16:07:34 +0000
Manifest this update: Tue 12 May 2026 16:07:33 +0000
Manifest next update: Tue 19 May 2026 16:07:33 +0000
Files and hashes: 1: GxesPclsojRSUCPv02J-ks2IR0g.crl (hash: AsVy67hPgbDvIlJVDrYQmCluDJaJNTti9qM/OirJHpI=)
2: 89654CDAB83B11EFAA80DD09C4F9AE02.roa (hash: Y2B9BXK6GgEUgrdOgkuvUr+OvwRamCav5yIYFYLKyOo=)
3: C154DA14E85C11EBA2171A25C4F9AE02.roa (hash: IPxwuDAs+rs/dWI7IwZQIjs7sZfbx/rQmmj734bJ2/s=)
4: 8A1AF86E94BC11EC9E49DB41C4F9AE02.roa (hash: YuvkBqlEeFCoXBaOZasT0zM29UlrwmymL5NE2blVSiE=)
5: 4E2669F4FF3B11EB910E8847C4F9AE02.roa (hash: hsIMVES/RshZRMg/IYSKfaC8xNA1Vhhbh6ui/TW2WWo=)
6: 4D609E86FF3B11EB910E8847C4F9AE02.roa (hash: WhkLj0w45a5YtVE3jvzrZ8Dxr8O2vOWWoHPkacPIXzA=)
7: C2EECBA0E85C11EBA2171A25C4F9AE02.roa (hash: 3ijGtnKRZtAGtvocDeUrSBYus200G7y6Dr0KE05wtXM=)
8: 907B9B20E8AD11EBAA895D0AC4F9AE02.roa (hash: BRkeotXr+WaPofrhA/ccsuUEV0af6klyrqasow7IzzQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.crl
rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GxesPclsojRSUCPv02J-ks2IR0g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:07:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7683 (0x1e03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917DBF2, serialNumber=1B17AC3DC96CA234525023EFD3627E92CD884748
Validity
Not Before: May 12 16:07:33 2026 GMT
Not After : May 19 16:07:33 2026 GMT
Subject: CN=6a035046-d4e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:df:fd:08:ff:13:02:0b:63:dd:0b:cf:b9:ff:
24:f4:98:8b:22:47:84:cb:21:d1:f2:bd:a3:0e:09:
03:fa:5e:f9:61:d7:72:3f:d3:ee:42:4f:b5:1d:b2:
a2:bc:a6:93:1f:d3:8f:44:77:a0:8b:bf:59:0d:80:
07:7c:15:a1:81:61:86:f5:0c:3b:78:bb:2e:aa:67:
33:95:15:42:5a:92:e3:ee:fd:e6:2b:a4:ca:0b:ed:
13:73:62:53:ab:cd:72:ab:6c:d5:2e:1a:6b:45:c0:
e3:73:77:07:1f:9d:45:af:36:b9:03:37:01:ef:72:
69:eb:c1:56:14:29:89:bf:51:1e:2b:8a:b0:d5:cc:
8c:fd:c4:58:1f:4a:88:7b:0e:23:d9:fc:b1:f7:6d:
3a:8b:84:db:7a:e9:7c:c2:b5:16:5c:2d:5d:d8:af:
19:d7:b1:d3:7f:4b:a9:3e:50:4d:61:d2:92:50:f9:
a1:9c:e7:bd:ca:dd:77:56:84:e4:b9:6f:d3:69:fd:
d2:ed:b2:43:56:8b:e2:34:6c:9f:59:4d:10:2f:b0:
00:bd:d5:8d:61:ed:e7:38:01:87:d3:ba:56:aa:bf:
07:87:ff:72:de:dd:65:8d:e6:e9:ea:24:24:d1:89:
33:db:9d:4e:2a:4e:74:85:e8:f1:4e:35:1e:38:56:
02:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A7:4B:F5:80:7E:D6:6D:30:17:CA:6A:03:9E:B0:4F:7B:8B:8F:D3
X509v3 Authority Key Identifier:
keyid:1B:17:AC:3D:C9:6C:A2:34:52:50:23:EF:D3:62:7E:92:CD:88:47:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GxesPclsojRSUCPv02J-ks2IR0g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:18:26:3b:07:e9:44:c6:e0:60:d2:0e:93:7d:d5:08:79:2b:
b3:87:46:fb:64:d0:21:17:1d:67:23:d1:2a:5f:c5:5d:f0:53:
d4:ec:6b:98:79:0f:3b:09:66:af:e0:04:b3:52:56:2b:08:b7:
8e:83:e1:3b:fa:38:8e:ee:37:64:22:4a:9d:36:75:cc:c7:74:
6f:28:14:1f:1d:c8:c2:df:9a:96:b4:20:43:f4:4d:d9:10:e9:
4a:5d:86:27:f5:f7:ea:38:da:0a:c5:5b:97:d7:f2:3f:19:1d:
59:62:38:f9:69:bb:0f:7f:e6:23:6e:0c:26:99:15:72:3d:64:
ca:14:dd:74:d1:3c:16:10:03:0d:66:1d:49:b3:03:b1:5b:bf:
34:e4:19:fc:df:d6:8b:18:8c:09:08:7f:2d:8d:40:d4:62:fc:
86:4c:3c:09:41:97:40:92:b3:c2:64:0c:20:7b:66:cf:11:17:
4a:8a:5e:f8:cd:cf:d7:e9:14:5e:29:5a:26:d8:15:35:94:3e:
f6:18:f6:be:56:e7:28:de:78:51:38:a1:bf:a0:7d:5f:e7:a7:
19:e8:07:5e:02:d9:7e:22:6a:33:99:51:8c:e6:2d:30:93:5b:
0e:ff:c2:ad:a4:8f:84:6d:c5:59:08:39:b2:f8:1e:d5:e1:bb:
33:1c:4e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:13:34 2026 by rpki-client