
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.mft
File: GxesPclsojRSUCPv02J-ks2IR0g.mft (raw, json)
Hash identifier: Oocbc01vW1hayu8LPB4/evRWMZ85ctz7SVh87XL/CFw=
Subject key identifier: 66:F4:97:B3:33:C3:20:23:96:79:10:91:F6:36:06:68:1F:D3:D3:2D
Authority key identifier: 1B:17:AC:3D:C9:6C:A2:34:52:50:23:EF:D3:62:7E:92:CD:88:47:48
Certificate issuer: /CN=A917DBF2/serialNumber=1B17AC3DC96CA234525023EFD3627E92CD884748
Certificate serial: 1E47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GxesPclsojRSUCPv02J-ks2IR0g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.mft
Manifest number: 1DF3
Signing time: Tue 22 Sep 2026 16:02:51 +0000
Manifest this update: Tue 22 Sep 2026 16:02:50 +0000
Manifest next update: Tue 29 Sep 2026 16:02:50 +0000
Files and hashes: 1: GxesPclsojRSUCPv02J-ks2IR0g.crl (hash: W5wX8wlAUZ5qN6ZUfR77wnTJCwcUA6biOcWF8t2uqD4=)
2: 4E2669F4FF3B11EB910E8847C4F9AE02.roa (hash: hsIMVES/RshZRMg/IYSKfaC8xNA1Vhhbh6ui/TW2WWo=)
3: 8A1AF86E94BC11EC9E49DB41C4F9AE02.roa (hash: YuvkBqlEeFCoXBaOZasT0zM29UlrwmymL5NE2blVSiE=)
4: C154DA14E85C11EBA2171A25C4F9AE02.roa (hash: IPxwuDAs+rs/dWI7IwZQIjs7sZfbx/rQmmj734bJ2/s=)
5: 4D609E86FF3B11EB910E8847C4F9AE02.roa (hash: WhkLj0w45a5YtVE3jvzrZ8Dxr8O2vOWWoHPkacPIXzA=)
6: C2EECBA0E85C11EBA2171A25C4F9AE02.roa (hash: 3ijGtnKRZtAGtvocDeUrSBYus200G7y6Dr0KE05wtXM=)
7: 89654CDAB83B11EFAA80DD09C4F9AE02.roa (hash: Y2B9BXK6GgEUgrdOgkuvUr+OvwRamCav5yIYFYLKyOo=)
8: 907B9B20E8AD11EBAA895D0AC4F9AE02.roa (hash: BRkeotXr+WaPofrhA/ccsuUEV0af6klyrqasow7IzzQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.crl
rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GxesPclsojRSUCPv02J-ks2IR0g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 16:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7751 (0x1e47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917DBF2, serialNumber=1B17AC3DC96CA234525023EFD3627E92CD884748
Validity
Not Before: Sep 22 16:02:50 2026 GMT
Not After : Sep 29 16:02:50 2026 GMT
Subject: CN=6ab2a6ab-7fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:df:d1:32:ef:1c:00:11:ae:7e:8a:70:3a:a2:
18:dd:98:2d:48:61:d9:e5:56:9a:7e:e2:88:8f:0d:
a7:6a:22:21:e0:14:24:61:ec:1f:82:8b:f9:ea:fb:
8b:39:63:cd:07:d0:49:8b:c4:cb:ed:be:4c:83:68:
37:41:04:2b:5d:ae:9b:57:be:1d:ba:90:86:5c:c9:
fc:6b:1a:14:59:e3:d4:37:c1:17:12:ff:08:72:6d:
4a:dc:af:ba:79:d5:56:31:f8:57:6d:17:71:6b:90:
c5:d3:38:f0:90:2a:59:58:e9:b0:de:43:77:48:11:
2c:08:6a:cc:85:01:fc:5d:ff:27:1f:4a:9d:13:fb:
4c:6c:70:c3:f7:47:1c:06:73:50:e5:6c:5b:66:f8:
55:08:81:71:91:f4:bf:e3:e0:c4:e6:09:1c:c4:83:
b9:d4:13:f7:37:74:12:73:53:57:f3:a7:c0:eb:c1:
34:8e:20:d8:bf:5d:e0:e7:92:49:8a:58:26:1e:1d:
bd:be:d9:43:c7:50:47:41:62:cc:1e:40:4e:78:34:
cd:b8:b8:1f:78:03:58:d8:da:8b:d9:8e:59:c8:3a:
7f:ef:89:1b:80:4c:e9:13:55:1c:33:d6:fd:7d:15:
85:9d:d1:da:7a:51:ec:71:7f:bc:b3:ad:9a:28:13:
93:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F4:97:B3:33:C3:20:23:96:79:10:91:F6:36:06:68:1F:D3:D3:2D
X509v3 Authority Key Identifier:
keyid:1B:17:AC:3D:C9:6C:A2:34:52:50:23:EF:D3:62:7E:92:CD:88:47:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GxesPclsojRSUCPv02J-ks2IR0g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:6f:ee:93:24:62:03:6b:d3:6f:00:03:76:ef:d4:2d:a8:38:
03:cf:e2:57:30:2c:ac:06:65:a2:cf:b6:c2:95:f3:47:5f:cb:
44:82:6a:da:e8:6e:71:41:1b:3a:b8:86:14:ce:64:d3:99:19:
81:fa:69:a1:aa:51:8e:3c:a6:44:02:bf:b2:54:2d:33:3d:a7:
03:b0:13:93:cc:71:32:1d:2f:54:79:0c:4d:24:f8:d1:53:65:
0f:fe:12:bc:64:45:e2:c8:e6:06:d8:d3:f8:7f:ba:d0:ee:79:
cc:b8:d6:62:9f:8f:17:43:76:e1:0c:e7:57:65:f7:97:ec:ad:
d1:a7:04:17:e2:f3:a9:b4:9e:d7:4d:59:53:29:fd:2d:2a:f1:
a3:e8:3e:22:59:33:bb:42:3c:91:67:32:8f:e6:03:41:20:db:
d2:bd:3e:3a:ed:5f:97:b1:18:a3:42:8a:fc:e2:f3:f0:3a:44:
52:17:c5:5a:b3:10:72:f1:29:2e:f8:1b:89:47:ad:23:ad:77:
0e:9f:1e:48:64:4d:9e:03:3c:b2:87:55:1b:a9:b3:12:f1:90:
91:52:49:f4:63:c8:c0:0a:df:3f:74:c6:42:cb:30:04:82:a7:
d5:be:0a:08:d9:ee:43:b7:c9:65:83:f9:82:1a:96:d6:c3:3e:
1c:72:24:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:52:50 2026 by rpki-client