
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft
File: GNXPyKr1F7B20fycLmX2kUNdOl8.mft (raw, json)
Hash identifier: iItY1HpWbIHP/JyTbaeuk4Swak+tHkcS37+U2goa+SA=
Subject key identifier: 3F:3A:12:CD:FD:78:F1:F6:9E:34:F5:40:96:7E:86:0D:62:93:9E:8D
Authority key identifier: 18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F
Certificate issuer: /CN=A917E0AC/serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F
Certificate serial: 0A19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft
Manifest number: 0A05
Signing time: Tue 24 Mar 2026 19:36:58 +0000
Manifest this update: Tue 24 Mar 2026 19:36:57 +0000
Manifest next update: Tue 31 Mar 2026 19:36:57 +0000
Files and hashes: 1: GNXPyKr1F7B20fycLmX2kUNdOl8.crl (hash: XDgZroOAma+i/6x/C1gMXaox1sX/Re9qa0hPM7nqd+s=)
2: 36F0A6E6370811ECA61C8B38C4F9AE02.roa (hash: 9sxsLCohbrBBuOHRRUIEDZ6mWAhiElHi4Y+R/2Te8q4=)
3: 1584607CF14511ECA1AE5F4EC4F9AE02.roa (hash: POm408iE+nAwo8TdURTFaonfBCRS6Twa2e9BS7lBMnI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl
rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:36:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2585 (0xa19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E0AC, serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F
Validity
Not Before: Mar 24 19:36:57 2026 GMT
Not After : Mar 31 19:36:57 2026 GMT
Subject: CN=69c2e7da-7e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:14:8a:22:bd:f3:2f:eb:a3:a8:87:9f:0b:d3:
6d:48:68:09:07:54:62:42:76:fe:dc:3b:7a:24:98:
8c:1c:ff:88:b2:e1:be:f9:93:91:7e:b9:44:af:d5:
7c:8a:ba:51:0f:67:b7:6a:38:a2:70:24:af:c3:85:
b9:bd:ff:d7:65:1e:39:46:4f:c5:c1:a8:55:32:77:
b0:de:4b:78:55:86:c5:10:41:66:ec:f2:89:f6:b9:
ce:46:22:f4:8d:e5:77:69:75:9a:ee:9a:2c:3e:ec:
71:b0:24:9d:aa:04:d3:f8:51:ce:01:a0:16:c2:92:
74:07:1f:6b:c3:b5:91:3d:63:8a:f7:6d:a3:0e:0d:
52:a2:e2:52:03:80:6b:5e:7d:70:08:eb:9a:31:08:
65:bb:ae:c2:f1:f6:a7:08:80:57:9d:8f:ba:45:02:
d0:f9:c5:35:18:d6:74:92:39:9c:1c:f7:29:a0:37:
3e:67:56:59:3b:55:d2:ef:ef:9d:de:5b:da:27:f3:
ad:b9:39:9a:5d:95:5a:d9:bb:cc:fb:3a:be:e3:26:
a7:f6:f2:e6:99:24:93:86:77:bb:8f:64:1b:48:3b:
39:1d:c2:34:42:fc:a5:35:45:27:65:61:ef:72:4e:
44:2e:43:49:ac:3d:90:22:2a:09:ee:bb:ab:4f:fb:
fa:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3A:12:CD:FD:78:F1:F6:9E:34:F5:40:96:7E:86:0D:62:93:9E:8D
X509v3 Authority Key Identifier:
keyid:18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:2d:14:85:01:58:bb:69:4e:1c:d6:db:82:97:56:55:31:2c:
5e:f3:9b:53:b0:0a:7a:9d:ad:46:cb:c7:b5:bd:a7:15:c2:76:
df:4d:1d:bb:58:7d:c4:e5:62:2a:ae:da:71:fd:8c:85:3d:be:
8c:26:34:09:35:a0:79:c2:f6:7d:52:6e:80:b6:4c:6f:27:3b:
d9:e4:55:f8:fa:39:ad:47:db:0a:6e:0d:3a:ed:92:82:17:e4:
3c:2a:4b:4c:00:d7:32:3b:b5:cb:a0:42:28:70:66:db:cf:e7:
e5:4d:4e:02:a4:95:e1:29:81:97:ea:a5:49:70:f4:c6:25:33:
e5:b8:06:dc:09:11:99:35:3b:67:12:64:ea:e4:c2:7d:fc:cd:
7c:a2:0d:f5:1a:6a:80:e3:2c:eb:b5:08:b2:11:cb:3f:de:9e:
c9:71:63:e4:a1:fc:44:e8:d6:02:91:1c:0f:fe:40:90:6d:f5:
e0:bb:60:06:a5:cd:fb:83:79:fd:c8:02:ef:0a:fe:c4:fd:94:
60:f3:f4:bd:21:47:69:3d:6d:1e:b8:87:8e:ec:4a:a9:c5:71:
96:b7:40:69:c2:e0:4a:a4:4c:07:75:4a:55:d6:32:43:8e:25:
a4:89:88:3e:4c:e1:2c:e5:0a:40:a1:ce:7c:32:a1:2b:e0:10:
bd:c9:12:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:11:18 2026 by rpki-client