
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft
File: GNXPyKr1F7B20fycLmX2kUNdOl8.mft (raw, json)
Hash identifier: /hvftSo7svwl9uLGxBWDHf1FonfGkcXG/Y3n5omnymM=
Subject key identifier: 97:8E:85:1C:BF:C9:64:D5:B7:53:B0:01:63:6B:79:52:FD:84:74:EC
Authority key identifier: 18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F
Certificate issuer: /CN=A917E0AC/serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F
Certificate serial: 0A76
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft
Manifest number: 0A62
Signing time: Tue 22 Sep 2026 19:28:37 +0000
Manifest this update: Tue 22 Sep 2026 19:28:37 +0000
Manifest next update: Tue 29 Sep 2026 19:28:37 +0000
Files and hashes: 1: GNXPyKr1F7B20fycLmX2kUNdOl8.crl (hash: e50S/wUVgLMNfh6hTUDpZioU64asGJ73OP/sJAb5YH0=)
2: 1584607CF14511ECA1AE5F4EC4F9AE02.roa (hash: POm408iE+nAwo8TdURTFaonfBCRS6Twa2e9BS7lBMnI=)
3: 36F0A6E6370811ECA61C8B38C4F9AE02.roa (hash: 9sxsLCohbrBBuOHRRUIEDZ6mWAhiElHi4Y+R/2Te8q4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl
rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 19:28:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2678 (0xa76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E0AC, serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F
Validity
Not Before: Sep 22 19:28:37 2026 GMT
Not After : Sep 29 19:28:37 2026 GMT
Subject: CN=6ab2d6e5-efd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:cb:0c:8b:97:ad:9b:0e:54:b2:0e:7f:13:43:
26:f1:45:89:4f:94:fc:97:1a:98:13:72:ec:6d:5a:
fb:97:31:f3:78:3f:2b:20:1e:ea:fa:37:3f:53:a3:
f3:eb:9c:5c:57:7b:76:96:9a:80:78:f8:63:eb:e9:
c9:fb:d9:bd:f4:45:5d:dd:50:2f:45:a1:9f:30:9b:
6c:0d:74:6d:42:ba:50:17:81:44:91:0c:9f:2b:36:
00:37:a3:bc:d8:16:43:d5:a1:3d:76:52:10:6e:cd:
50:89:45:a4:f8:60:0a:17:dd:8d:2b:38:07:00:ea:
00:15:c6:05:04:28:e4:71:e7:1e:e5:37:71:8f:96:
6d:fb:6c:4b:2a:1d:eb:7f:96:e1:2d:e3:bb:cf:f3:
a2:c1:1c:20:77:ec:4c:d1:28:d9:d1:a3:dd:77:69:
82:94:95:34:aa:bb:95:2c:b4:be:51:20:cd:f5:5e:
d7:af:9a:e1:dc:57:27:72:29:95:5f:25:f5:74:9f:
50:d1:0b:e2:0f:7d:fb:df:06:08:a0:31:0c:b2:15:
17:bd:bb:b1:44:a6:82:64:2e:42:c0:0d:30:f5:22:
28:93:df:f9:c1:de:45:1e:53:ea:8e:46:1e:5a:85:
00:74:eb:ea:dd:76:3e:1b:7d:fb:3b:84:3f:a3:7a:
ed:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8E:85:1C:BF:C9:64:D5:B7:53:B0:01:63:6B:79:52:FD:84:74:EC
X509v3 Authority Key Identifier:
keyid:18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:3c:88:18:2a:bc:cd:ca:19:2a:48:f0:4a:dd:b9:df:80:9b:
52:3e:b4:9e:43:44:27:7e:ef:66:a4:00:93:b2:ba:82:70:a6:
38:e9:d1:91:ac:9e:a5:3e:fa:b5:8a:8a:4c:7b:af:ac:e8:61:
87:9b:cb:8b:76:d2:9c:88:17:0b:4b:17:8f:22:c9:40:b9:4d:
2c:13:ef:bb:6d:6f:fc:cc:5e:07:23:d6:22:0e:9f:15:99:f9:
b7:14:59:a1:bc:29:8e:9a:81:31:e5:b8:41:b8:28:24:ba:c1:
bc:f4:ae:2a:57:b6:76:ea:ee:f7:d0:fc:48:5e:2b:2e:04:ac:
8c:6b:7e:f7:f3:11:10:67:a1:fd:7a:95:fe:bd:5c:c9:6d:f3:
ad:14:61:4e:60:a1:d1:bc:c9:92:a4:86:82:46:cd:51:00:63:
44:5e:b8:eb:4e:cf:4d:4b:ea:8e:21:10:25:1e:08:20:ba:24:
a7:b3:01:f4:58:d4:5e:af:6f:f6:79:33:d5:24:45:3f:bc:41:
5c:9e:70:7c:c8:b1:3e:2f:f9:33:e1:1c:92:c8:aa:67:4f:b0:
5b:10:d5:8c:82:16:c6:ac:cb:a7:be:90:f4:e5:1b:c3:e0:6e:
36:4d:d4:56:5b:51:eb:c9:7d:14:db:8e:88:78:0e:4e:ea:1f:
ea:27:ad:f7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCnYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0UwQUMxMTAvBgNVBAUTKDE4RDVDRkM4QUFGNTE3QjA3NkQxRkM5QzJFNjVGNjkx
NDM1RDNBNUYwHhcNMjYwOTIyMTkyODM3WhcNMjYwOTI5MTkyODM3WjAYMRYwFAYD
VQQDEw02YWIyZDZlNS1lZmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5MsMi5etmw5Usg5/E0Mm8UWJT5T8lxqYE3LsbVr7lzHzeD8rIB7q+jc/U6Pz
65xcV3t2lpqAePhj6+nJ+9m99EVd3VAvRaGfMJtsDXRtQrpQF4FEkQyfKzYAN6O8
2BZD1aE9dlIQbs1QiUWk+GAKF92NKzgHAOoAFcYFBCjkcece5Tdxj5Zt+2xLKh3r
f5bhLeO7z/OiwRwgd+xM0SjZ0aPdd2mClJU0qruVLLS+USDN9V7Xr5rh3FcncimV
XyX1dJ9Q0QviD3373wYIoDEMshUXvbuxRKaCZC5CwA0w9SIok9/5wd5FHlPqjkYe
WoUAdOvq3XY+G337O4Q/o3rtzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJeOhRy/
yWTVt1OwAWNreVL9hHTsMB8GA1UdIwQYMBaAFBjVz8iq9RewdtH8nC5l9pFDXTpf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBQy82RUEzOUMwNjk0
MkYxMUVBQjE2NDUyN0VDNEY5QUUwMi9HTlhQeUtyMUY3QjIwZnljTG1YMmtVTmRP
bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dOWFB5S3IxRjdCMjBmeWNMbVgya1VOZE9sOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RTBBQy82RUEzOUMwNjk0MkYxMUVBQjE2NDUyN0VDNEY5QUUwMi9HTlhQeUtyMUY3
QjIwZnljTG1YMmtVTmRPbDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATTyIGCq8zcoZKkjwSt2534CbUj60nkNEJ37vZqQAk7K6gnCmOOnRkayepT76
tYqKTHuvrOhhh5vLi3bSnIgXC0sXjyLJQLlNLBPvu21v/MxeByPWIg6fFZn5txRZ
obwpjpqBMeW4QbgoJLrBvPSuKle2duru99D8SF4rLgSsjGt+9/MREGeh/XqV/r1c
yW3zrRRhTmCh0bzJkqSGgkbNUQBjRF64607PTUvqjiEQJR4IILokp7MB9FjUXq9v
9nkz1SRFP7xBXJ5wfMixPi/5M+EcksiqZ0+wWxDVjIIWxqzLp76Q9OUbw+BuNk3U
VltR68l9FNuOiHgOTuof6iet9w==
-----END CERTIFICATE-----
Generated at Wed Sep 23 04:09:41 2026 by rpki-client