
$ rpki-client -vvf rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft
File: Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft (raw, json)
Hash identifier: 6qQDHAXo1zmG1z+QUCHZPGtUAw8s8YYow341xTiPBMw=
Subject key identifier: CE:7F:12:A3:0D:D3:E7:6F:CA:9B:F8:99:BD:F5:C5:F5:5D:A2:73:8F
Authority key identifier: 1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99
Certificate issuer: /CN=A914FC2C/serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99
Certificate serial: 03D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft
Manifest number: 03C4
Signing time: Sun 01 Mar 2026 01:28:05 +0000
Manifest this update: Sun 01 Mar 2026 01:28:05 +0000
Manifest next update: Sun 08 Mar 2026 01:28:05 +0000
Files and hashes: 1: Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl (hash: axZKmVFGfwmbCjwoEkjblyO4mSwnwqA61ZzUNeB7F9w=)
2: F6D63384C53511ECA64F3010C4F9AE02.roa (hash: OVxLUiCstDCJM1i8OMKxBPVWt9kugvVdd+GEnlwY4Bo=)
3: F6542C72C53511ECA64F3010C4F9AE02.roa (hash: p0+cMHyUatjT2WLso8zM+Qkj3qxalubJRFVPjXCEC7c=)
4: 6E32028AD48511EF8239D526C4F9AE02.roa (hash: AA5WeVvXVNFXQwzizIn+RSDzp541QHk6IiOY/0z6xeo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl
rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:28:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 983 (0x3d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914FC2C, serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99
Validity
Not Before: Mar 1 01:28:05 2026 GMT
Not After : Mar 8 01:28:05 2026 GMT
Subject: CN=69a39625-fcfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2c:af:30:e2:9b:9c:90:b5:1e:7c:91:79:0c:
2a:d7:7e:b7:ce:4a:08:91:21:83:76:71:87:21:c9:
ea:fa:e0:73:02:6d:db:d4:08:7d:0e:38:65:03:78:
e1:10:16:dd:19:70:30:40:3d:fd:d6:ea:25:4a:2f:
1f:19:37:a9:1a:45:c9:00:8f:7a:e3:56:7c:69:95:
0e:a1:c4:25:b0:57:5c:d7:c0:a5:fa:6f:e9:44:ce:
c0:6e:05:cc:62:15:fe:9f:08:a7:b3:1d:f2:fa:97:
c2:5a:c0:12:dc:ac:bf:52:9d:ba:27:fc:a7:27:08:
10:90:df:0f:bd:07:83:1f:30:e8:70:66:a0:3d:35:
a6:06:c6:bb:59:65:17:4b:d3:ea:65:ec:2c:f7:49:
7c:04:74:b4:da:96:23:bb:d0:3e:d7:f9:fa:06:1a:
ad:95:21:33:da:f4:d4:cb:37:f3:81:88:d1:20:27:
eb:27:b8:42:71:18:87:7c:59:92:42:f3:af:ae:63:
92:fd:72:fc:51:84:ed:b7:64:4f:74:1b:b4:c6:67:
9e:79:81:94:02:76:81:86:50:cf:50:c3:70:91:c7:
69:3e:77:66:9a:45:0c:d7:5d:00:a4:80:9f:f4:06:
11:c7:fe:cd:26:69:6e:54:6d:99:c8:5d:83:ee:bc:
3b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:7F:12:A3:0D:D3:E7:6F:CA:9B:F8:99:BD:F5:C5:F5:5D:A2:73:8F
X509v3 Authority Key Identifier:
keyid:1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:6d:66:b1:99:23:e2:28:11:f1:74:07:19:63:cc:7f:3b:63:
0a:63:51:5e:ce:72:74:68:94:d8:59:9a:a2:c7:f7:37:64:e1:
cc:14:26:0a:33:37:29:4d:cb:7f:da:de:cf:90:15:aa:b4:22:
45:e6:d7:2c:3e:59:38:59:68:4e:31:84:3c:79:95:5c:2f:97:
13:4a:f6:ce:c6:ed:12:c1:6d:03:89:47:e9:04:7c:ae:2b:6b:
84:a0:4b:35:5b:03:b5:e7:29:cd:f3:7f:e0:3a:44:e8:a3:44:
59:03:e5:05:67:8f:2e:89:71:62:70:58:bc:ff:8c:cb:ee:f7:
c5:30:09:bf:c3:eb:56:d9:47:53:6d:77:de:99:8b:8f:ee:8e:
29:23:61:84:42:90:c5:76:63:7c:63:ec:e7:4b:8e:06:6e:ef:
09:fd:d8:38:bf:a7:ac:4d:f3:97:c1:ed:c2:fe:b5:d5:e5:c0:
d5:6d:34:07:ca:2e:e2:c5:29:4e:33:2d:f3:e5:a3:31:fe:f3:
38:27:9e:4d:1d:81:1e:fa:32:f9:fb:ef:84:5e:d3:ec:6f:8f:
20:e4:eb:ba:fd:db:52:2a:8d:b6:18:0b:44:3e:e3:9d:dc:9a:
e6:40:5c:bd:07:9b:ef:8b:40:27:eb:0f:47:c5:dc:8e:26:54:
72:eb:78:58
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEZDMkMxMTAvBgNVBAUTKDFBRDlCRDlEQzc3MzE1QkQxMDJEQUY1QUE5RjkyNTY2
QjJDMkZCOTkwHhcNMjYwMzAxMDEyODA1WhcNMjYwMzA4MDEyODA1WjAYMRYwFAYD
VQQDDA02OWEzOTYyNS1mY2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqSyvMOKbnJC1HnyReQwq1363zkoIkSGDdnGHIcnq+uBzAm3b1Ah9DjhlA3jh
EBbdGXAwQD391uolSi8fGTepGkXJAI9641Z8aZUOocQlsFdc18Cl+m/pRM7AbgXM
YhX+nwinsx3y+pfCWsAS3Ky/Up26J/ynJwgQkN8PvQeDHzDocGagPTWmBsa7WWUX
S9PqZews90l8BHS02pYju9A+1/n6BhqtlSEz2vTUyzfzgYjRICfrJ7hCcRiHfFmS
QvOvrmOS/XL8UYTtt2RPdBu0xmeeeYGUAnaBhlDPUMNwkcdpPndmmkUM110ApICf
9AYRx/7NJmluVG2ZyF2D7rw7UQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM5/EqMN
0+dvypv4mb31xfVdonOPMB8GA1UdIwQYMBaAFBrZvZ3HcxW9EC2vWqn5JWaywvuZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkMyQy9CMDRFOTE5Q0M1
MzMxMUVDOTZERjMxMEZDNEY5QUUwMi9HdG05bmNkekZiMFFMYTlhcWZrbFpyTEMt
NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0d0bTluY2R6RmIwUUxhOWFxZmtsWnJMQy01ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RkMyQy9CMDRFOTE5Q0M1MzMxMUVDOTZERjMxMEZDNEY5QUUwMi9HdG05bmNkekZi
MFFMYTlhcWZrbFpyTEMtNWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAh21msZkj4igR8XQHGWPMfztjCmNRXs5ydGiU2Fmaosf3N2ThzBQmCjM3KU3L
f9rez5AVqrQiRebXLD5ZOFloTjGEPHmVXC+XE0r2zsbtEsFtA4lH6QR8ritrhKBL
NVsDtecpzfN/4DpE6KNEWQPlBWePLolxYnBYvP+My+73xTAJv8PrVtlHU2133pmL
j+6OKSNhhEKQxXZjfGPs50uOBm7vCf3YOL+nrE3zl8Htwv611eXA1W00B8ou4sUp
TjMt8+WjMf7zOCeeTR2BHvoy+fvvhF7T7G+PIOTruv3bUiqNthgLRD7jndya5kBc
vQeb74tAJ+sPR8XcjiZUcut4WA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:34:05 2026 by rpki-client