
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft
File: Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft (raw, json)
Hash identifier: rnntMquMjKgA7b8FScKpOPXPpZ7rE9RWUbejEbnrFUs=
Subject key identifier: EE:6F:B8:E7:13:87:4C:E1:D4:DA:35:E0:AE:33:15:83:9F:B7:C6:89
Authority key identifier: 1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99
Certificate issuer: /CN=A914FC2C/serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99
Certificate serial: 0449
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft
Manifest number: 0430
Signing time: Mon 21 Sep 2026 00:04:59 +0000
Manifest this update: Mon 21 Sep 2026 00:04:58 +0000
Manifest next update: Mon 28 Sep 2026 00:04:58 +0000
Files and hashes: 1: Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl (hash: hXctE0UNPfecGqgYgvD3K1A8jGxQrMZo9NrgFd4wDBk=)
2: 6E32028AD48511EF8239D526C4F9AE02.roa (hash: Kn3RxDk3qhm1BoA1PXfblo/JTZSCcatO617eVns4pg0=)
3: F6542C72C53511ECA64F3010C4F9AE02.roa (hash: jJu8AXToVSwmPXjvxRWlorAWWupdkIcDt1NMIoSlpMQ=)
4: F6D63384C53511ECA64F3010C4F9AE02.roa (hash: 1bYkzomJmZpRc+K7ziy2g69pmgRMlSXIQoUyRXbC0j0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl
rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 00:04:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1097 (0x449)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914FC2C, serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99
Validity
Not Before: Sep 21 00:04:58 2026 GMT
Not After : Sep 28 00:04:58 2026 GMT
Subject: CN=6ab074ab-0e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:30:88:51:96:e1:49:02:da:b8:15:e0:94:4d:
e1:1e:c0:dd:67:1e:b0:2d:5b:1b:0b:77:07:4c:fc:
47:5b:a3:7a:58:5d:5e:8e:e1:c8:02:9f:6b:1e:ba:
8d:0d:9f:d7:7b:d9:12:40:f4:4a:6c:4e:19:20:ca:
36:91:0b:87:3d:6d:9c:74:e9:8e:ad:06:0f:cc:0e:
5b:98:cf:2b:11:f0:1d:4d:be:95:4d:29:31:44:6d:
66:aa:59:fa:f5:62:0a:9b:eb:b9:8f:24:e8:f4:92:
3d:14:aa:bf:d5:46:5a:71:bc:a7:69:74:d8:d7:18:
d4:4a:14:41:af:c0:56:14:90:70:d9:19:d5:ed:9f:
f1:00:c8:19:eb:ac:77:c9:83:cb:58:98:26:b6:4b:
6d:dc:c9:78:82:e4:40:15:18:c4:52:98:27:32:24:
3a:15:54:17:eb:4b:2f:d7:b3:bb:0e:4a:79:56:11:
f0:01:db:f0:c9:09:0c:a9:a5:30:58:7d:1e:a2:75:
25:c3:e0:ea:0c:e9:f7:4c:e0:54:90:de:8a:c3:3b:
a9:71:d1:bc:28:d0:a2:14:6c:d4:9d:46:fa:48:df:
16:b0:3d:a3:d7:e9:69:42:fb:7a:a5:ea:47:45:98:
11:3d:96:8b:2d:d9:02:ea:0c:14:a7:68:39:b0:40:
e2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:6F:B8:E7:13:87:4C:E1:D4:DA:35:E0:AE:33:15:83:9F:B7:C6:89
X509v3 Authority Key Identifier:
keyid:1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:f6:92:27:aa:97:8f:61:e7:34:c3:14:eb:aa:b3:10:98:ac:
ef:68:b3:a8:1b:05:4b:ae:d7:17:7f:e1:24:85:07:51:e3:bf:
60:36:ef:39:e4:7d:7b:ae:d6:8d:ca:95:d1:14:2f:bf:7f:41:
73:d2:db:57:c2:84:c6:ad:56:2a:cd:ce:14:72:b1:d1:07:57:
44:b8:ce:c1:22:63:53:28:58:10:5a:f3:90:25:c3:5c:89:69:
73:2f:38:6c:14:19:a5:c0:1f:d0:3f:45:5a:35:1c:1b:5f:92:
69:f2:6b:38:ad:e1:b7:6f:7a:3a:4b:e7:7e:73:8b:80:3d:9f:
58:dc:ce:d7:8d:19:28:55:d2:77:e2:b4:09:77:76:9d:98:fe:
80:ba:40:f3:f3:7f:67:fe:af:7e:8f:76:fc:d1:4d:97:b1:61:
1f:11:98:59:c2:13:5d:2b:2a:56:72:39:7b:9c:6a:4a:24:8f:
b8:a5:18:a1:1a:fc:26:66:c4:72:e3:a9:36:1e:07:40:48:80:
ac:f2:e5:4d:94:16:42:5b:ad:3a:95:a9:7d:23:aa:58:e7:d5:
e8:8c:40:c6:41:15:2a:87:32:a1:e1:d8:8f:3c:e7:b5:bd:7f:
0a:96:a8:eb:cb:ba:c0:4b:f5:49:06:df:67:2b:95:ea:73:79:
10:f5:9f:d5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEZDMkMxMTAvBgNVBAUTKDFBRDlCRDlEQzc3MzE1QkQxMDJEQUY1QUE5RjkyNTY2
QjJDMkZCOTkwHhcNMjYwOTIxMDAwNDU4WhcNMjYwOTI4MDAwNDU4WjAYMRYwFAYD
VQQDEw02YWIwNzRhYi0wZTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2jCIUZbhSQLauBXglE3hHsDdZx6wLVsbC3cHTPxHW6N6WF1ejuHIAp9rHrqN
DZ/Xe9kSQPRKbE4ZIMo2kQuHPW2cdOmOrQYPzA5bmM8rEfAdTb6VTSkxRG1mqln6
9WIKm+u5jyTo9JI9FKq/1UZacbynaXTY1xjUShRBr8BWFJBw2RnV7Z/xAMgZ66x3
yYPLWJgmtktt3Ml4guRAFRjEUpgnMiQ6FVQX60sv17O7Dkp5VhHwAdvwyQkMqaUw
WH0eonUlw+DqDOn3TOBUkN6KwzupcdG8KNCiFGzUnUb6SN8WsD2j1+lpQvt6pepH
RZgRPZaLLdkC6gwUp2g5sEDihwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO5vuOcT
h0zh1No14K4zFYOft8aJMB8GA1UdIwQYMBaAFBrZvZ3HcxW9EC2vWqn5JWaywvuZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkMyQy9CMDRFOTE5Q0M1
MzMxMUVDOTZERjMxMEZDNEY5QUUwMi9HdG05bmNkekZiMFFMYTlhcWZrbFpyTEMt
NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0d0bTluY2R6RmIwUUxhOWFxZmtsWnJMQy01ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RkMyQy9CMDRFOTE5Q0M1MzMxMUVDOTZERjMxMEZDNEY5QUUwMi9HdG05bmNkekZi
MFFMYTlhcWZrbFpyTEMtNWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAL/aSJ6qXj2HnNMMU66qzEJis72izqBsFS67XF3/hJIUHUeO/YDbvOeR9e67W
jcqV0RQvv39Bc9LbV8KExq1WKs3OFHKx0QdXRLjOwSJjUyhYEFrzkCXDXIlpcy84
bBQZpcAf0D9FWjUcG1+SafJrOK3ht296OkvnfnOLgD2fWNzO140ZKFXSd+K0CXd2
nZj+gLpA8/N/Z/6vfo92/NFNl7FhHxGYWcITXSsqVnI5e5xqSiSPuKUYoRr8JmbE
cuOpNh4HQEiArPLlTZQWQlutOpWpfSOqWOfV6IxAxkEVKocyoeHYjzzntb1/Cpao
68u6wEv1SQbfZyuV6nN5EPWf1Q==
-----END CERTIFICATE-----
Generated at Mon Sep 21 16:28:27 2026 by rpki-client