
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft
File: GW-SdzKT5JVLTZel03rIIKdFwuA.mft (raw, json)
Hash identifier: JWDi0zp9hJQiAAo7F1sitKaG6TEA//On1++dfn/g1Iw=
Subject key identifier: 86:63:F8:8E:F0:04:4B:1E:52:AD:DC:92:80:64:05:A5:81:C4:AC:24
Authority key identifier: 19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0
Certificate issuer: /CN=A917315B/serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
Certificate serial: 0434
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft
Manifest number: 0400
Signing time: Mon 21 Sep 2026 00:23:09 +0000
Manifest this update: Mon 21 Sep 2026 00:23:09 +0000
Manifest next update: Mon 28 Sep 2026 00:23:09 +0000
Files and hashes: 1: GW-SdzKT5JVLTZel03rIIKdFwuA.crl (hash: xMa695Ag6WKnYk80rSpJl6EsytvqevZ3t9ecXJVdDJM=)
2: 583F47C01EB811F18CD447E9213D8C67.roa (hash: Bjk5uPrLqxecopde9+bNQEC9OOCGDwJYP8K8SH4KKPY=)
3: AEF7F896B23511EF99CCD73DC4F9AE02.roa (hash: PC9A/wN78/m5hkQIoyPN7PzUs869VkeVXqkOIXy5YDs=)
4: 6318EE6A194711F193E941873C3D8C67.roa (hash: PRZUDRs/MzrgRRpDt3cUNdwUtV0YnP0Yc80Rieef+EU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl
rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 00:23:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1076 (0x434)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917315B, serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
Validity
Not Before: Sep 21 00:23:09 2026 GMT
Not After : Sep 28 00:23:09 2026 GMT
Subject: CN=6ab078ed-363c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e4:2b:89:b3:56:22:cb:3b:7f:e1:31:c9:dd:
d8:0e:d3:d1:5c:1d:59:2d:a4:ff:96:ac:12:41:fd:
72:de:bf:b2:85:0a:cf:99:2c:4c:c1:08:c9:5f:58:
2f:7c:85:b0:c5:51:d9:ab:50:db:98:05:3c:e3:8d:
3c:98:21:4d:57:ee:fb:2b:8a:a0:33:43:01:2b:43:
61:aa:79:7c:d7:6c:82:58:c0:6a:27:52:ed:dd:f8:
70:2a:5b:0c:7c:ba:04:e5:e1:bf:76:ca:03:6b:72:
ed:c7:77:a5:07:36:6e:62:b3:a2:fe:ec:08:bf:cb:
27:17:51:5a:fe:8c:7c:1c:fe:d3:a9:d0:ef:69:c0:
7a:cf:8f:66:ae:c7:f0:3f:01:a2:0e:c9:30:34:ea:
4b:b4:48:57:34:3c:c4:7b:5a:3a:df:14:d2:55:08:
1d:3d:bd:64:d2:e3:a3:19:40:d4:f3:97:c5:95:d1:
28:97:eb:b5:ed:01:35:3b:09:89:79:92:ea:f3:19:
4c:82:96:53:59:1d:5b:13:29:57:ef:e6:6b:c6:bf:
44:f5:20:2f:18:8f:f0:6c:28:aa:b7:d9:25:f1:8a:
4e:5c:9b:b2:d4:23:1c:46:e4:76:d6:23:07:aa:0a:
82:87:08:97:ba:cb:4f:7f:e5:4e:78:fc:bc:ec:1f:
f0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:63:F8:8E:F0:04:4B:1E:52:AD:DC:92:80:64:05:A5:81:C4:AC:24
X509v3 Authority Key Identifier:
keyid:19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:91:f7:05:32:f9:53:e7:db:9e:6f:37:b6:fb:fd:78:29:f2:
49:2e:c0:e3:56:8b:0f:fd:21:f6:60:c6:d4:d0:4f:90:14:a5:
f8:5e:72:73:22:31:40:b0:cd:c7:63:df:71:24:ca:b3:ff:ea:
42:c4:8e:f0:d0:98:d2:89:c2:b9:86:eb:54:2d:55:07:9b:62:
2f:fb:d6:a1:49:65:f4:25:e7:61:38:55:a7:b1:44:08:b0:82:
bc:50:68:c0:aa:02:57:50:cc:a6:09:08:46:01:c2:ec:e8:17:
d1:93:d1:1c:d3:ec:68:d0:8b:45:f5:fa:17:da:19:db:a9:66:
b4:2c:97:7d:b3:9d:9c:e6:ee:1f:4c:35:c6:3c:a0:bb:4a:fc:
9c:7d:dd:a8:ca:09:70:d7:60:6d:73:d0:98:79:7f:a4:7f:6f:
7d:58:31:e7:94:ac:17:13:c4:1e:ee:61:ce:7c:ee:4d:e6:d1:
a7:10:04:4a:dc:ea:a9:93:d7:e0:eb:43:f9:d3:0e:65:be:e2:
a9:de:1d:59:bd:fd:2d:54:28:52:8c:46:fd:6e:2f:62:84:64:
5b:00:b3:20:43:7a:d8:bf:83:aa:1b:de:20:86:ec:83:d9:65:
2b:39:b8:42:c5:37:25:63:df:d0:01:dc:79:de:2b:8b:13:9e:
03:14:a1:26
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzMxNUIxMTAvBgNVBAUTKDE5NkY5Mjc3MzI5M0U0OTU0QjREOTdBNUQzN0FDODIw
QTc0NUMyRTAwHhcNMjYwOTIxMDAyMzA5WhcNMjYwOTI4MDAyMzA5WjAYMRYwFAYD
VQQDEw02YWIwNzhlZC0zNjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz+QribNWIss7f+Exyd3YDtPRXB1ZLaT/lqwSQf1y3r+yhQrPmSxMwQjJX1gv
fIWwxVHZq1DbmAU84408mCFNV+77K4qgM0MBK0Nhqnl812yCWMBqJ1Lt3fhwKlsM
fLoE5eG/dsoDa3Ltx3elBzZuYrOi/uwIv8snF1Fa/ox8HP7TqdDvacB6z49mrsfw
PwGiDskwNOpLtEhXNDzEe1o63xTSVQgdPb1k0uOjGUDU85fFldEol+u17QE1OwmJ
eZLq8xlMgpZTWR1bEylX7+Zrxr9E9SAvGI/wbCiqt9kl8YpOXJuy1CMcRuR21iMH
qgqChwiXustPf+VOePy87B/wswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIZj+I7w
BEseUq3ckoBkBaWBxKwkMB8GA1UdIwQYMBaAFBlvkncyk+SVS02XpdN6yCCnRcLg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzE1Qi9ENzM1QTNCNEVE
NEIxMUVDQTk1NTM3NzhDNEY5QUUwMi9HVy1TZHpLVDVKVkxUWmVsMDNySUlLZEZ3
dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dXLVNkektUNUpWTFRaZWwwM3JJSUtkRnd1QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MzE1Qi9ENzM1QTNCNEVENEIxMUVDQTk1NTM3NzhDNEY5QUUwMi9HVy1TZHpLVDVK
VkxUWmVsMDNySUlLZEZ3dUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABpH3BTL5U+fbnm83tvv9eCnySS7A41aLD/0h9mDG1NBPkBSl+F5ycyIxQLDN
x2PfcSTKs//qQsSO8NCY0onCuYbrVC1VB5tiL/vWoUll9CXnYThVp7FECLCCvFBo
wKoCV1DMpgkIRgHC7OgX0ZPRHNPsaNCLRfX6F9oZ26lmtCyXfbOdnObuH0w1xjyg
u0r8nH3dqMoJcNdgbXPQmHl/pH9vfVgx55SsFxPEHu5hznzuTebRpxAEStzqqZPX
4OtD+dMOZb7iqd4dWb39LVQoUoxG/W4vYoRkWwCzIEN62L+DqhveIIbsg9llKzm4
QsU3JWPf0AHced4rixOeAxShJg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 10:22:15 2026 by rpki-client