
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft
File: GNJBabAlTqfymUPFBeK1kxr6uSY.mft (raw, json)
Hash identifier: +p7UGB7Qnjhp9tquGOGEX5Sr1ZkChDIn1ku2IGFrC4g=
Subject key identifier: 6F:7F:49:FA:A8:4C:2B:29:E4:D4:EF:93:0C:48:29:59:B4:82:A3:23
Authority key identifier: 18:D2:41:69:B0:25:4E:A7:F2:99:43:C5:05:E2:B5:93:1A:FA:B9:26
Certificate issuer: /CN=A917C44C/serialNumber=18D24169B0254EA7F29943C505E2B5931AFAB926
Certificate serial: 04AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNJBabAlTqfymUPFBeK1kxr6uSY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft
Manifest number: 04A6
Signing time: Sun 20 Sep 2026 23:43:43 +0000
Manifest this update: Sun 20 Sep 2026 23:43:43 +0000
Manifest next update: Sun 27 Sep 2026 23:43:43 +0000
Files and hashes: 1: GNJBabAlTqfymUPFBeK1kxr6uSY.crl (hash: 4p9/dybg2lUscpu8h2NvzYxbUZEzOCE3GQCHodflm+s=)
2: DAF4B31C983E11ECA0050128C4F9AE02.roa (hash: 3v0l+mNUK1QMbnnyeVFXpatXq2cbTwunHprjgz1Y/Vw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.crl
rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNJBabAlTqfymUPFBeK1kxr6uSY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 23:43:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1198 (0x4ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C44C, serialNumber=18D24169B0254EA7F29943C505E2B5931AFAB926
Validity
Not Before: Sep 20 23:43:43 2026 GMT
Not After : Sep 27 23:43:43 2026 GMT
Subject: CN=6ab06faf-5d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:34:73:b1:8f:57:0e:02:91:80:ec:a3:f3:2b:
c4:86:5a:6c:49:f6:15:4a:5d:1b:40:02:cf:66:c3:
57:7d:52:ef:5e:4b:a2:8d:84:b7:cc:3d:f1:3a:26:
05:f7:e4:de:64:3b:ef:e8:de:d0:bb:57:c8:e2:ea:
87:47:7f:8e:c5:cd:5b:10:10:75:ea:31:93:0a:02:
be:0a:0a:af:fb:2f:ce:94:89:cb:9b:ae:e0:61:21:
ab:e6:81:76:d7:30:6e:e1:a2:80:0a:85:ff:ae:96:
97:66:54:8a:a7:03:6e:99:0d:10:62:eb:03:07:a2:
75:a9:59:a6:47:8b:96:e9:2a:b1:c9:97:8a:20:4c:
65:87:55:25:fb:91:85:0a:bd:3e:79:18:b1:70:f7:
5a:24:3d:f5:97:af:db:4b:ac:22:45:ac:33:01:be:
be:95:a6:3e:e8:91:5e:75:54:57:e9:62:3a:db:27:
a4:19:cb:07:73:1f:7e:cb:8c:9e:fc:63:3e:9b:fc:
d7:b5:d7:57:52:7d:24:e4:aa:f2:44:75:ba:82:57:
5b:b3:59:3d:84:f0:d6:bd:2d:3f:44:6a:c2:3e:ff:
2e:7f:71:5a:13:5f:71:f4:a3:57:f8:d9:b2:4e:ae:
d6:e3:ed:b8:8b:a4:45:f9:ae:97:a2:9c:da:d3:fc:
2a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:7F:49:FA:A8:4C:2B:29:E4:D4:EF:93:0C:48:29:59:B4:82:A3:23
X509v3 Authority Key Identifier:
keyid:18:D2:41:69:B0:25:4E:A7:F2:99:43:C5:05:E2:B5:93:1A:FA:B9:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNJBabAlTqfymUPFBeK1kxr6uSY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:6d:76:f8:33:8b:f1:d2:24:1c:87:08:0e:d1:df:65:cd:2b:
a3:c8:3d:11:0f:89:32:01:f6:77:3d:40:53:0e:bc:79:f6:7f:
6c:b7:1f:02:c1:5c:cd:be:c2:27:35:71:d6:c3:16:bd:3d:11:
26:de:b9:f0:b5:99:56:1a:3b:3e:c4:6c:8f:fe:aa:77:80:90:
0d:a0:51:9a:9c:bc:b0:7f:e3:83:95:aa:23:3f:1e:e2:97:4f:
0d:81:19:f8:25:82:76:a2:9e:5b:9d:a1:07:08:16:1d:fb:f7:
44:7c:ea:6c:77:80:63:1f:58:37:75:2c:a1:4c:b4:bb:d2:19:
84:ff:f6:00:d0:f0:8c:dd:0a:f7:54:23:b0:1e:11:c7:ca:a1:
ca:23:76:a8:59:a1:7e:f2:e1:44:28:97:ce:b8:13:a6:23:2f:
14:88:0a:df:a6:fe:32:2f:0d:5a:5b:11:56:ff:80:da:ba:13:
ac:4b:fb:35:10:40:f5:68:1b:d4:8a:ab:21:02:d5:10:97:f3:
9c:72:2a:58:79:62:19:80:fd:47:16:27:5a:7c:3a:e5:22:c0:
55:74:9e:f1:2a:81:03:47:ed:40:26:5d:4f:60:21:af:a9:b0:
81:03:7f:65:7d:bd:ad:52:73:1d:04:47:92:51:81:ff:f9:3d:
54:88:99:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:56:45 2026 by rpki-client