
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft
File: GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft (raw, json)
Hash identifier: +2r3jxIsTpuGQSTKCKF2bIaet8q/j6zxq2QX6DMUbpA=
Subject key identifier: 0A:71:47:FF:D8:E8:AE:97:DD:00:1C:81:A5:6D:AB:24:BC:91:31:49
Authority key identifier: 19:48:CC:14:F3:0E:D8:3C:AA:52:C8:EC:4B:08:C4:4C:A8:3A:62:9E
Certificate issuer: /CN=A917C615/serialNumber=1948CC14F30ED83CAA52C8EC4B08C44CA83A629E
Certificate serial: 0D89
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUjMFPMO2DyqUsjsSwjETKg6Yp4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft
Manifest number: 0D6A
Signing time: Fri 18 Sep 2026 18:02:46 +0000
Manifest this update: Fri 18 Sep 2026 18:02:45 +0000
Manifest next update: Fri 25 Sep 2026 18:02:45 +0000
Files and hashes: 1: GUjMFPMO2DyqUsjsSwjETKg6Yp4.crl (hash: 1XuzKZ9HM+Z91yCEHqThIUsdd5pL3GJpe7Mbt5G7NjI=)
2: A0632940737D11F091340126C4F9AE02.roa (hash: XYU/OfbvTvF81SZSB9Dz1TfcctHinmn1NKkNjqg6sxk=)
3: fJnNJysfFnJZhwNg-xYouA3ZQgY.asa (hash: eeRBJjN/rZzzyTGMnMswne4db36QBc0hDwGn8eXvBSg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.crl
rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUjMFPMO2DyqUsjsSwjETKg6Yp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3465 (0xd89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C615, serialNumber=1948CC14F30ED83CAA52C8EC4B08C44CA83A629E
Validity
Not Before: Sep 18 18:02:45 2026 GMT
Not After : Sep 25 18:02:45 2026 GMT
Subject: CN=6aad7cc6-aff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f4:6f:ea:93:88:c2:a9:22:45:12:52:68:05:
7e:34:9e:2a:88:85:c9:c0:90:96:e8:b7:a9:44:9b:
72:0e:2f:80:c4:65:e1:96:30:50:36:a0:95:0d:5f:
b9:6c:66:eb:6d:d7:3e:c3:77:4e:00:fd:45:28:5a:
0c:35:0f:4d:e5:73:74:c3:48:a1:e0:ca:7f:39:06:
ca:49:0e:4a:9a:ee:a7:e7:c7:84:c0:e5:f8:87:3b:
e7:78:bd:e7:84:4c:86:2a:8c:ba:50:c9:69:05:4d:
ff:7d:f0:07:12:e2:27:bc:f4:9c:13:02:f1:6e:85:
0b:37:e8:4f:eb:82:cf:0e:28:ad:0e:02:18:ef:d5:
66:2f:61:14:e4:38:76:02:fa:ca:be:62:f1:d0:4d:
ea:48:16:e7:b8:d3:07:ab:6d:eb:ca:63:05:38:33:
7d:ea:30:e6:e0:1e:7b:df:2d:8d:9d:42:c4:82:a2:
4d:72:a0:f1:d0:98:f3:0a:22:4d:71:28:9e:7b:65:
6d:63:52:7f:db:6d:ca:ed:7b:b9:15:19:39:2c:43:
ee:35:39:9d:f2:69:5b:a5:31:01:a2:77:67:fd:7d:
95:27:17:fa:ee:0e:86:45:12:7e:67:8b:14:b9:5e:
e4:05:d3:ea:a6:1e:89:97:f3:28:0b:63:bd:b4:51:
76:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:71:47:FF:D8:E8:AE:97:DD:00:1C:81:A5:6D:AB:24:BC:91:31:49
X509v3 Authority Key Identifier:
keyid:19:48:CC:14:F3:0E:D8:3C:AA:52:C8:EC:4B:08:C4:4C:A8:3A:62:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUjMFPMO2DyqUsjsSwjETKg6Yp4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:5e:18:d3:a3:9f:7e:a6:98:43:13:89:08:a2:54:83:46:97:
a2:ff:68:50:a5:85:5e:3c:c2:71:20:45:ae:7a:39:17:a5:64:
5c:4f:05:c7:75:27:34:75:c7:8f:4b:83:77:81:6f:fd:bd:93:
38:01:7b:57:d8:7e:5b:1a:a5:8e:56:b9:59:10:b2:e8:a2:ea:
82:6c:0c:9b:13:a7:e8:81:8c:3f:5c:80:58:5d:05:f5:40:73:
15:33:c5:24:1e:a6:07:98:e7:7c:1d:65:b6:ff:98:b6:b4:7e:
24:d1:b2:63:d7:bf:1b:10:37:07:a9:69:c9:fe:10:b5:f3:9b:
36:2f:1b:82:1a:67:01:b8:dd:52:b0:8a:77:d2:b6:50:fe:e4:
a5:f9:39:8c:4e:86:ad:24:3e:80:bd:eb:d4:35:a7:4e:a5:3e:
11:88:fa:f0:9c:e1:9d:b6:83:d0:97:0f:96:87:f0:e1:fa:df:
20:6b:51:a5:fc:8b:dc:ec:ec:1a:75:e2:f2:34:34:2a:18:00:
ff:57:7b:26:2d:01:79:76:b0:38:6c:ff:7c:a4:8b:28:cf:fc:
b7:5a:23:b8:a5:9f:ba:82:ea:85:a7:03:ff:13:bf:bd:b0:f2:
84:df:87:af:fc:5d:df:35:d8:90:1d:82:69:36:e2:e2:a6:0e:
51:e3:9b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 11:20:34 2026 by rpki-client