
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft
File: GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft (raw, json)
Hash identifier: YvloOGzSGHfYkn7xqBoNtv8Dpylm8bCrr0tRfnIQ/iA=
Subject key identifier: FF:36:AB:FC:5D:63:9C:C9:DD:66:51:21:4F:C4:E5:1B:23:A2:56:A8
Authority key identifier: 19:48:CC:14:F3:0E:D8:3C:AA:52:C8:EC:4B:08:C4:4C:A8:3A:62:9E
Certificate issuer: /CN=A917C615/serialNumber=1948CC14F30ED83CAA52C8EC4B08C44CA83A629E
Certificate serial: 0D33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUjMFPMO2DyqUsjsSwjETKg6Yp4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft
Manifest number: 0D16
Signing time: Thu 16 Apr 2026 18:04:22 +0000
Manifest this update: Thu 16 Apr 2026 18:04:21 +0000
Manifest next update: Thu 23 Apr 2026 18:04:21 +0000
Files and hashes: 1: GUjMFPMO2DyqUsjsSwjETKg6Yp4.crl (hash: rmEALOvP3T4bPQgz+r4P1p8kki7vy+wCZJ9/robSHG4=)
2: A0632940737D11F091340126C4F9AE02.roa (hash: jgDnyohF39lqxw7mpQvIsUiCStGHZCXanpLSjS5jMXg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.crl
rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUjMFPMO2DyqUsjsSwjETKg6Yp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3379 (0xd33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C615, serialNumber=1948CC14F30ED83CAA52C8EC4B08C44CA83A629E
Validity
Not Before: Apr 16 18:04:21 2026 GMT
Not After : Apr 23 18:04:21 2026 GMT
Subject: CN=69e124a5-1b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c9:e2:1c:91:30:f8:19:23:be:29:ed:b0:86:
ed:eb:1a:da:89:a2:53:3c:01:b6:d3:ad:36:ed:d7:
3b:4e:3a:6f:4e:cf:24:53:b7:f3:c3:1d:ff:c3:f9:
d8:ca:b5:ab:fe:99:a2:ec:66:13:79:b7:0d:74:ad:
35:8b:88:4d:97:3f:58:98:cc:9f:f8:90:85:ca:24:
64:27:62:6e:e4:2a:10:f0:95:f5:6a:53:51:8b:f5:
3a:b4:66:a5:aa:6a:14:32:f1:23:10:b3:9d:f6:cb:
54:40:63:ea:01:ed:a3:88:49:49:bb:07:d9:f0:6f:
97:f6:47:9e:08:43:93:49:ef:9a:9c:3c:46:30:7b:
3c:ca:3c:13:6f:aa:36:03:33:3d:b5:61:97:10:9e:
1c:bf:ee:71:60:70:8b:d4:b7:1f:f8:b8:54:38:20:
4d:6a:65:f7:b0:da:8c:5f:d5:8d:44:02:3a:73:3d:
41:a2:2e:c0:c3:7a:7d:7a:f0:5e:f8:2a:2f:51:6c:
79:3d:7a:77:ad:03:f7:85:b9:52:7a:3f:17:ce:96:
d4:01:48:fb:0b:18:61:c1:1d:52:e0:76:28:95:0c:
16:d6:37:5f:8d:9a:e2:9d:05:78:0e:a4:bc:df:e4:
c8:68:10:c3:c6:65:c2:14:ec:14:73:4b:93:6d:61:
e8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:36:AB:FC:5D:63:9C:C9:DD:66:51:21:4F:C4:E5:1B:23:A2:56:A8
X509v3 Authority Key Identifier:
keyid:19:48:CC:14:F3:0E:D8:3C:AA:52:C8:EC:4B:08:C4:4C:A8:3A:62:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUjMFPMO2DyqUsjsSwjETKg6Yp4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:c5:3c:15:c9:21:0d:ea:44:cf:40:4a:e8:2a:48:33:25:02:
92:c3:c9:9b:8a:19:a5:e8:35:08:41:f7:11:c8:38:05:1b:9d:
a9:63:93:ec:f1:dd:45:ed:9e:f3:49:bf:19:53:1d:15:14:af:
1e:65:f5:e6:f9:c2:3b:c6:8b:d1:1b:6d:71:be:67:72:77:d2:
32:37:90:88:ef:d3:5c:e9:d6:45:63:ac:bb:23:03:24:ac:34:
98:bb:ce:1a:c8:64:92:9e:4b:e7:8e:36:94:32:7d:fc:6f:86:
ac:d8:a7:b8:d9:8f:8d:4f:15:b1:70:de:b1:29:2f:0c:50:02:
35:21:b4:3f:12:db:59:dc:cc:cf:a5:db:2f:62:6d:4d:ba:b0:
72:00:b2:c7:0f:4f:d9:df:38:46:9a:86:bc:c5:fa:29:85:2b:
62:a8:18:d7:2a:f2:94:bf:6e:d9:cb:00:ec:65:01:71:4f:d7:
cf:40:9a:0c:ac:72:78:28:e7:a8:cc:dc:9d:52:a1:96:41:75:
c9:68:b4:dc:bb:2c:22:ea:4a:83:9e:7d:b1:74:12:05:a0:df:
5c:29:01:e2:e9:cd:68:28:1f:b8:b5:47:c4:c0:4a:96:e9:88:
8b:c8:01:e5:84:f1:bf:8f:13:48:a1:25:df:40:32:a3:ca:c4:
3e:1b:59:cc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDTMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0M2MTUxMTAvBgNVBAUTKDE5NDhDQzE0RjMwRUQ4M0NBQTUyQzhFQzRCMDhDNDRD
QTgzQTYyOUUwHhcNMjYwNDE2MTgwNDIxWhcNMjYwNDIzMTgwNDIxWjAYMRYwFAYD
VQQDEw02OWUxMjRhNS0xYjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArMniHJEw+BkjvintsIbt6xraiaJTPAG206027dc7TjpvTs8kU7fzwx3/w/nY
yrWr/pmi7GYTebcNdK01i4hNlz9YmMyf+JCFyiRkJ2Ju5CoQ8JX1alNRi/U6tGal
qmoUMvEjELOd9stUQGPqAe2jiElJuwfZ8G+X9keeCEOTSe+anDxGMHs8yjwTb6o2
AzM9tWGXEJ4cv+5xYHCL1Lcf+LhUOCBNamX3sNqMX9WNRAI6cz1Boi7Aw3p9evBe
+CovUWx5PXp3rQP3hblSej8XzpbUAUj7CxhhwR1S4HYolQwW1jdfjZrinQV4DqS8
3+TIaBDDxmXCFOwUc0uTbWHoDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP82q/xd
Y5zJ3WZRIU/E5RsjolaoMB8GA1UdIwQYMBaAFBlIzBTzDtg8qlLI7EsIxEyoOmKe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzYxNS80MjAwQzlFNjAw
NkMxMUVBQTM2M0MyNjRDNEY5QUUwMi9HVWpNRlBNTzJEeXFVc2pzU3dqRVRLZzZZ
cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dVak1GUE1PMkR5cVVzanNTd2pFVEtnNllwNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QzYxNS80MjAwQzlFNjAwNkMxMUVBQTM2M0MyNjRDNEY5QUUwMi9HVWpNRlBNTzJE
eXFVc2pzU3dqRVRLZzZZcDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfcU8FckhDepEz0BK6CpIMyUCksPJm4oZpeg1CEH3Ecg4BRudqWOT7PHdRe2e
80m/GVMdFRSvHmX15vnCO8aL0Rttcb5ncnfSMjeQiO/TXOnWRWOsuyMDJKw0mLvO
Gshkkp5L5442lDJ9/G+GrNinuNmPjU8VsXDesSkvDFACNSG0PxLbWdzMz6XbL2Jt
TbqwcgCyxw9P2d84RpqGvMX6KYUrYqgY1yrylL9u2csA7GUBcU/Xz0CaDKxyeCjn
qMzcnVKhlkF1yWi03LssIupKg559sXQSBaDfXCkB4unNaCgfuLVHxMBKlumIi8gB
5YTxv48TSKEl30Ayo8rEPhtZzA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:02:12 2026 by rpki-client