
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft
File: GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft (raw, json)
Hash identifier: 2IBlRzonPUUwdK++JGQcvSOMKuofrpXvGkWmxzClX14=
Subject key identifier: 0C:D9:34:5D:DC:00:67:41:23:5B:8D:7E:29:D5:2F:38:2E:29:5B:25
Authority key identifier: 18:9F:2D:EC:5A:70:3F:7D:6C:FD:5F:96:AA:B5:A2:E8:A8:DD:94:06
Certificate issuer: /CN=A917D472/serialNumber=189F2DEC5A703F7D6CFD5F96AAB5A2E8A8DD9406
Certificate serial: 015A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJ8t7FpwP31s_V-WqrWi6KjdlAY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft
Manifest number: 0155
Signing time: Fri 17 Apr 2026 04:43:09 +0000
Manifest this update: Fri 17 Apr 2026 04:43:08 +0000
Manifest next update: Fri 24 Apr 2026 04:43:08 +0000
Files and hashes: 1: GJ8t7FpwP31s_V-WqrWi6KjdlAY.crl (hash: sapS7/uE8C51ZKKe25gyz/UZC0Ff5ZWd3LAO4w/nocM=)
2: B7FDD0B031E711EF9FBC7372C4F9AE02.roa (hash: TVQSdwEfSaIR1+dTOJsBoZylToFNXJ9xhYYLtuRExiI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.crl
rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJ8t7FpwP31s_V-WqrWi6KjdlAY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:43:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 346 (0x15a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D472, serialNumber=189F2DEC5A703F7D6CFD5F96AAB5A2E8A8DD9406
Validity
Not Before: Apr 17 04:43:08 2026 GMT
Not After : Apr 24 04:43:08 2026 GMT
Subject: CN=69e1ba5c-4be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7b:ff:b8:01:8c:a9:48:8d:59:60:e1:ea:95:
4d:31:6a:79:0e:f8:62:e7:84:1c:6f:9d:03:5f:bc:
f3:71:00:4d:cf:b3:bb:80:42:7b:12:b2:dd:24:29:
5c:cb:57:64:d2:89:04:16:22:11:5a:4b:30:5a:25:
17:ef:5f:3e:be:36:98:5e:e1:ac:e6:fb:8e:2b:25:
42:6b:f7:f2:91:c8:23:ac:55:4c:33:cf:4d:7b:f6:
d9:ab:9c:4a:5d:2a:a8:bd:ca:17:17:24:96:fe:21:
ae:ce:0c:98:14:6e:b3:ee:ee:5e:4b:b9:81:08:54:
eb:fa:b0:c1:d1:4f:d8:d4:f4:fb:29:73:a3:d3:a3:
9e:fe:cd:1f:1a:64:88:8b:b3:be:8c:89:c5:41:03:
28:81:5c:1a:78:ae:d7:36:c4:ec:65:5f:3c:20:03:
38:4d:b6:83:89:bd:2f:0b:7c:ed:01:0f:1a:a7:bf:
48:f7:de:9b:1a:93:4b:cc:c3:b9:d8:6e:06:91:ab:
3c:d4:4f:d4:1a:2b:21:e1:fc:ae:ea:f9:43:4b:4a:
cd:4d:42:5b:96:5c:32:93:cf:18:c5:ad:38:ab:39:
37:3c:2b:8c:59:b3:40:bd:4a:19:4b:af:db:08:fc:
b0:36:f0:87:9b:2a:ce:94:cc:d0:c5:0e:1a:9c:5f:
52:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D9:34:5D:DC:00:67:41:23:5B:8D:7E:29:D5:2F:38:2E:29:5B:25
X509v3 Authority Key Identifier:
keyid:18:9F:2D:EC:5A:70:3F:7D:6C:FD:5F:96:AA:B5:A2:E8:A8:DD:94:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJ8t7FpwP31s_V-WqrWi6KjdlAY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:53:fb:25:ee:b8:b8:d7:4f:23:3d:be:ec:08:ab:7d:a0:26:
53:f5:1b:de:49:9d:0e:5e:df:43:49:ce:cb:09:1b:43:dc:1a:
ee:85:c7:60:4a:d9:4e:5a:3a:10:61:81:f1:f3:1b:bb:d0:2c:
fe:9b:24:9a:c9:c4:d1:33:53:5b:3e:4a:fa:ad:03:29:1d:91:
92:c0:fd:d2:4e:3b:8d:b4:fa:17:5b:f4:d0:96:9c:b5:98:5c:
6e:34:15:f0:cb:85:d5:57:cb:f6:5a:7c:5a:44:68:de:d4:64:
75:04:11:23:57:69:e5:d9:6f:ee:49:60:2e:aa:be:2a:7b:98:
98:bc:5e:b5:1c:2b:75:d3:2e:60:6f:ad:68:49:d9:05:f3:86:
c7:42:13:1a:f9:97:42:2f:d6:1c:88:05:62:bb:21:e5:95:56:
26:19:28:91:2a:21:73:17:fa:d8:b2:d1:7e:f9:3e:6f:7c:44:
39:ed:dc:9b:cd:74:1a:86:b8:9d:cb:4d:ef:be:ed:7d:b8:a8:
5a:c9:c7:b8:12:4f:6c:e7:12:0a:40:54:43:a2:53:6b:99:5c:
82:a5:8b:54:54:29:a7:95:23:a7:c3:97:f4:1c:a6:64:71:a3:
01:bc:b4:31:c3:30:11:ee:f2:4e:62:88:7a:46:61:29:80:8e:
2c:9f:ca:88
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0Q0NzIxMTAvBgNVBAUTKDE4OUYyREVDNUE3MDNGN0Q2Q0ZENUY5NkFBQjVBMkU4
QThERDk0MDYwHhcNMjYwNDE3MDQ0MzA4WhcNMjYwNDI0MDQ0MzA4WjAYMRYwFAYD
VQQDEw02OWUxYmE1Yy00YmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx3v/uAGMqUiNWWDh6pVNMWp5Dvhi54Qcb50DX7zzcQBNz7O7gEJ7ErLdJClc
y1dk0okEFiIRWkswWiUX718+vjaYXuGs5vuOKyVCa/fykcgjrFVMM89Ne/bZq5xK
XSqovcoXFySW/iGuzgyYFG6z7u5eS7mBCFTr+rDB0U/Y1PT7KXOj06Oe/s0fGmSI
i7O+jInFQQMogVwaeK7XNsTsZV88IAM4TbaDib0vC3ztAQ8ap79I996bGpNLzMO5
2G4Gkas81E/UGish4fyu6vlDS0rNTUJbllwyk88Yxa04qzk3PCuMWbNAvUoZS6/b
CPywNvCHmyrOlMzQxQ4anF9SzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAzZNF3c
AGdBI1uNfinVLzguKVslMB8GA1UdIwQYMBaAFBifLexacD99bP1flqq1ouio3ZQG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDQ3Mi8xM0E4RkI0NDMx
RTYxMUVGQUU5RUU0NjBDNEY5QUUwMi9HSjh0N0Zwd1AzMXNfVi1XcXJXaTZLamRs
QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dKOHQ3RnB3UDMxc19WLVdxcldpNktqZGxBWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RDQ3Mi8xM0E4RkI0NDMxRTYxMUVGQUU5RUU0NjBDNEY5QUUwMi9HSjh0N0Zwd1Az
MXNfVi1XcXJXaTZLamRsQVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhVP7Je64uNdPIz2+7AirfaAmU/Ub3kmdDl7fQ0nOywkbQ9wa7oXHYErZTlo6
EGGB8fMbu9As/pskmsnE0TNTWz5K+q0DKR2RksD90k47jbT6F1v00JactZhcbjQV
8MuF1VfL9lp8WkRo3tRkdQQRI1dp5dlv7klgLqq+KnuYmLxetRwrddMuYG+taEnZ
BfOGx0ITGvmXQi/WHIgFYrsh5ZVWJhkokSohcxf62LLRfvk+b3xEOe3cm810Goa4
nctN777tfbioWsnHuBJPbOcSCkBUQ6JTa5lcgqWLVFQpp5Ujp8OX9BymZHGjAby0
McMwEe7yTmKIekZhKYCOLJ/KiA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:40:25 2026 by rpki-client