
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft
File: GaNgWeMX739niFziUq7bkZWPXmg.mft (raw, json)
Hash identifier: P6iXmuz9RKBRsAcE7ofRwb77zadRzm9Czuf8jbHmqAA=
Subject key identifier: 59:C2:C6:74:03:E1:1B:0B:50:83:EE:68:FE:65:39:E9:FF:28:7A:D9
Authority key identifier: 19:A3:60:59:E3:17:EF:7F:67:88:5C:E2:52:AE:DB:91:95:8F:5E:68
Certificate issuer: /CN=A917D857/serialNumber=19A36059E317EF7F67885CE252AEDB91958F5E68
Certificate serial: 01D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft
Manifest number: 01CF
Signing time: Sun 01 Mar 2026 04:21:23 +0000
Manifest this update: Sun 01 Mar 2026 04:21:23 +0000
Manifest next update: Sun 08 Mar 2026 04:21:23 +0000
Files and hashes: 1: GaNgWeMX739niFziUq7bkZWPXmg.crl (hash: 51G1QQdiakc2oQqmhidrznOgV5aUqt+EgN45IqwVR1Q=)
2: BD9131004E2811EEBC65304DC4F9AE02.roa (hash: mDyA8en4O2HoFPMoiw1GIv6+nKDmPcew5/y5uXwGm88=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.crl
rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 04:21:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 466 (0x1d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D857, serialNumber=19A36059E317EF7F67885CE252AEDB91958F5E68
Validity
Not Before: Mar 1 04:21:23 2026 GMT
Not After : Mar 8 04:21:23 2026 GMT
Subject: CN=69a3bec3-8cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:00:32:90:8a:36:74:d6:c9:31:1c:a3:eb:fe:
77:36:31:00:ff:fe:96:c1:05:94:b7:8c:e3:22:34:
09:bc:22:67:a2:9c:6c:08:a5:95:fb:21:5f:62:c5:
b1:e5:93:f6:7c:17:43:92:60:86:c7:9e:5c:38:26:
9e:23:82:98:75:88:3d:72:37:75:9b:80:b5:39:08:
1e:56:9a:d6:a2:3a:04:b7:d5:64:d2:30:57:33:7a:
c8:52:27:48:07:58:e8:d5:39:e8:34:5a:00:a7:f5:
1e:8e:b3:10:37:c0:23:8c:f8:b4:b0:f3:4a:e3:dc:
e2:e7:cb:cb:a8:4d:e8:20:bc:84:4d:53:a7:9a:a8:
de:9b:12:f9:5b:65:1e:1b:fe:eb:fb:a0:90:ab:95:
73:76:da:90:ef:74:51:70:f2:29:af:0f:ac:59:cf:
70:d2:f9:be:d9:87:80:0f:8b:ed:f0:68:14:1c:56:
fa:da:ac:9a:ef:21:be:65:89:1f:e6:31:8f:11:a7:
33:6f:ef:88:8d:63:d4:4c:6c:6c:5f:e9:42:30:47:
0f:ac:9a:21:9d:80:bd:49:b4:00:54:76:a9:b4:f0:
8f:72:cc:2f:53:82:73:07:f6:d5:8c:44:1c:ec:09:
56:25:82:3d:26:51:dc:66:7a:e7:47:fd:fe:57:a0:
48:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C2:C6:74:03:E1:1B:0B:50:83:EE:68:FE:65:39:E9:FF:28:7A:D9
X509v3 Authority Key Identifier:
keyid:19:A3:60:59:E3:17:EF:7F:67:88:5C:E2:52:AE:DB:91:95:8F:5E:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:1a:8e:00:be:ea:2d:9b:ea:9f:1c:39:ea:a7:88:64:47:39:
a9:e9:39:62:03:55:f5:db:70:b8:c7:0a:67:78:b3:3d:89:e2:
63:fa:7a:6c:b3:1e:bd:d9:86:56:cd:76:5f:fb:61:bd:49:a2:
80:59:03:8e:02:49:69:72:6e:cc:98:d7:bd:78:e5:89:d4:ef:
26:4b:c0:de:03:c2:4e:38:82:8c:96:63:bb:2b:a1:9b:be:0b:
1f:d6:1b:5e:87:bb:83:da:05:19:a8:fe:77:3c:e7:1a:33:0d:
d1:b2:86:f0:a3:e8:84:7a:60:2d:9d:fe:e4:26:be:20:48:27:
04:c6:d4:93:ea:36:06:42:5d:d0:a3:41:ad:06:f8:1a:f1:e2:
0c:55:ae:45:03:72:2c:9d:03:7d:0b:ce:9d:33:43:98:33:d5:
b3:d1:38:9d:a9:cc:5e:00:89:f3:e2:93:11:9b:32:f9:30:6c:
89:a7:cc:e5:0c:22:0b:28:f5:59:a4:3f:c8:4c:af:96:d4:aa:
52:f0:0e:db:8c:79:a9:5a:87:a5:9c:90:34:47:23:f0:02:48:
49:76:86:66:f7:89:10:54:75:10:1e:30:d8:d3:9e:7b:71:c3:
f4:2f:46:25:f1:36:11:47:1d:24:7f:bb:22:0d:8b:60:8f:45:
41:a8:92:97
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0Q4NTcxMTAvBgNVBAUTKDE5QTM2MDU5RTMxN0VGN0Y2Nzg4NUNFMjUyQUVEQjkx
OTU4RjVFNjgwHhcNMjYwMzAxMDQyMTIzWhcNMjYwMzA4MDQyMTIzWjAYMRYwFAYD
VQQDDA02OWEzYmVjMy04Y2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxgAykIo2dNbJMRyj6/53NjEA//6WwQWUt4zjIjQJvCJnopxsCKWV+yFfYsWx
5ZP2fBdDkmCGx55cOCaeI4KYdYg9cjd1m4C1OQgeVprWojoEt9Vk0jBXM3rIUidI
B1jo1TnoNFoAp/UejrMQN8AjjPi0sPNK49zi58vLqE3oILyETVOnmqjemxL5W2Ue
G/7r+6CQq5VzdtqQ73RRcPIprw+sWc9w0vm+2YeAD4vt8GgUHFb62qya7yG+ZYkf
5jGPEaczb++IjWPUTGxsX+lCMEcPrJohnYC9SbQAVHaptPCPcswvU4JzB/bVjEQc
7AlWJYI9JlHcZnrnR/3+V6BI8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFnCxnQD
4RsLUIPuaP5lOen/KHrZMB8GA1UdIwQYMBaAFBmjYFnjF+9/Z4hc4lKu25GVj15o
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDg1Ny82MUM1Q0RCODRF
MjgxMUVFOTRGREIzNENDNEY5QUUwMi9HYU5nV2VNWDczOW5pRnppVXE3YmtaV1BY
bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dhTmdXZU1YNzM5bmlGemlVcTdia1pXUFhtZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RDg1Ny82MUM1Q0RCODRFMjgxMUVFOTRGREIzNENDNEY5QUUwMi9HYU5nV2VNWDcz
OW5pRnppVXE3YmtaV1BYbWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALhqOAL7qLZvqnxw56qeIZEc5qek5YgNV9dtwuMcKZ3izPYniY/p6bLMevdmG
Vs12X/thvUmigFkDjgJJaXJuzJjXvXjlidTvJkvA3gPCTjiCjJZjuyuhm74LH9Yb
Xoe7g9oFGaj+dzznGjMN0bKG8KPohHpgLZ3+5Ca+IEgnBMbUk+o2BkJd0KNBrQb4
GvHiDFWuRQNyLJ0DfQvOnTNDmDPVs9E4nanMXgCJ8+KTEZsy+TBsiafM5QwiCyj1
WaQ/yEyvltSqUvAO24x5qVqHpZyQNEcj8AJISXaGZveJEFR1EB4w2NOee3HD9C9G
JfE2EUcdJH+7Ig2LYI9FQaiSlw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:23:24 2026 by rpki-client