
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft
File: GaNgWeMX739niFziUq7bkZWPXmg.mft (raw, json)
Hash identifier: +uGSr1uM3fsMh9TAJyr9BHJXxwlyvMzqLhLkmpYm4pY=
Subject key identifier: DC:4B:4D:31:BF:F6:23:06:33:FC:1F:08:66:C1:23:49:65:51:62:C9
Authority key identifier: 19:A3:60:59:E3:17:EF:7F:67:88:5C:E2:52:AE:DB:91:95:8F:5E:68
Certificate issuer: /CN=A917D857/serialNumber=19A36059E317EF7F67885CE252AEDB91958F5E68
Certificate serial: 01EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft
Manifest number: 01E9
Signing time: Fri 17 Apr 2026 03:04:00 +0000
Manifest this update: Fri 17 Apr 2026 03:04:00 +0000
Manifest next update: Fri 24 Apr 2026 03:04:00 +0000
Files and hashes: 1: GaNgWeMX739niFziUq7bkZWPXmg.crl (hash: V5QOJY4rMwLlcxDT+QuUNjErmhmzbGq9aHj3fpTHlj4=)
2: BD9131004E2811EEBC65304DC4F9AE02.roa (hash: A4DYwCMJtHqL8FOrLyHdgaT304qseoK7Vf9HSfcF82c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.crl
rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:03:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 494 (0x1ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D857, serialNumber=19A36059E317EF7F67885CE252AEDB91958F5E68
Validity
Not Before: Apr 17 03:04:00 2026 GMT
Not After : Apr 24 03:04:00 2026 GMT
Subject: CN=69e1a320-0c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:50:bb:77:c6:49:ba:4a:1e:e5:2f:b4:2a:da:
14:2d:a9:62:5e:d8:9f:14:2e:b1:69:26:2a:48:38:
be:b3:33:db:28:ee:80:e2:27:5a:7f:89:c4:0e:72:
29:d4:39:0b:0b:9b:80:26:16:ee:90:c9:f1:6b:43:
cf:00:6d:31:e4:38:41:62:c5:52:66:8e:40:ec:77:
9e:d1:06:d4:4b:8a:50:02:05:b0:52:65:dd:1e:bc:
cb:d4:e8:80:11:8e:6d:81:8d:28:5d:96:1f:66:54:
fc:23:9b:21:6c:e6:1d:be:02:26:08:ac:f2:0e:ed:
73:af:fb:3b:f2:40:35:e4:09:d5:ed:e9:ac:17:82:
21:b4:44:c1:7e:94:06:8d:b8:10:9a:9a:4b:34:25:
9d:43:38:bd:b3:c0:36:12:29:bb:83:f7:c3:4c:6c:
96:a3:9f:db:7e:dc:b3:83:13:d4:9a:3c:b0:9d:79:
31:85:75:22:ae:f2:05:e8:29:a4:77:90:43:d4:ae:
78:50:9a:b9:2b:91:1c:ea:96:98:5f:cf:3c:a0:2e:
bb:47:5a:c0:b7:30:93:03:e2:fa:3f:22:97:95:39:
f0:0f:99:74:9e:25:9a:f6:8e:5f:8f:d1:56:8f:fb:
28:19:5c:76:f0:f2:90:7e:1e:b3:50:2b:81:39:18:
dd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:4B:4D:31:BF:F6:23:06:33:FC:1F:08:66:C1:23:49:65:51:62:C9
X509v3 Authority Key Identifier:
keyid:19:A3:60:59:E3:17:EF:7F:67:88:5C:E2:52:AE:DB:91:95:8F:5E:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:a5:43:02:4f:5e:bb:69:6b:65:2b:81:b4:e1:34:0c:68:cc:
fa:c1:c2:b0:8f:0d:ee:b5:ba:0c:18:ed:90:38:cd:86:74:85:
cf:e2:21:db:30:f3:6c:66:5b:ca:2b:2e:04:86:c9:7f:c8:49:
2b:61:e9:ed:72:be:b7:c6:74:27:18:c4:f3:ea:ad:3f:32:4c:
55:ac:bf:90:cc:dd:f1:64:1b:a8:51:bc:27:d2:38:94:c0:6e:
1e:04:98:a3:25:5e:07:d5:2f:7f:96:0c:59:86:56:3a:d0:08:
b8:93:f6:cc:e0:70:9d:ea:0f:e2:da:c4:53:4b:89:b3:42:7f:
01:de:ca:65:6d:b1:85:f9:f0:d7:f7:97:a0:9f:56:47:11:7f:
8c:eb:cc:e9:0f:02:cc:66:dd:7b:37:7d:e3:93:bc:78:a0:bc:
68:d0:b3:7d:0f:5c:56:4e:17:a6:4d:17:48:ed:28:8a:27:ba:
83:5e:7a:8c:3e:9e:fd:2b:ba:fc:e3:20:70:eb:dd:56:0c:e4:
d2:3e:4b:6c:0e:24:3c:e9:6b:4a:0a:38:46:a6:d0:82:fa:6d:
53:e9:39:d0:61:44:14:0a:b2:3e:be:d2:da:bf:c8:38:c0:92:
5a:fe:5b:16:20:96:e2:d0:e3:cc:fb:ad:c9:53:a9:96:b2:9c:
01:3f:41:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:48:47 2026 by rpki-client