
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft
File: GNXPyKr1F7B20fycLmX2kUNdOl8.mft (raw, json)
Hash identifier: yRhCOODpQNLnAmYaCYjOimiPGov2s9O2JzcqjJiHl2o=
Subject key identifier: 56:14:99:03:EF:11:1C:22:29:09:2D:BE:58:E2:1A:BD:5C:27:02:D5
Authority key identifier: 18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F
Certificate issuer: /CN=A917E0AC/serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F
Certificate serial: 0A0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft
Manifest number: 09F9
Signing time: Sun 01 Mar 2026 23:55:59 +0000
Manifest this update: Sun 01 Mar 2026 23:55:57 +0000
Manifest next update: Sun 08 Mar 2026 23:55:57 +0000
Files and hashes: 1: GNXPyKr1F7B20fycLmX2kUNdOl8.crl (hash: dolM0wXCHI48zdgcxnrvUtXTD5eWQpqus9NW/d1ZW/4=)
2: 36F0A6E6370811ECA61C8B38C4F9AE02.roa (hash: 9sxsLCohbrBBuOHRRUIEDZ6mWAhiElHi4Y+R/2Te8q4=)
3: 1584607CF14511ECA1AE5F4EC4F9AE02.roa (hash: POm408iE+nAwo8TdURTFaonfBCRS6Twa2e9BS7lBMnI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl
rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2573 (0xa0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E0AC, serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F
Validity
Not Before: Mar 1 23:55:57 2026 GMT
Not After : Mar 8 23:55:57 2026 GMT
Subject: CN=69a4d20e-85c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:15:04:6c:2e:32:10:23:c7:d8:75:e8:a5:be:
68:3a:15:bc:fe:b6:b8:ed:e0:48:6e:3c:fb:85:ab:
1c:68:1a:c1:28:e1:e6:09:54:49:13:85:1b:50:77:
3a:12:b2:c2:73:28:68:80:ee:58:4e:ce:e6:18:c6:
b8:79:c6:b3:c2:64:e7:5b:90:fd:00:a2:71:52:b4:
a0:33:64:bd:8e:80:7f:bc:02:91:79:04:7c:96:b4:
f4:ee:6b:59:ca:03:41:1b:9b:d0:30:7c:c5:dc:68:
91:f6:5c:60:8c:d5:3a:73:fd:c1:cf:99:41:2b:4f:
d8:4e:ae:39:be:02:b2:f0:18:f6:33:c5:0d:95:d9:
1f:bb:fa:4e:34:0a:39:c2:06:0c:41:11:15:70:b4:
12:68:9e:2c:54:7b:0f:e6:2d:16:ba:e1:6e:36:1f:
62:3c:a3:4c:9e:88:00:22:b9:72:7a:4f:55:2c:93:
61:c7:50:f1:47:ca:25:32:c9:9c:d1:72:8f:ce:94:
c7:17:1a:17:45:cd:d6:c7:c8:1f:04:a3:2a:e8:3e:
85:13:d6:ed:7a:30:d7:32:ca:6d:3f:b9:94:17:9f:
48:96:b8:b8:f5:51:b2:b4:2b:5b:ee:dc:52:db:26:
fd:ee:67:0f:20:6a:58:b3:a1:a0:e2:a4:85:88:a2:
ef:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:14:99:03:EF:11:1C:22:29:09:2D:BE:58:E2:1A:BD:5C:27:02:D5
X509v3 Authority Key Identifier:
keyid:18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:1c:ae:57:6d:20:f1:07:91:07:1e:df:b0:cc:33:0d:e8:48:
41:a9:3c:27:56:bc:d8:73:5c:80:9d:fd:61:1e:e9:f8:a4:5e:
5d:30:3c:d1:c0:17:1e:56:ad:40:1e:80:62:50:ea:a7:d3:a8:
d9:e3:61:9b:fa:5a:39:65:41:bd:64:85:29:72:59:47:22:4e:
d1:7e:2e:5d:c7:0a:5d:01:ca:ed:a8:2e:0c:e4:d2:a7:88:f9:
a1:b3:c7:2d:9c:c4:66:37:a5:e9:c5:8b:74:3a:ec:64:78:d2:
4b:c6:d7:b7:7f:d4:17:90:61:1c:dc:83:ab:db:9d:97:7d:81:
df:4a:60:d6:f2:d3:d2:ed:d8:26:c1:db:5a:b3:55:14:fd:38:
09:04:15:5e:eb:de:49:10:6a:4c:53:37:c7:88:c9:e1:42:e9:
49:bd:c1:52:c4:8a:c7:e2:db:d7:3a:7a:8d:ef:77:15:8c:61:
b9:ec:98:5a:9c:91:a9:11:9b:bb:80:78:d9:ab:04:cf:94:8d:
31:28:2b:11:86:58:b8:70:17:72:4f:a1:0e:f3:23:a1:9e:a6:
b8:c0:82:f3:96:88:bb:4d:4c:0a:7f:8a:71:78:f8:dc:51:d1:
10:d0:d8:0f:7b:3a:82:41:87:1a:4d:49:da:a9:5f:9b:58:e5:
38:78:c9:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:59 2026 by rpki-client