
$ rpki-client -vvf rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft
File: GXlPPKo3VSe6D9M0SAx-Azjnnio.mft (raw, json)
Hash identifier: h3ltyfIn0APsiKGdmHoM8eGinECYlQvazR/8nbt7SaI=
Subject key identifier: A3:5B:FF:C2:BC:66:AB:F9:DF:7E:65:EB:AE:03:4F:0A:A2:63:8A:56
Authority key identifier: 19:79:4F:3C:AA:37:55:27:BA:0F:D3:34:48:0C:7E:03:38:E7:9E:2A
Certificate issuer: /CN=A914FA48/serialNumber=19794F3CAA375527BA0FD334480C7E0338E79E2A
Certificate serial: 0175
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GXlPPKo3VSe6D9M0SAx-Azjnnio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft
Manifest number: 0170
Signing time: Sun 05 Apr 2026 04:11:59 +0000
Manifest this update: Sun 05 Apr 2026 04:11:59 +0000
Manifest next update: Sun 12 Apr 2026 04:11:59 +0000
Files and hashes: 1: GXlPPKo3VSe6D9M0SAx-Azjnnio.crl (hash: BBFV2MR9sXcaI0xnHXyFEAXtTUiN7dZBF8BPlZuLLB8=)
2: AB05727AFE8C11EE81FDAB6FC4F9AE02.roa (hash: aEqZTW8prfRuypFsHT29LeQoeDUBcVU7NhGSbVHFaz4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.crl
rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GXlPPKo3VSe6D9M0SAx-Azjnnio.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 04:11:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 373 (0x175)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914FA48, serialNumber=19794F3CAA375527BA0FD334480C7E0338E79E2A
Validity
Not Before: Apr 5 04:11:59 2026 GMT
Not After : Apr 12 04:11:59 2026 GMT
Subject: CN=69d1e10f-aa75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a9:dc:7b:86:ca:2e:b4:0f:d8:2b:37:61:04:
15:d7:ac:ae:55:cf:c0:ba:15:6a:36:29:81:d9:e4:
c7:25:94:e5:6f:db:80:e4:bb:f3:47:28:69:19:7a:
33:fb:1c:b3:cd:50:c2:55:d1:c2:91:66:4c:51:ca:
d6:25:ab:df:b1:b4:c4:be:2a:11:0d:10:ef:06:59:
db:23:41:7f:f3:1a:c9:79:1e:ff:68:00:e3:46:1e:
ad:83:fd:63:97:44:17:f8:ff:55:b0:3d:d2:63:25:
8d:d2:aa:aa:0c:fc:b4:26:3b:fe:06:5c:c0:36:5f:
86:3c:41:93:9b:3f:84:ca:9d:d7:13:18:b1:b6:60:
fd:ee:3c:71:36:ea:38:b3:cf:64:45:23:e2:39:8c:
ee:6e:8b:93:a0:d9:86:ea:af:28:4d:49:38:9e:7f:
79:3b:09:00:be:13:fd:6b:8b:01:51:89:06:ce:19:
dd:0a:c0:f0:eb:d2:5b:d1:6a:22:ef:f1:fc:c1:b6:
d7:09:ac:9a:3a:5d:b2:d9:17:f4:50:ca:c1:c4:b8:
1f:40:52:12:62:67:d9:78:c0:78:4a:24:f3:d1:ef:
14:d6:ff:99:8a:7d:60:0d:d5:de:d7:9d:bf:6d:1c:
15:87:f6:5b:8d:13:19:ca:d8:27:2b:de:04:5f:8b:
9c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:5B:FF:C2:BC:66:AB:F9:DF:7E:65:EB:AE:03:4F:0A:A2:63:8A:56
X509v3 Authority Key Identifier:
keyid:19:79:4F:3C:AA:37:55:27:BA:0F:D3:34:48:0C:7E:03:38:E7:9E:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GXlPPKo3VSe6D9M0SAx-Azjnnio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:a2:51:d9:2c:64:ed:d4:f8:49:75:db:fb:cd:3c:b3:52:75:
25:42:22:86:78:ac:f6:cb:34:02:2a:f4:fa:b8:58:ef:21:6b:
f4:bf:e8:80:7d:6a:16:bf:3f:a9:66:9a:9a:d3:18:ca:e4:31:
6d:45:3d:61:d0:f0:b0:46:d2:db:20:93:02:f6:27:7a:bd:12:
61:8f:06:06:49:15:b1:f8:4c:e7:a4:5d:8e:dd:a5:bf:cc:fe:
84:bf:d2:9e:a4:6f:59:e9:60:5e:2b:14:0a:19:4a:be:0f:60:
b9:57:2d:b6:38:2b:b7:a1:f8:f7:18:3d:55:8a:81:e9:ba:3c:
8b:42:1c:fb:0a:13:17:97:3e:18:33:7a:9d:b5:e0:65:62:11:
7d:8f:59:d5:3b:6a:af:86:16:cf:c8:81:82:9b:9f:35:84:4b:
18:78:0c:32:bd:b0:15:17:84:3a:a8:11:27:91:c2:e2:e2:ad:
16:cb:fa:34:56:8d:3a:49:05:cd:f7:f6:ca:09:98:aa:31:9b:
f4:9b:e3:4c:13:d1:3b:ff:e0:30:fd:60:5a:28:0a:15:1f:5e:
13:b7:3d:64:44:87:6c:1c:e4:24:3c:c4:be:73:aa:41:97:ee:
9e:0e:87:c9:e5:58:60:7f:3a:71:a3:27:c6:d5:0a:8e:dd:81:
8a:09:2b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:58:59 2026 by rpki-client