
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft
File: GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft (raw, json)
Hash identifier: qNcyt0J5B5tu0cO+dZUU8bSEw/5+dncVUW5G35k5E8Y=
Subject key identifier: D7:11:18:FC:2C:1D:C0:C8:B7:47:EC:70:D6:C6:AE:39:F9:82:9B:C2
Authority key identifier: 1A:5B:00:59:7C:8D:7B:61:FB:BE:FE:C5:B9:44:FE:6F:9C:63:E2:20
Certificate issuer: /CN=A912598D/serialNumber=1A5B00597C8D7B61FBBEFEC5B944FE6F9C63E220
Certificate serial: A1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GlsAWXyNe2H7vv7FuUT-b5xj4iA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft
Manifest number: 99
Signing time: Thu 03 Sep 2026 07:38:56 +0000
Manifest this update: Thu 03 Sep 2026 07:38:55 +0000
Manifest next update: Thu 10 Sep 2026 07:38:55 +0000
Files and hashes: 1: GlsAWXyNe2H7vv7FuUT-b5xj4iA.crl (hash: Fu4TJwWdBjWjwWgYIScp7NJYPr3dyKmixaOn8MoD0mk=)
2: CF829C38C92211F0B48DBA21C4F9AE02.roa (hash: a1ueVHwOYSGifEK3t0tcO96IXICyi2pDqaW2KPvd5wM=)
3: 239DB440D4B011F0A2D8361AC4F9AE02.roa (hash: KGXKq0AkI/BfAPF8kDLFwg0GtVgkSnereWR0OLwNeuQ=)
4: B17823E6C92411F09DCC8126C4F9AE02.roa (hash: d4byGVZuBDPHHV4mRW8FS73gbpeL9gIriIfIPhZnw/0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.crl
rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GlsAWXyNe2H7vv7FuUT-b5xj4iA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 07:38:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161 (0xa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912598D, serialNumber=1A5B00597C8D7B61FBBEFEC5B944FE6F9C63E220
Validity
Not Before: Sep 3 07:38:55 2026 GMT
Not After : Sep 10 07:38:55 2026 GMT
Subject: CN=6a992410-8e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:57:60:5d:31:48:db:79:2f:98:25:ef:9c:89:
98:cc:08:18:c2:ab:07:15:2c:2a:a6:c1:1d:3d:0e:
ce:e6:93:77:c0:70:d1:60:e5:bb:2d:80:c0:24:76:
ec:f1:d6:a1:22:bb:0d:52:e9:6a:85:40:ef:e4:af:
ed:8c:23:6d:90:94:95:d7:42:6c:49:fa:ac:57:d8:
25:5b:55:fb:19:20:59:02:09:5d:d5:c1:ba:03:13:
ca:52:c9:62:f1:c8:46:4b:5c:7c:66:4c:e3:29:9a:
30:33:37:e9:42:33:68:ba:b7:b3:32:8e:a3:99:fc:
68:03:c6:8b:b3:35:61:52:b2:1a:9f:6a:76:3d:c5:
dc:de:e5:09:0b:78:3b:cd:d2:68:f6:7b:5d:70:27:
48:44:54:92:99:42:5b:e0:c6:b5:86:e5:89:06:73:
85:94:62:8a:b9:7e:4b:ba:51:15:a8:5a:fc:29:fd:
47:2d:5f:40:ef:29:8a:eb:1b:9b:0e:ec:72:df:c9:
40:e8:da:6c:39:6c:44:c9:70:1f:98:9c:db:1c:cb:
1b:43:4e:5a:4b:56:fa:03:10:c0:c8:57:08:27:82:
78:1c:91:24:72:a7:df:c9:62:b8:63:b6:89:4f:f5:
62:72:00:4b:0d:d6:a7:25:bb:dc:98:aa:e7:22:bd:
a3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:11:18:FC:2C:1D:C0:C8:B7:47:EC:70:D6:C6:AE:39:F9:82:9B:C2
X509v3 Authority Key Identifier:
keyid:1A:5B:00:59:7C:8D:7B:61:FB:BE:FE:C5:B9:44:FE:6F:9C:63:E2:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GlsAWXyNe2H7vv7FuUT-b5xj4iA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:75:4a:a4:92:73:4f:45:b3:91:16:9d:5b:89:ce:03:63:14:
32:42:e6:d5:a9:74:6f:d9:b0:d4:cc:20:ad:55:75:9d:87:63:
97:a4:f5:56:c3:52:ac:63:20:77:96:16:d3:8e:31:b7:90:2f:
31:f9:75:27:ab:1b:2b:9f:62:61:5b:a8:e5:12:52:f1:7c:ae:
50:ce:53:c9:5f:ad:93:ec:e9:d1:86:50:3d:a9:72:51:8f:4e:
6f:88:f5:51:f2:8b:19:d1:33:20:d2:7d:cf:d8:0d:61:86:91:
75:5a:12:98:ce:b7:2c:c2:f3:4a:d2:02:3b:ca:25:8c:3e:ce:
2f:5f:f1:3f:10:39:72:52:5a:f8:70:21:f5:7e:4b:7e:9a:f0:
3d:40:aa:98:bb:94:ed:0c:47:76:ab:30:bd:85:50:d4:1c:bf:
1d:21:2b:4d:0f:a5:8a:b5:33:40:99:d5:74:53:9e:90:1f:d7:
ed:07:dc:08:1f:77:17:61:07:1f:fc:0e:da:5b:14:e8:b0:12:
bc:f0:15:e4:14:92:73:ca:59:93:e3:82:d9:ef:16:86:00:7f:
c4:44:e2:07:18:a7:8c:04:52:c0:4f:55:cc:c8:4d:2f:6e:8d:
19:bd:53:91:ea:90:ee:99:ee:2c:87:16:f8:35:94:3d:7c:2f:
be:7f:88:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:14:46 2026 by rpki-client