
$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft
File: GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft (raw, json)
Hash identifier: Xw5KIYrI0lgqZFvSjaDm42IZFn1EPLsuGVKG6HQd/vw=
Subject key identifier: F5:FF:FF:16:10:CB:0B:D5:55:80:C6:59:BD:2A:01:34:E1:44:76:9D
Authority key identifier: 1A:5B:00:59:7C:8D:7B:61:FB:BE:FE:C5:B9:44:FE:6F:9C:63:E2:20
Certificate issuer: /CN=A912598D/serialNumber=1A5B00597C8D7B61FBBEFEC5B944FE6F9C63E220
Certificate serial: 5B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GlsAWXyNe2H7vv7FuUT-b5xj4iA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft
Manifest number: 53
Signing time: Fri 17 Apr 2026 07:58:29 +0000
Manifest this update: Fri 17 Apr 2026 07:58:29 +0000
Manifest next update: Fri 24 Apr 2026 07:58:29 +0000
Files and hashes: 1: GlsAWXyNe2H7vv7FuUT-b5xj4iA.crl (hash: XA8B9yNkXnd+GYc2yCapUqFJUEfaE02I8LRi6S0wx9M=)
2: 239DB440D4B011F0A2D8361AC4F9AE02.roa (hash: KGXKq0AkI/BfAPF8kDLFwg0GtVgkSnereWR0OLwNeuQ=)
3: B17823E6C92411F09DCC8126C4F9AE02.roa (hash: d4byGVZuBDPHHV4mRW8FS73gbpeL9gIriIfIPhZnw/0=)
4: CF829C38C92211F0B48DBA21C4F9AE02.roa (hash: a1ueVHwOYSGifEK3t0tcO96IXICyi2pDqaW2KPvd5wM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.crl
rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GlsAWXyNe2H7vv7FuUT-b5xj4iA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:58:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91 (0x5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912598D, serialNumber=1A5B00597C8D7B61FBBEFEC5B944FE6F9C63E220
Validity
Not Before: Apr 17 07:58:29 2026 GMT
Not After : Apr 24 07:58:29 2026 GMT
Subject: CN=69e1e825-c18c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3f:51:c2:07:5c:23:b8:94:20:0e:a2:e8:d9:
49:9a:48:d1:30:45:a1:8b:87:fa:68:b0:6c:cc:44:
7d:35:a5:36:69:d8:e3:df:0f:1f:0f:f5:d3:09:c3:
0d:77:85:f0:88:5b:f2:bc:85:33:9e:f4:f9:c6:47:
88:0c:ec:0b:a9:1f:1d:7d:c7:52:9b:7e:f9:06:36:
e8:0b:46:dc:ed:bc:46:12:4b:04:e1:7d:db:af:9d:
a2:b0:58:90:39:cc:57:42:99:35:51:98:c6:0d:48:
d9:a3:7b:25:87:88:38:e0:6a:0d:79:5f:4a:e4:13:
54:19:21:99:6a:ae:c9:bb:a9:d8:b2:98:3a:c1:91:
c2:ba:de:59:6b:fd:bd:e6:e8:6f:3e:ac:78:4b:a8:
71:e8:82:5d:01:66:dd:b9:b4:07:b3:8e:ae:94:1d:
bc:91:83:d0:b5:ca:ff:e6:50:49:01:63:4d:c6:94:
44:27:11:23:b0:9e:3e:45:e0:e9:27:30:65:e8:50:
ab:bf:13:d1:fd:83:28:eb:b0:d3:4a:57:3d:17:11:
40:6b:81:a1:5f:48:c4:1b:d8:a6:59:41:d5:a0:4f:
48:ce:fd:01:74:2a:b5:33:61:4d:99:57:c4:88:61:
7e:81:6e:7e:4c:08:e1:f8:8a:35:9a:1b:16:f3:f6:
b0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:FF:FF:16:10:CB:0B:D5:55:80:C6:59:BD:2A:01:34:E1:44:76:9D
X509v3 Authority Key Identifier:
keyid:1A:5B:00:59:7C:8D:7B:61:FB:BE:FE:C5:B9:44:FE:6F:9C:63:E2:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GlsAWXyNe2H7vv7FuUT-b5xj4iA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:0c:0d:28:a0:aa:ef:57:fc:41:10:a0:e9:8d:81:76:5d:f2:
60:33:9d:ef:0e:da:51:0e:76:10:31:ef:3f:0d:90:a7:62:7d:
b5:63:15:2f:8e:b9:b4:11:78:28:6d:7c:d9:9b:5a:1a:d9:29:
a5:f9:1b:f8:39:ec:78:ee:e9:7f:ae:7a:7b:05:25:f6:cc:1d:
33:af:44:11:0b:a0:92:83:89:be:52:85:d4:dc:7f:dc:6d:c7:
ef:3a:00:f6:85:ff:4f:71:c5:c4:fe:22:df:35:86:f2:e6:db:
11:a2:0f:45:2a:55:de:64:c0:82:1d:2c:83:d7:63:81:cc:c1:
f5:3e:b7:37:2d:e0:15:14:f1:c3:cb:fe:cb:e6:1d:a4:b9:de:
e4:bf:99:26:d1:3f:d1:b7:0d:4f:f7:5a:15:ec:d7:fa:91:a0:
91:89:71:d3:dc:42:58:2d:b1:da:04:58:63:2f:1e:fb:7a:89:
ec:88:c7:d6:9c:02:7a:a9:e4:72:30:ac:69:7f:2a:39:e6:2a:
20:ab:ad:8c:cc:35:ae:a1:2c:9b:be:e3:5d:58:11:4b:0b:8e:
e3:1c:b4:ae:8f:ab:05:f3:92:0a:9d:a7:01:b9:f8:84:ac:b9:
43:f4:90:48:3d:65:be:a3:56:ca:42:08:82:7e:39:a2:78:b2:
cd:b4:83:ea
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
NTk4RDExMC8GA1UEBRMoMUE1QjAwNTk3QzhEN0I2MUZCQkVGRUM1Qjk0NEZFNkY5
QzYzRTIyMDAeFw0yNjA0MTcwNzU4MjlaFw0yNjA0MjQwNzU4MjlaMBgxFjAUBgNV
BAMTDTY5ZTFlODI1LWMxOGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCoP1HCB1wjuJQgDqLo2UmaSNEwRaGLh/posGzMRH01pTZp2OPfDx8P9dMJww13
hfCIW/K8hTOe9PnGR4gM7AupHx19x1KbfvkGNugLRtztvEYSSwThfduvnaKwWJA5
zFdCmTVRmMYNSNmjeyWHiDjgag15X0rkE1QZIZlqrsm7qdiymDrBkcK63llr/b3m
6G8+rHhLqHHogl0BZt25tAezjq6UHbyRg9C1yv/mUEkBY03GlEQnESOwnj5F4Okn
MGXoUKu/E9H9gyjrsNNKVz0XEUBrgaFfSMQb2KZZQdWgT0jO/QF0KrUzYU2ZV8SI
YX6Bbn5MCOH4ijWaGxbz9rB9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU9f//FhDL
C9VVgMZZvSoBNOFEdp0wHwYDVR0jBBgwFoAUGlsAWXyNe2H7vv7FuUT+b5xj4iAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1OThEL0FFODgzNjY4QzhF
QzExRjA5OUQ4QUI0NUM0RjlBRTAyL0dsc0FXWHlOZTJIN3Z2N0Z1VVQtYjV4ajRp
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvR2xzQVdYeU5lMkg3dnY3RnVVVC1iNXhqNGlBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1
OThEL0FFODgzNjY4QzhFQzExRjA5OUQ4QUI0NUM0RjlBRTAyL0dsc0FXWHlOZTJI
N3Z2N0Z1VVQtYjV4ajRpQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQC1DA0ooKrvV/xBEKDpjYF2XfJgM53vDtpRDnYQMe8/DZCnYn21YxUvjrm0EXgo
bXzZm1oa2Sml+Rv4Oex47ul/rnp7BSX2zB0zr0QRC6CSg4m+UoXU3H/cbcfvOgD2
hf9PccXE/iLfNYby5tsRog9FKlXeZMCCHSyD12OBzMH1Prc3LeAVFPHDy/7L5h2k
ud7kv5km0T/Rtw1P91oV7Nf6kaCRiXHT3EJYLbHaBFhjLx77eonsiMfWnAJ6qeRy
MKxpfyo55iogq62MzDWuoSybvuNdWBFLC47jHLSuj6sF85IKnacBufiErLlD9JBI
PWW+o1bKQgiCfjmieLLNtIPq
-----END CERTIFICATE-----
Generated at Sat Apr 18 21:04:08 2026 by rpki-client