
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft
File: GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft (raw, json)
Hash identifier: axxnl+fRmHGwxVX3CBLe9TP94VhNYUoz/NpG4IYPHNg=
Subject key identifier: B5:CE:23:10:C1:6D:95:FA:3A:A5:CB:F1:6F:94:CA:88:72:A1:28:FA
Authority key identifier: 1A:5B:00:59:7C:8D:7B:61:FB:BE:FE:C5:B9:44:FE:6F:9C:63:E2:20
Certificate issuer: /CN=A912598D/serialNumber=1A5B00597C8D7B61FBBEFEC5B944FE6F9C63E220
Certificate serial: BE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GlsAWXyNe2H7vv7FuUT-b5xj4iA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft
Manifest number: B3
Signing time: Wed 21 Oct 2026 07:42:39 +0000
Manifest this update: Wed 21 Oct 2026 07:42:38 +0000
Manifest next update: Wed 28 Oct 2026 07:42:38 +0000
Files and hashes: 1: GlsAWXyNe2H7vv7FuUT-b5xj4iA.crl (hash: mPAhCHaxxmjr5F7b91l2DnPpBfB9tsM5T0oOn1aWlNw=)
2: B17823E6C92411F09DCC8126C4F9AE02.roa (hash: d4byGVZuBDPHHV4mRW8FS73gbpeL9gIriIfIPhZnw/0=)
3: A981485ACCD111F19EE8DE612E66CEF9.roa (hash: B20KqjE9WxwCmXEJ/LTUBubJOoxm8RddiDkZi+wDMgI=)
4: CF829C38C92211F0B48DBA21C4F9AE02.roa (hash: a1ueVHwOYSGifEK3t0tcO96IXICyi2pDqaW2KPvd5wM=)
5: A76B2A22CCD111F19EE8DE612E66CEF9.roa (hash: cUUd2KjLGHA+W3KxJnP+QMEumEv7RS6hQc5ZjO69Grw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.crl
rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GlsAWXyNe2H7vv7FuUT-b5xj4iA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 04:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190 (0xbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912598D, serialNumber=1A5B00597C8D7B61FBBEFEC5B944FE6F9C63E220
Validity
Not Before: Oct 21 07:42:38 2026 GMT
Not After : Oct 28 07:42:38 2026 GMT
Subject: CN=6ad86cef-b555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c6:47:a0:d3:d5:71:50:34:d0:f3:2f:61:5e:
41:e1:3f:63:77:41:e8:ae:4f:d7:f8:08:bd:e6:cb:
a3:dd:6b:b0:7d:6a:a1:8d:8d:86:03:8e:39:35:4a:
e1:61:db:17:68:41:44:1f:87:08:16:85:c2:77:42:
a1:6e:c3:a3:09:db:7e:86:61:ab:f3:87:68:48:3d:
d8:a3:09:23:ab:51:d9:6a:18:36:51:6c:64:34:73:
ce:49:61:ef:81:50:fb:6e:99:07:cd:98:86:29:94:
90:89:58:c0:2d:47:01:bc:50:5c:93:80:10:c4:84:
b6:88:dd:7e:03:78:9a:aa:2d:e5:2d:be:e7:f1:cf:
3c:87:e1:21:4c:72:53:97:3f:4c:8a:c4:c9:62:a9:
5b:f9:eb:50:5e:8b:1c:20:44:8c:8f:37:23:f4:ea:
90:56:4f:bb:20:b4:6f:11:2e:ef:63:8f:24:36:7a:
4b:df:06:4c:87:c0:d3:57:2c:00:e5:22:0a:12:c0:
8b:94:61:53:18:b2:07:a4:a6:62:37:82:c6:4c:89:
3a:9f:06:28:63:fe:43:97:c6:19:42:3c:a5:ab:cf:
e2:dd:68:88:9f:09:db:b4:47:13:fe:93:bd:8b:d0:
d1:5d:61:10:1b:67:a2:8b:95:d2:ff:dd:22:36:7d:
86:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:CE:23:10:C1:6D:95:FA:3A:A5:CB:F1:6F:94:CA:88:72:A1:28:FA
X509v3 Authority Key Identifier:
keyid:1A:5B:00:59:7C:8D:7B:61:FB:BE:FE:C5:B9:44:FE:6F:9C:63:E2:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GlsAWXyNe2H7vv7FuUT-b5xj4iA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:54:52:43:d0:fa:6e:41:6a:db:0a:2e:ad:6c:7e:30:66:d9:
71:00:f0:6e:20:b3:de:7b:dd:28:87:dd:fd:0e:2b:29:3c:3e:
92:99:bd:3e:20:24:85:3f:27:3e:f6:63:42:e8:f4:6e:c1:39:
dd:25:de:be:9a:92:fb:1c:42:0a:b2:f9:08:bf:3d:d2:a5:b8:
69:a2:82:3b:0e:1b:46:48:15:fe:e6:d5:6f:11:da:e8:a0:ca:
5a:38:cc:52:ae:e6:89:50:99:43:67:bd:28:2c:6d:7a:16:05:
8c:cd:1e:04:03:ea:12:79:ba:a3:86:87:ab:b1:6b:8b:2e:ac:
b8:c3:2c:05:9d:3f:76:a3:84:93:cc:59:f2:5e:68:77:02:02:
3d:70:0a:3a:34:23:52:b7:13:78:52:58:d9:c2:f8:5d:0f:17:
50:42:a7:41:51:b6:64:a7:70:8c:94:ad:16:ff:32:a3:e0:2e:
26:af:df:42:ce:1d:b4:70:10:a2:5c:da:30:d9:f3:a7:45:1b:
65:9e:cd:c3:9c:20:7a:2c:f9:d7:0f:ff:5a:ce:e1:63:69:81:
f0:74:a8:1f:da:cc:05:17:a9:d1:2a:08:5e:7a:37:c0:a5:7b:
c9:23:36:ff:be:7f:f0:ce:7b:6c:63:7f:81:93:d2:ce:9f:eb:
f9:e9:a3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 02:13:41 2026 by rpki-client