
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft
File: 15_gsJykSoRmkoOPxCvPQ9KjKtI.mft (raw, json)
Hash identifier: ZmQD3hu8MWApEcpLCOGgMLIcro9/4vCEUvWm6UP/Kag=
Subject key identifier: 87:6B:30:7B:FE:28:9D:70:DB:B0:A4:8B:FE:FE:7E:3E:EA:C0:7A:38
Authority key identifier: D7:9F:E0:B0:9C:A4:4A:84:66:92:83:8F:C4:2B:CF:43:D2:A3:2A:D2
Certificate issuer: /CN=A9127DE3/serialNumber=D79FE0B09CA44A846692838FC42BCF43D2A32AD2
Certificate serial: 0102
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft
Manifest number: FE
Signing time: Fri 17 Jul 2026 07:23:09 +0000
Manifest this update: Fri 17 Jul 2026 07:23:09 +0000
Manifest next update: Fri 24 Jul 2026 07:23:09 +0000
Files and hashes: 1: 15_gsJykSoRmkoOPxCvPQ9KjKtI.crl (hash: 869/tBg3M34Bx5Q6cXTVOBBInBsNwwsXw/gYh5Hv6D0=)
2: AA99F49CFC3711EFA9688687C4F9AE02.roa (hash: 0agSO2czYb8v+KJlTio7mlvfIAuNEExcwdGTY8BGEg4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.crl
rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 07:23:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258 (0x102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127DE3, serialNumber=D79FE0B09CA44A846692838FC42BCF43D2A32AD2
Validity
Not Before: Jul 17 07:23:09 2026 GMT
Not After : Jul 24 07:23:09 2026 GMT
Subject: CN=6a59d85d-d8d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d0:9a:6d:e8:77:5a:81:76:fd:f7:4b:2f:ce:
d8:d9:fb:c1:fe:d2:5b:10:01:a4:d5:91:75:7a:ba:
08:dc:81:12:e2:b0:fd:d8:89:c8:1b:c9:fd:4b:a9:
cd:09:7e:e8:71:0b:13:9a:72:54:d8:77:31:4b:58:
22:65:fd:9b:6f:76:6d:4b:4f:ad:00:e6:8d:a0:31:
5e:ed:5f:88:70:16:0c:5e:4d:1b:25:07:1b:cc:13:
49:7b:6f:4d:7d:bb:79:d1:53:e4:ad:50:e8:e5:77:
0f:ed:e9:e5:45:31:8a:e1:d4:70:5c:48:5a:04:1e:
c3:9f:ba:ea:2b:c1:c7:82:1d:3f:89:cd:fd:01:2a:
2e:48:5e:e6:17:b4:6d:43:f9:75:d1:da:59:d3:3d:
5a:7f:40:4f:52:67:21:46:34:6c:91:05:b8:86:b5:
cb:25:a8:a7:b4:ee:d7:81:68:91:8e:c6:14:68:4d:
ce:d5:d7:a7:35:6f:d5:5f:1d:57:ac:42:e1:e6:99:
b0:ca:e7:4c:c3:22:b2:b3:2c:86:d8:4d:75:db:23:
d2:77:18:f9:32:ca:ff:b7:e2:98:d5:d2:10:3d:8c:
c2:bd:01:6f:63:10:72:8f:ab:9f:0e:90:22:47:f5:
fc:8f:9a:a3:7d:38:a4:57:8e:33:13:a3:f3:dc:9a:
f0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:6B:30:7B:FE:28:9D:70:DB:B0:A4:8B:FE:FE:7E:3E:EA:C0:7A:38
X509v3 Authority Key Identifier:
keyid:D7:9F:E0:B0:9C:A4:4A:84:66:92:83:8F:C4:2B:CF:43:D2:A3:2A:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:5b:7a:1a:81:67:48:f6:81:35:ee:89:b2:91:d4:38:32:25:
cf:29:45:f7:e7:17:6f:1f:4f:cd:50:3e:68:93:11:c2:db:56:
f6:a7:f8:c7:f5:d2:c8:11:f9:9d:31:5e:3f:62:2e:76:8b:f9:
1c:5d:df:82:b7:c2:0a:a8:dc:e2:92:f2:ab:46:2a:c3:59:10:
25:7a:e4:30:af:7e:c6:33:b8:24:e0:2a:ce:c0:af:ae:3c:58:
38:d8:78:97:6a:92:50:b7:56:10:51:40:66:73:ab:8f:bd:e7:
52:66:af:a7:fe:1f:58:87:bf:d2:91:a4:ff:8a:aa:f4:7c:63:
a4:6e:ba:12:ec:be:db:8f:b8:ea:6a:22:69:e7:8e:69:ef:a0:
ca:72:36:02:08:52:52:4f:be:29:6e:b0:5a:cb:5a:75:bc:5a:
d3:6e:88:f4:6c:ce:76:af:4d:2c:14:13:4d:70:42:9b:87:9b:
73:19:e9:a5:b9:2f:25:fb:d0:f0:9a:1c:13:d3:e6:c9:7d:2a:
11:b0:87:15:bc:fb:6a:a2:5c:28:c0:d6:e1:fd:63:46:4d:ad:
dc:e8:d9:ff:e6:06:7c:95:a6:d8:4d:08:d6:49:69:88:2d:45:
6a:4b:38:5d:85:30:60:bc:14:17:21:95:27:da:bf:63:29:c4:
19:e3:95:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 07:17:46 2026 by rpki-client