
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft
File: GXlPPKo3VSe6D9M0SAx-Azjnnio.mft (raw, json)
Hash identifier: 7BQyXSEWix7yBMSLlEatLTWlVczwOtDt6RcJQaxP8gM=
Subject key identifier: 7C:7E:7D:4A:E7:4B:69:46:6E:09:78:14:DB:49:82:03:B8:E0:73:5C
Authority key identifier: 19:79:4F:3C:AA:37:55:27:BA:0F:D3:34:48:0C:7E:03:38:E7:9E:2A
Certificate issuer: /CN=A914FA48/serialNumber=19794F3CAA375527BA0FD334480C7E0338E79E2A
Certificate serial: 01DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GXlPPKo3VSe6D9M0SAx-Azjnnio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft
Manifest number: 01D4
Signing time: Wed 07 Oct 2026 04:11:16 +0000
Manifest this update: Wed 07 Oct 2026 04:11:16 +0000
Manifest next update: Wed 14 Oct 2026 04:11:16 +0000
Files and hashes: 1: GXlPPKo3VSe6D9M0SAx-Azjnnio.crl (hash: upeg/7IcqRuEFLDbx7eJAb4IyikcWBRvSeLljABLngs=)
2: 435A1DDA9E0611F1BC5E93D14A11F970.roa (hash: m6oDxt6Fo7Qvm1nr9s3HUZMAwYTL790EfhmOXKPIUvU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.crl
rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GXlPPKo3VSe6D9M0SAx-Azjnnio.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 04:11:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 479 (0x1df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914FA48, serialNumber=19794F3CAA375527BA0FD334480C7E0338E79E2A
Validity
Not Before: Oct 7 04:11:16 2026 GMT
Not After : Oct 14 04:11:16 2026 GMT
Subject: CN=6ac5c664-1675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fd:ca:a3:06:97:4f:6e:95:99:6f:e8:ae:36:
4d:d3:62:22:4e:e6:0a:79:ac:69:49:aa:7a:07:26:
10:02:6d:d2:6b:55:40:a6:b7:09:d5:e6:2a:46:5a:
e2:42:38:f1:b7:36:f2:fc:a8:45:03:cf:b4:37:dc:
ae:ea:e5:8c:ee:1c:51:01:6f:9b:79:b0:6d:e9:ba:
51:20:eb:de:bd:09:d1:ca:58:b2:4f:f6:1c:b2:24:
ca:f4:83:3e:7f:ed:38:51:52:79:b3:79:f7:90:bd:
bf:d2:72:41:78:fe:f5:01:a6:6d:b0:3b:19:5c:9c:
1d:4a:15:24:dc:29:23:6a:d3:7c:d3:50:31:83:c0:
38:c3:fa:0c:29:dc:5c:97:a0:b0:db:6f:ff:d2:dc:
2e:0e:67:00:72:99:1b:0a:89:85:d5:6c:84:ec:6a:
c8:dd:ba:98:32:68:26:1b:b2:53:07:e2:45:77:d2:
91:05:91:89:e4:4b:5c:19:40:e0:ff:9d:89:d7:3a:
b6:93:33:b6:5c:f0:1e:6c:50:4a:a0:7b:1f:91:0f:
9e:a6:d4:8f:89:5f:97:15:a8:bb:11:be:d9:75:af:
5c:d1:a1:c7:f9:c3:ed:55:ba:81:af:6c:88:79:aa:
e9:34:dc:63:87:ef:e3:bb:11:74:d6:f5:fb:91:23:
2d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:7E:7D:4A:E7:4B:69:46:6E:09:78:14:DB:49:82:03:B8:E0:73:5C
X509v3 Authority Key Identifier:
keyid:19:79:4F:3C:AA:37:55:27:BA:0F:D3:34:48:0C:7E:03:38:E7:9E:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GXlPPKo3VSe6D9M0SAx-Azjnnio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:0e:df:65:36:5f:91:2f:19:92:cd:88:5e:96:a8:1b:cc:2e:
7d:23:b9:1b:01:71:66:9d:0a:9a:07:91:3f:bd:aa:21:d4:cc:
85:b4:18:d5:cf:77:bc:c1:e8:1f:f4:3e:9b:ec:57:ef:b2:3e:
5c:3a:b2:cf:09:e2:ce:79:48:6a:cc:72:65:ca:38:b2:c6:41:
60:02:7a:5e:58:ed:7b:1d:e5:b9:6e:12:07:4f:9d:5b:97:9e:
1c:e3:ae:43:71:16:e0:71:e9:38:bd:16:2e:1d:e1:72:63:4e:
12:7e:40:86:b5:78:49:b6:d4:6d:8d:14:db:c0:3c:17:cd:91:
c7:72:c9:6c:3e:5c:1f:88:a1:ea:a2:6a:ad:2b:db:3a:5f:6e:
5a:f2:1b:29:8f:42:91:8e:88:12:77:19:1b:1a:e1:ce:82:3b:
ad:04:99:ab:cd:72:e6:8d:8f:f6:9a:b8:ce:d7:50:28:c7:27:
b5:4f:9c:80:40:88:d4:1e:91:a8:7c:8c:09:59:a6:60:61:e4:
04:d0:8e:96:be:4c:fe:8b:a2:ec:fc:fd:81:6e:88:51:60:2f:
31:d4:13:2e:e6:e6:be:e2:05:f5:cb:ff:b0:1a:f5:c4:51:dc:
19:7b:fe:d0:5d:6f:02:4d:f3:4d:54:52:98:6a:aa:6c:17:f2:
70:f7:67:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:55:29 2026 by rpki-client