
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft
File: GXlPPKo3VSe6D9M0SAx-Azjnnio.mft (raw, json)
Hash identifier: 2XUAdvldWpHfoqlAHch3ZZ+v713kFl6b/eAMq1BgeXo=
Subject key identifier: BA:10:21:DD:A0:E0:D7:8C:A2:65:3F:01:10:17:AE:6A:9B:4A:61:F3
Authority key identifier: 19:79:4F:3C:AA:37:55:27:BA:0F:D3:34:48:0C:7E:03:38:E7:9E:2A
Certificate issuer: /CN=A914FA48/serialNumber=19794F3CAA375527BA0FD334480C7E0338E79E2A
Certificate serial: 01E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GXlPPKo3VSe6D9M0SAx-Azjnnio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft
Manifest number: 01D5
Signing time: Fri 09 Oct 2026 04:17:02 +0000
Manifest this update: Fri 09 Oct 2026 04:17:01 +0000
Manifest next update: Fri 16 Oct 2026 04:17:01 +0000
Files and hashes: 1: GXlPPKo3VSe6D9M0SAx-Azjnnio.crl (hash: Q5pwbYyzddgKYJD5t1SyrN5Ajp4ReKw1JvMojkPqpbo=)
2: 435A1DDA9E0611F1BC5E93D14A11F970.roa (hash: m6oDxt6Fo7Qvm1nr9s3HUZMAwYTL790EfhmOXKPIUvU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.crl
rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GXlPPKo3VSe6D9M0SAx-Azjnnio.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 04:17:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 480 (0x1e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914FA48, serialNumber=19794F3CAA375527BA0FD334480C7E0338E79E2A
Validity
Not Before: Oct 9 04:17:01 2026 GMT
Not After : Oct 16 04:17:01 2026 GMT
Subject: CN=6ac86abe-a213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7a:95:31:c7:21:2d:0b:4b:62:9b:10:3d:a4:
90:c3:30:f3:8f:f1:6a:52:01:9c:40:34:71:ae:4d:
e2:03:dc:fe:c4:12:95:41:30:f7:bf:6e:e2:28:ab:
1b:87:86:80:6a:94:b3:84:3d:a7:9d:ea:4b:24:b2:
cc:e8:4f:76:5c:b1:64:a7:48:73:d0:37:6a:a7:45:
6e:d5:e2:31:30:a0:6e:2c:85:93:5e:19:35:15:56:
9c:75:2e:70:ad:f9:5f:a4:83:94:1c:c7:df:9a:eb:
b0:f0:48:d7:b9:a9:46:40:dd:60:9f:54:36:da:e2:
55:09:9f:c6:42:7c:c3:88:90:58:d1:c5:6f:9f:0b:
c4:fc:b4:18:aa:76:18:89:e4:4c:4b:e3:4d:92:28:
4c:d4:a7:4a:2a:d9:e9:8b:9d:64:e1:47:bc:4b:b6:
24:e1:8a:87:1c:d2:cc:19:53:b0:9c:a6:e4:1c:4b:
69:92:3b:24:4a:9d:b5:7b:a9:d4:c5:c0:d3:23:d0:
fb:98:bd:54:67:d5:09:54:68:c6:78:49:3a:62:9f:
26:c5:e5:a2:06:c1:6a:e0:ca:87:f5:20:b9:cd:65:
10:24:f7:1a:cd:70:0e:2f:9f:59:45:d6:9f:f6:68:
1f:63:2d:eb:dc:d2:c5:83:62:5f:15:41:7e:24:66:
3d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:10:21:DD:A0:E0:D7:8C:A2:65:3F:01:10:17:AE:6A:9B:4A:61:F3
X509v3 Authority Key Identifier:
keyid:19:79:4F:3C:AA:37:55:27:BA:0F:D3:34:48:0C:7E:03:38:E7:9E:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GXlPPKo3VSe6D9M0SAx-Azjnnio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:ce:47:12:33:36:9a:74:51:78:2b:fe:fa:e7:4b:22:cb:e4:
b3:c1:95:be:9c:3a:35:b2:c2:18:43:39:ac:0a:4a:09:23:72:
57:43:50:29:98:f7:c2:1b:c0:a8:84:7e:d9:13:eb:89:12:db:
29:48:53:45:1e:a5:ba:29:64:98:aa:d9:ff:ec:eb:d1:29:c8:
6c:de:e4:7a:74:37:30:67:16:ab:eb:3d:75:c4:5d:57:4c:0c:
49:ec:b8:e2:95:28:48:d2:dc:95:d7:1d:a0:55:92:af:3a:50:
04:c6:b6:ed:b2:20:46:f9:d7:ba:89:0a:d2:58:b9:cb:cc:46:
a0:f1:b8:c8:6c:4d:4e:11:e8:9b:53:de:ab:7b:89:6b:17:29:
dc:9b:03:cf:83:ca:12:f6:21:1e:02:a6:c0:2f:16:d4:9a:63:
7d:d8:69:fc:8c:4e:ba:4e:91:00:f3:ab:82:54:fd:df:7e:88:
dd:7f:76:fe:71:b0:b5:e8:34:bb:75:86:c3:85:ef:10:5b:c8:
37:cc:e0:24:e4:6f:5a:2b:b4:a4:35:5d:fb:f6:fd:97:16:bc:
62:bb:1a:f0:0d:c2:86:98:00:49:fd:13:7d:ab:8d:80:4a:0f:
65:3b:3e:15:63:73:66:8c:25:51:0c:ae:2a:e3:2f:c8:44:7c:
2b:9d:05:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:05:15 2026 by rpki-client