
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft
File: -GGkJMXdlLdB2BgJtff_OVVjdl4.mft (raw, json)
Hash identifier: XChbWIHhlZLOK069uiFqFp1nFqV0HIinezCeJuru23w=
Subject key identifier: 3A:BF:71:BC:E1:AB:60:EE:4D:B1:0C:AA:67:19:2C:16:4C:5E:0B:8E
Authority key identifier: F8:61:A4:24:C5:DD:94:B7:41:D8:18:09:B5:F7:FF:39:55:63:76:5E
Certificate issuer: /CN=A915B6E9/serialNumber=F861A424C5DD94B741D81809B5F7FF395563765E
Certificate serial: 049B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-GGkJMXdlLdB2BgJtff_OVVjdl4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft
Manifest number: 048F
Signing time: Thu 21 May 2026 00:06:35 +0000
Manifest this update: Thu 21 May 2026 00:06:34 +0000
Manifest next update: Thu 28 May 2026 00:06:34 +0000
Files and hashes: 1: -GGkJMXdlLdB2BgJtff_OVVjdl4.crl (hash: LyiP4OjYmDeDC/lIEG5lzGdkog4hjY7UMFIyrvctKHY=)
2: D2438C7C4B1F11EDAF41BC7FC4F9AE02.roa (hash: y9AWX9pr7/40gfTliDeYcrWRNr/D4ngulxUgREVk2K4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.crl
rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-GGkJMXdlLdB2BgJtff_OVVjdl4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 00:06:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1179 (0x49b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B6E9, serialNumber=F861A424C5DD94B741D81809B5F7FF395563765E
Validity
Not Before: May 21 00:06:34 2026 GMT
Not After : May 28 00:06:34 2026 GMT
Subject: CN=6a0e4c8b-dde2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:22:1f:15:16:b0:90:9a:ee:49:ce:83:7c:ca:
64:94:64:21:5d:ad:5c:d9:e1:ff:e0:cc:98:f5:b4:
42:23:81:fc:9c:1a:49:81:3e:f6:f2:07:45:78:63:
88:89:e8:88:83:55:88:23:cc:8f:0d:fd:54:62:a3:
8b:fd:c5:8c:28:e1:45:da:d3:22:54:a2:11:8c:e5:
95:da:f9:9c:38:8e:c9:42:2f:a5:ac:18:38:1e:f7:
63:92:be:a4:69:4c:e6:46:e3:48:db:92:65:5c:3c:
c4:06:9f:d3:c2:97:a0:ce:24:a5:bf:bf:ca:85:6e:
af:9f:07:b0:6f:1c:28:c4:18:89:cc:4a:7d:b7:1b:
24:b3:2a:d0:3f:f3:d5:66:67:a3:95:5b:a1:28:d7:
e7:74:10:98:af:46:03:8a:44:d0:5f:5b:17:58:29:
30:3a:9b:df:eb:3a:41:65:58:29:20:1d:4a:be:b1:
6d:ee:5e:23:9d:80:de:c4:16:69:8e:28:1f:d6:ad:
c0:0e:b5:50:6f:cd:40:2c:53:3a:01:4f:d2:5d:5f:
b8:7e:ae:81:c8:f0:99:af:e9:94:e0:91:21:09:9e:
77:a6:34:44:0d:d6:5a:5f:51:6c:bd:62:44:20:d4:
df:25:26:56:a4:1b:d3:ed:19:df:45:1c:72:84:06:
40:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:BF:71:BC:E1:AB:60:EE:4D:B1:0C:AA:67:19:2C:16:4C:5E:0B:8E
X509v3 Authority Key Identifier:
keyid:F8:61:A4:24:C5:DD:94:B7:41:D8:18:09:B5:F7:FF:39:55:63:76:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-GGkJMXdlLdB2BgJtff_OVVjdl4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:68:89:7b:c6:ce:e1:f7:57:86:6a:ec:6f:b8:41:a7:9b:67:
d5:82:96:c1:d1:cb:dd:62:d1:28:17:e3:bd:41:45:57:38:14:
64:5d:69:04:31:f3:03:df:3c:9c:e1:fc:82:5f:41:38:bd:3a:
1c:25:16:4e:1f:c6:80:9f:31:d6:3b:69:1d:46:f2:04:c1:63:
0a:55:9d:fe:d2:12:ea:63:12:8d:20:5f:02:71:fd:88:89:59:
42:31:b2:e0:d9:87:cd:b2:85:68:0a:b6:c7:4b:e2:e4:ed:bd:
e5:52:77:a7:8e:f8:30:da:1f:91:c3:4f:b0:c4:d2:de:3f:5a:
4b:9b:e7:49:92:ea:3c:15:79:88:03:93:76:a1:8a:dd:c9:93:
2d:fe:a7:3e:3c:c4:e9:be:29:70:9f:ab:7f:50:c4:42:85:b4:
0b:cf:a7:70:46:06:40:1e:44:93:0b:09:67:a6:ea:30:91:6a:
bf:c7:b7:b8:d5:2a:e1:98:b9:b1:35:6b:80:5c:2d:d6:68:7d:
04:5d:1d:1d:ef:34:06:93:98:20:a9:07:86:5b:4f:d2:f3:65:
cc:7d:0c:8e:8d:19:d0:93:72:ce:55:e5:73:28:9d:22:43:52:
f3:e4:9c:f7:23:91:50:bb:50:71:fe:34:ff:8c:53:f4:ac:2c:
af:94:79:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:16:18 2026 by rpki-client