
$ rpki-client -vvf rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft
File: GRFX6ZVM7IiQxhjMBybwB06RDio.mft (raw, json)
Hash identifier: AQeYEeC9PEpssxrKsCAJwB65RkS+0KnR/DREVsIEuOY=
Subject key identifier: B8:8F:37:AB:E3:29:B0:2F:8F:D3:98:4E:E1:7E:4E:95:3D:4E:1D:66
Authority key identifier: 19:11:57:E9:95:4C:EC:88:90:C6:18:CC:07:26:F0:07:4E:91:0E:2A
Certificate issuer: /CN=A916FA49/serialNumber=191157E9954CEC8890C618CC0726F0074E910E2A
Certificate serial: 157C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft
Manifest number: 1571
Signing time: Wed 20 May 2026 16:46:30 +0000
Manifest this update: Wed 20 May 2026 16:46:29 +0000
Manifest next update: Wed 27 May 2026 16:46:29 +0000
Files and hashes: 1: GRFX6ZVM7IiQxhjMBybwB06RDio.crl (hash: gaxTGXkEVVlBc6ReWesXOzg4CQjCRpPL31uvIB22/8M=)
2: 0448C04E5CC211E8AC07E63AC4F9AE02.roa (hash: x7YXjzD8EFzf7N4rbQoqJB4eYFt5aSsAHJp7OOa/HsA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.crl
rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 16:46:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5500 (0x157c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916FA49, serialNumber=191157E9954CEC8890C618CC0726F0074E910E2A
Validity
Not Before: May 20 16:46:29 2026 GMT
Not After : May 27 16:46:29 2026 GMT
Subject: CN=6a0de566-0378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:da:ac:66:7e:63:20:a8:12:a6:6c:84:40:94:
65:01:b5:f2:3f:ac:dc:fc:85:e4:e6:d4:f7:d4:5f:
e3:78:ee:96:14:b8:48:b3:f8:bb:6b:45:f0:57:1b:
f9:07:13:6c:a1:53:7f:2f:53:b7:e5:82:c7:d3:4a:
85:5f:30:ee:f1:50:ff:ca:98:33:29:7f:8a:10:34:
46:be:4c:05:ab:f9:e5:48:2c:ac:f8:f4:69:84:32:
73:c5:8f:a6:b8:eb:c6:8a:8e:6b:15:8c:c2:56:30:
f7:25:33:f6:a5:b8:cf:50:f9:c8:fd:94:25:0f:a7:
86:d7:aa:36:ce:87:20:02:6f:b8:68:12:f8:7f:f6:
03:47:fb:9b:bc:2e:96:4a:87:9e:9c:5a:f7:aa:9f:
77:fd:8a:7c:06:35:5f:bb:8b:ee:88:15:54:c4:00:
6c:6d:3d:3b:bf:0b:c3:f0:c0:3d:35:e0:24:02:8d:
76:18:5f:35:97:32:0b:18:ca:ca:4e:94:1f:54:ba:
2c:e9:62:d7:29:eb:cd:b4:7d:58:9e:c9:ca:ca:e0:
93:27:a5:89:a2:c4:ae:c9:6f:80:e6:13:e0:68:98:
7a:fd:a1:6c:3a:13:ff:40:b2:06:38:84:91:e2:27:
7e:fd:c2:2d:6a:4d:b6:bf:14:05:ed:2e:fa:2f:29:
fb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8F:37:AB:E3:29:B0:2F:8F:D3:98:4E:E1:7E:4E:95:3D:4E:1D:66
X509v3 Authority Key Identifier:
keyid:19:11:57:E9:95:4C:EC:88:90:C6:18:CC:07:26:F0:07:4E:91:0E:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:e2:a5:bf:5b:46:ec:05:cd:27:19:15:52:e1:08:c5:78:cf:
d2:d3:a1:a4:c6:64:28:54:87:a4:e2:15:26:ce:28:77:65:ae:
fa:b1:84:4d:44:8f:75:5c:9a:a0:0f:c2:93:dd:87:a8:d9:be:
90:61:10:61:bc:c7:c0:6d:bb:de:f8:e8:5e:d3:c9:c6:09:04:
14:54:03:6b:78:59:73:85:ab:af:fd:f3:31:f0:f7:8a:b5:39:
3e:39:cc:7b:ea:ae:f6:4d:88:50:ab:38:4f:0f:c7:b8:1f:89:
e9:9d:64:44:bf:18:57:6e:07:ea:81:33:44:9d:78:6f:2f:80:
76:98:b4:8e:21:86:78:58:1a:b5:55:3f:cc:84:e1:66:7d:17:
a1:d4:8d:de:e3:8f:f0:6a:ef:bf:ce:9b:0c:a4:f2:a8:39:c8:
98:c5:3d:5c:56:5b:5f:2f:04:7f:15:97:94:ad:ca:e4:74:3b:
4c:2e:f0:99:9d:da:b8:42:48:fd:26:9b:59:5d:6b:ee:4f:d9:
c1:9a:fb:c8:48:ef:20:ad:71:39:6d:00:b3:f0:26:31:bb:1f:
71:7c:97:a8:d7:51:4c:d2:fb:e4:04:7e:7f:8e:99:9c:a1:5f:
3f:0d:50:b9:21:f6:3d:3e:df:be:31:80:9f:50:84:72:51:9e:
e9:d0:45:f3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkZBNDkxMTAvBgNVBAUTKDE5MTE1N0U5OTU0Q0VDODg5MEM2MThDQzA3MjZGMDA3
NEU5MTBFMkEwHhcNMjYwNTIwMTY0NjI5WhcNMjYwNTI3MTY0NjI5WjAYMRYwFAYD
VQQDEw02YTBkZTU2Ni0wMzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3dqsZn5jIKgSpmyEQJRlAbXyP6zc/IXk5tT31F/jeO6WFLhIs/i7a0XwVxv5
BxNsoVN/L1O35YLH00qFXzDu8VD/ypgzKX+KEDRGvkwFq/nlSCys+PRphDJzxY+m
uOvGio5rFYzCVjD3JTP2pbjPUPnI/ZQlD6eG16o2zocgAm+4aBL4f/YDR/ubvC6W
SoeenFr3qp93/Yp8BjVfu4vuiBVUxABsbT07vwvD8MA9NeAkAo12GF81lzILGMrK
TpQfVLos6WLXKevNtH1YnsnKyuCTJ6WJosSuyW+A5hPgaJh6/aFsOhP/QLIGOISR
4id+/cItak22vxQF7S76Lyn7UQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLiPN6vj
KbAvj9OYTuF+TpU9Th1mMB8GA1UdIwQYMBaAFBkRV+mVTOyIkMYYzAcm8AdOkQ4q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkE0OS83MDJEODEyNDVD
QzExMUU4OUEzNkI4MzdDNEY5QUUwMi9HUkZYNlpWTTdJaVF4aGpNQnlid0IwNlJE
aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dSRlg2WlZNN0lpUXhoak1CeWJ3QjA2UkRpby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RkE0OS83MDJEODEyNDVDQzExMUU4OUEzNkI4MzdDNEY5QUUwMi9HUkZYNlpWTTdJ
aVF4aGpNQnlid0IwNlJEaW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOuKlv1tG7AXNJxkVUuEIxXjP0tOhpMZkKFSHpOIVJs4od2Wu+rGETUSPdVya
oA/Ck92HqNm+kGEQYbzHwG273vjoXtPJxgkEFFQDa3hZc4Wrr/3zMfD3irU5PjnM
e+qu9k2IUKs4Tw/HuB+J6Z1kRL8YV24H6oEzRJ14by+Adpi0jiGGeFgatVU/zITh
Zn0XodSN3uOP8Grvv86bDKTyqDnImMU9XFZbXy8EfxWXlK3K5HQ7TC7wmZ3auEJI
/SabWV1r7k/ZwZr7yEjvIK1xOW0As/AmMbsfcXyXqNdRTNL75AR+f46ZnKFfPw1Q
uSH2PT7fvjGAn1CEclGe6dBF8w==
-----END CERTIFICATE-----
Generated at Thu May 21 09:38:05 2026 by rpki-client