
$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft
File: GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft (raw, json)
Hash identifier: zu35UMkPHEUDIee0VoRqGUruaISBunm6LBmjdEKYAkw=
Subject key identifier: 7F:6C:CA:5A:AA:8B:35:B8:71:7E:36:72:AC:6A:81:34:1A:8A:58:D3
Authority key identifier: 1A:5B:00:59:7C:8D:7B:61:FB:BE:FE:C5:B9:44:FE:6F:9C:63:E2:20
Certificate issuer: /CN=A912598D/serialNumber=1A5B00597C8D7B61FBBEFEC5B944FE6F9C63E220
Certificate serial: 8D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GlsAWXyNe2H7vv7FuUT-b5xj4iA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft
Manifest number: 85
Signing time: Mon 27 Jul 2026 09:53:20 +0000
Manifest this update: Mon 27 Jul 2026 09:53:20 +0000
Manifest next update: Mon 03 Aug 2026 09:53:20 +0000
Files and hashes: 1: GlsAWXyNe2H7vv7FuUT-b5xj4iA.crl (hash: ulfdKzzgPWPFOJKwb2LsrCVM4Qolx+0f7tPBeMSHjVU=)
2: CF829C38C92211F0B48DBA21C4F9AE02.roa (hash: a1ueVHwOYSGifEK3t0tcO96IXICyi2pDqaW2KPvd5wM=)
3: B17823E6C92411F09DCC8126C4F9AE02.roa (hash: d4byGVZuBDPHHV4mRW8FS73gbpeL9gIriIfIPhZnw/0=)
4: 239DB440D4B011F0A2D8361AC4F9AE02.roa (hash: KGXKq0AkI/BfAPF8kDLFwg0GtVgkSnereWR0OLwNeuQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.crl
rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GlsAWXyNe2H7vv7FuUT-b5xj4iA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:53:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141 (0x8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912598D, serialNumber=1A5B00597C8D7B61FBBEFEC5B944FE6F9C63E220
Validity
Not Before: Jul 27 09:53:20 2026 GMT
Not After : Aug 3 09:53:20 2026 GMT
Subject: CN=6a672a90-eb40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:64:c3:44:35:b2:ae:8a:79:ef:a2:52:eb:29:
d3:13:35:93:eb:47:1e:50:f1:ae:74:b6:9a:cd:b9:
3a:2f:17:49:a5:0f:3a:b2:ad:78:fd:0c:e8:58:ff:
29:bf:2b:24:41:c4:b2:6e:5d:ac:d1:ca:a6:3f:fb:
71:a4:dc:ae:76:13:9b:86:84:3e:5b:a5:45:c1:67:
c9:46:3c:61:9e:60:b4:95:c3:1e:76:81:e8:79:cc:
d6:7a:53:ba:e8:68:5d:17:19:01:3f:58:24:37:0e:
d9:01:5d:51:a9:29:79:c1:4b:4c:2f:e0:b3:72:0d:
b3:95:d8:b7:86:b0:ce:0f:24:11:c0:78:ee:80:6c:
6f:b8:3b:6a:eb:5b:8a:0f:ac:ea:11:d9:8c:5d:f9:
0d:d6:c8:6a:9b:20:fe:7f:90:db:05:66:6f:d3:3f:
b3:d1:77:c6:0e:2f:b8:8c:dd:c9:6a:c0:08:cd:16:
73:51:1c:29:0f:23:47:fc:47:b5:5f:e7:09:21:ce:
53:e5:48:c6:b9:df:47:4c:92:b3:28:57:04:7e:bd:
1b:93:e7:32:ab:a1:9f:d0:01:f9:d6:c0:51:eb:99:
e2:32:fc:9e:3c:b8:64:55:c5:b7:1e:cb:8d:d8:05:
e7:aa:c6:2a:12:9e:74:2b:1e:c6:eb:6c:81:27:0c:
94:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:6C:CA:5A:AA:8B:35:B8:71:7E:36:72:AC:6A:81:34:1A:8A:58:D3
X509v3 Authority Key Identifier:
keyid:1A:5B:00:59:7C:8D:7B:61:FB:BE:FE:C5:B9:44:FE:6F:9C:63:E2:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GlsAWXyNe2H7vv7FuUT-b5xj4iA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:1d:c7:06:a2:9a:da:1b:26:12:17:36:96:a3:f3:c9:d8:8d:
c5:78:3c:22:e9:cd:05:10:13:36:68:91:c5:0c:03:37:1e:b2:
40:6c:b0:46:53:24:03:c5:3e:b6:f4:af:3f:df:15:6b:fa:80:
ce:e3:5e:df:72:34:b3:b0:80:7b:71:ea:81:30:9b:46:f7:6f:
f3:53:60:0f:39:eb:51:0d:a6:91:a8:98:5d:48:55:e7:96:f3:
b4:44:4c:51:32:ed:0d:7c:de:b4:a0:bd:e4:4c:92:e4:d5:68:
15:fb:60:59:ac:bf:92:56:b2:c3:0a:5a:5a:f4:b1:76:e6:8a:
ad:a3:67:c8:53:63:4a:5c:42:f6:3e:23:22:80:c2:eb:54:e9:
55:c5:ee:b7:7f:6d:82:b7:66:34:ba:14:4a:c1:25:11:bc:99:
41:a3:c0:9e:6f:6c:2a:28:1f:a7:2c:43:f6:2b:3a:21:7c:e4:
9c:46:d6:d6:8f:46:8e:fa:0d:42:0e:02:af:bd:04:87:89:77:
29:f6:a6:af:a5:c4:c1:9b:4f:e5:c7:b9:22:83:8c:42:bb:85:
cf:8a:07:76:37:ff:61:52:37:5c:44:6a:83:51:c6:f3:2e:ff:
5d:3b:32:4d:f9:57:d4:86:51:40:54:3a:6d:a6:36:9d:72:1f:
18:d3:53:79
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjU5OEQxMTAvBgNVBAUTKDFBNUIwMDU5N0M4RDdCNjFGQkJFRkVDNUI5NDRGRTZG
OUM2M0UyMjAwHhcNMjYwNzI3MDk1MzIwWhcNMjYwODAzMDk1MzIwWjAYMRYwFAYD
VQQDEw02YTY3MmE5MC1lYjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2WTDRDWyrop576JS6ynTEzWT60ceUPGudLaazbk6LxdJpQ86sq14/QzoWP8p
vyskQcSybl2s0cqmP/txpNyudhObhoQ+W6VFwWfJRjxhnmC0lcMedoHoeczWelO6
6GhdFxkBP1gkNw7ZAV1RqSl5wUtML+Czcg2zldi3hrDODyQRwHjugGxvuDtq61uK
D6zqEdmMXfkN1shqmyD+f5DbBWZv0z+z0XfGDi+4jN3JasAIzRZzURwpDyNH/Ee1
X+cJIc5T5UjGud9HTJKzKFcEfr0bk+cyq6Gf0AH51sBR65niMvyePLhkVcW3HsuN
2AXnqsYqEp50Kx7G62yBJwyUUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH9sylqq
izW4cX42cqxqgTQailjTMB8GA1UdIwQYMBaAFBpbAFl8jXth+77+xblE/m+cY+Ig
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTk4RC9BRTg4MzY2OEM4
RUMxMUYwOTlEOEFCNDVDNEY5QUUwMi9HbHNBV1h5TmUySDd2djdGdVVULWI1eGo0
aUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0dsc0FXWHlOZTJIN3Z2N0Z1VVQtYjV4ajRpQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NTk4RC9BRTg4MzY2OEM4RUMxMUYwOTlEOEFCNDVDNEY5QUUwMi9HbHNBV1h5TmUy
SDd2djdGdVVULWI1eGo0aUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAxR3HBqKa2hsmEhc2lqPzydiNxXg8IunNBRATNmiRxQwDNx6yQGywRlMkA8U+
tvSvP98Va/qAzuNe33I0s7CAe3HqgTCbRvdv81NgDznrUQ2mkaiYXUhV55bztERM
UTLtDXzetKC95EyS5NVoFftgWay/klaywwpaWvSxduaKraNnyFNjSlxC9j4jIoDC
61TpVcXut39tgrdmNLoUSsElEbyZQaPAnm9sKigfpyxD9is6IXzknEbW1o9GjvoN
Qg4Cr70Eh4l3Kfamr6XEwZtP5ce5IoOMQruFz4oHdjf/YVI3XERqg1HG8y7/XTsy
TflX1IZRQFQ6baY2nXIfGNNTeQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:27:25 2026 by rpki-client