
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft
File: 15_gsJykSoRmkoOPxCvPQ9KjKtI.mft (raw, json)
Hash identifier: iU4fLc3SXScGJDX8mPzljDMe/SVFKvpIzf+xCE+9m7Y=
Subject key identifier: 02:03:30:39:50:A5:AF:70:B7:9B:69:96:E8:8B:F9:E1:80:9B:A4:F0
Authority key identifier: D7:9F:E0:B0:9C:A4:4A:84:66:92:83:8F:C4:2B:CF:43:D2:A3:2A:D2
Certificate issuer: /CN=A9127DE3/serialNumber=D79FE0B09CA44A846692838FC42BCF43D2A32AD2
Certificate serial: D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft
Manifest number: D1
Signing time: Fri 17 Apr 2026 06:27:30 +0000
Manifest this update: Fri 17 Apr 2026 06:27:29 +0000
Manifest next update: Fri 24 Apr 2026 06:27:29 +0000
Files and hashes: 1: 15_gsJykSoRmkoOPxCvPQ9KjKtI.crl (hash: YWEZU6e0xyB+D1ibQSKWihMorUA7mozr5AehbQwLdaI=)
2: AA99F49CFC3711EFA9688687C4F9AE02.roa (hash: 0agSO2czYb8v+KJlTio7mlvfIAuNEExcwdGTY8BGEg4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.crl
rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:27:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 213 (0xd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127DE3, serialNumber=D79FE0B09CA44A846692838FC42BCF43D2A32AD2
Validity
Not Before: Apr 17 06:27:29 2026 GMT
Not After : Apr 24 06:27:29 2026 GMT
Subject: CN=69e1d2d2-6316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a1:03:ff:27:b4:c2:6e:7a:b8:08:56:f9:06:
5e:73:66:6b:ae:ab:59:0a:35:3d:79:77:78:b8:74:
ac:f5:b3:4f:b8:b0:c5:8d:ab:61:a0:3e:f4:2e:63:
68:19:12:23:bd:12:70:06:36:84:b4:b0:2a:77:62:
87:54:3d:08:fd:f0:b5:8f:6a:08:1c:ba:04:62:50:
18:b6:de:b0:93:e4:31:28:59:f5:64:7c:0b:ec:66:
0a:53:a3:be:fd:70:07:7b:6e:e2:37:65:d3:48:53:
07:90:ce:1d:f5:08:d0:f0:47:94:ba:5b:07:79:fb:
4a:0c:10:61:40:75:68:94:39:a9:28:70:74:95:21:
76:8f:d1:41:23:94:ba:09:e2:46:c3:9c:fb:32:36:
00:df:a7:43:fc:79:8c:18:67:eb:68:09:9e:f6:c4:
a4:2e:82:a5:f7:1f:1d:59:de:94:45:1e:e2:f1:29:
6f:3b:e3:83:0d:14:a5:06:7e:32:fa:da:12:8b:49:
c6:47:ef:68:07:ce:ee:0a:6a:b2:0d:38:05:be:6b:
5e:ec:0d:26:30:ff:de:7d:7b:b9:80:90:7f:74:ea:
3c:de:d4:59:a4:9a:24:26:9f:47:1f:1e:31:08:f6:
ed:86:3b:2a:f7:d6:ac:aa:53:ae:d3:a9:4e:93:7e:
16:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:03:30:39:50:A5:AF:70:B7:9B:69:96:E8:8B:F9:E1:80:9B:A4:F0
X509v3 Authority Key Identifier:
keyid:D7:9F:E0:B0:9C:A4:4A:84:66:92:83:8F:C4:2B:CF:43:D2:A3:2A:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:1d:f8:42:d6:23:33:72:60:02:18:39:fc:34:1d:4f:6b:2d:
fe:a9:27:cd:8a:d5:96:9a:f3:d8:de:fc:f1:41:b2:e4:f0:61:
c6:24:78:8a:5e:44:ad:ce:00:41:23:59:f3:45:9c:ec:1c:cc:
c9:0a:07:67:3d:3b:7c:7e:08:65:91:e3:c9:38:e6:33:7d:b7:
54:7f:01:0d:29:0e:42:13:ca:3e:c7:ec:7e:37:86:2c:00:d9:
e3:57:b4:21:98:d9:e6:03:86:80:79:bf:14:0e:ed:64:3d:31:
af:43:bf:8f:a2:70:fb:21:18:ca:03:84:aa:d2:ce:09:c6:77:
82:20:10:08:e3:a7:88:9e:f7:44:fb:02:c3:64:60:b5:9c:6a:
37:11:d4:f7:2a:99:ab:c3:e2:c7:cf:d2:a5:d2:31:b3:3c:db:
ca:38:49:6b:4f:a1:40:7f:a8:7b:72:3a:c0:d8:3e:db:60:4d:
02:fc:c1:2b:45:45:75:0d:ec:f1:6b:68:05:cd:28:4b:e5:cb:
12:c5:75:01:46:5e:64:f4:de:b1:bb:f8:d9:b0:ee:25:9a:1a:
cf:6d:ce:b8:c9:96:21:6e:52:09:2c:18:8d:41:14:82:f3:12:
c7:a7:0f:37:d6:31:55:c0:1f:28:36:a2:4f:ec:69:fa:5e:46:
4c:05:3e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:20:20 2026 by rpki-client