
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft
File: 15_gsJykSoRmkoOPxCvPQ9KjKtI.mft (raw, json)
Hash identifier: CSRPjr64BEVw6QY9F2p/PL1QbaiDziYF/S0XrQCNCzc=
Subject key identifier: DD:2D:99:8B:02:DD:15:BD:C7:64:E8:6D:AB:7C:32:BF:BD:30:51:F6
Authority key identifier: D7:9F:E0:B0:9C:A4:4A:84:66:92:83:8F:C4:2B:CF:43:D2:A3:2A:D2
Certificate issuer: /CN=A9127DE3/serialNumber=D79FE0B09CA44A846692838FC42BCF43D2A32AD2
Certificate serial: BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft
Manifest number: B9
Signing time: Sun 01 Mar 2026 08:16:53 +0000
Manifest this update: Sun 01 Mar 2026 08:16:52 +0000
Manifest next update: Sun 08 Mar 2026 08:16:52 +0000
Files and hashes: 1: 15_gsJykSoRmkoOPxCvPQ9KjKtI.crl (hash: 95eTkyFzS0yy/LbHmt4C83F4/u8clWQMzk4OrXeMSvA=)
2: AA99F49CFC3711EFA9688687C4F9AE02.roa (hash: 0agSO2czYb8v+KJlTio7mlvfIAuNEExcwdGTY8BGEg4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.crl
rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:16:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189 (0xbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127DE3, serialNumber=D79FE0B09CA44A846692838FC42BCF43D2A32AD2
Validity
Not Before: Mar 1 08:16:52 2026 GMT
Not After : Mar 8 08:16:52 2026 GMT
Subject: CN=69a3f5f5-8ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:05:a4:b9:7a:37:3d:cc:ce:e4:d1:6b:29:01:
6e:42:58:fb:5e:4c:87:2c:bd:2b:24:4a:f6:e2:57:
f1:1c:fa:c6:78:65:e9:ea:55:fc:a4:32:09:6b:5e:
f1:a8:8b:0d:43:c7:9a:a1:2c:d2:8f:d3:6c:c2:44:
a1:16:1d:7c:40:a3:ab:90:b9:0f:c1:59:88:ce:69:
35:22:bf:cc:c2:11:27:47:64:95:2a:76:1a:a7:ef:
59:29:ea:63:87:02:58:96:12:4f:69:9c:44:23:7e:
2d:72:b9:03:ee:4e:bb:a0:d2:26:58:0f:06:01:7a:
ce:c2:ad:99:20:ac:9e:f8:dc:c2:b3:a6:01:2a:db:
9e:db:ed:06:05:33:ef:c4:3b:42:e5:b2:85:50:47:
d9:0f:65:50:38:02:7c:df:31:04:78:a7:9c:98:f9:
60:f3:aa:59:2c:2c:30:de:7a:77:60:98:3b:dd:e7:
3c:04:a0:cd:0a:fe:5a:f0:21:cc:cb:13:24:a3:fd:
f1:66:d6:b7:b7:05:3e:c2:b7:b0:77:e6:23:90:97:
78:b9:dc:57:89:68:93:72:15:b1:24:2a:c7:23:0a:
ff:6c:d7:aa:b3:99:03:f2:b5:3a:da:db:6f:66:ec:
db:4c:bd:6e:fb:3d:b4:50:15:8d:96:9b:cb:e8:ae:
a1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2D:99:8B:02:DD:15:BD:C7:64:E8:6D:AB:7C:32:BF:BD:30:51:F6
X509v3 Authority Key Identifier:
keyid:D7:9F:E0:B0:9C:A4:4A:84:66:92:83:8F:C4:2B:CF:43:D2:A3:2A:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:a4:89:f7:2a:54:46:60:1c:f7:ec:80:05:73:d1:b4:24:da:
59:bb:b1:f5:02:ef:53:ac:89:7f:ce:79:a1:65:f7:85:5e:2c:
0f:c9:18:d7:20:8a:38:4e:40:9e:96:80:14:56:3c:f5:a7:81:
9f:3a:74:30:8b:af:d0:8f:eb:36:81:82:62:40:4f:40:ae:e9:
30:e8:9e:3e:78:a4:ac:0d:a7:df:fb:51:4a:58:e8:68:9a:42:
4b:55:b1:fb:84:41:96:53:f1:fa:d0:4d:9d:0a:a5:66:5f:01:
bf:34:8e:ac:46:f8:d9:c0:45:c6:14:c8:96:35:2c:c1:f2:37:
56:ad:2b:58:58:5d:db:20:c0:0a:6f:ea:79:15:27:25:f6:fe:
f0:e7:1c:d9:5c:3e:f6:c4:8b:9c:ca:1c:a5:4d:cf:ff:30:4d:
cd:ac:b0:6c:6e:03:2b:55:32:05:d0:19:4c:b7:a1:c3:b3:53:
b5:71:5a:77:05:f9:b7:68:85:d0:8e:7d:e3:92:17:27:31:be:
09:de:c7:18:2e:6e:e7:bd:ef:b8:e6:c7:27:66:2f:cf:72:e1:
a5:44:e7:2e:50:a3:78:9c:a0:92:fb:53:81:39:3d:5b:a7:c8:
18:70:fb:1d:50:81:f6:9e:98:82:9d:8f:b0:94:01:68:1d:5a:
6e:bf:8c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:53:53 2026 by rpki-client