
$ rpki-client -vvf rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft
File: GXlPPKo3VSe6D9M0SAx-Azjnnio.mft (raw, json)
Hash identifier: xkoYDVw2WPh4DP7dnUW7qN8bT8gbadAeDfLnRXFGtzs=
Subject key identifier: 4B:3A:8A:CE:E4:AD:56:9B:AE:5E:0A:3B:88:12:F2:4B:47:FB:FA:FE
Authority key identifier: 19:79:4F:3C:AA:37:55:27:BA:0F:D3:34:48:0C:7E:03:38:E7:9E:2A
Certificate issuer: /CN=A914FA48/serialNumber=19794F3CAA375527BA0FD334480C7E0338E79E2A
Certificate serial: 015E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GXlPPKo3VSe6D9M0SAx-Azjnnio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft
Manifest number: 015C
Signing time: Sun 01 Mar 2026 05:58:56 +0000
Manifest this update: Sun 01 Mar 2026 05:58:55 +0000
Manifest next update: Sun 08 Mar 2026 05:58:55 +0000
Files and hashes: 1: GXlPPKo3VSe6D9M0SAx-Azjnnio.crl (hash: qxAJ/9uNitWaWtT/3cALe527t0VOfK33W29UAs3/lSA=)
2: AB05727AFE8C11EE81FDAB6FC4F9AE02.roa (hash: kL+8sBegJ1XGnndePATDLqR1ij+F7xDhoLyLkaA0qyw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.crl
rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GXlPPKo3VSe6D9M0SAx-Azjnnio.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:58:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 350 (0x15e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914FA48, serialNumber=19794F3CAA375527BA0FD334480C7E0338E79E2A
Validity
Not Before: Mar 1 05:58:55 2026 GMT
Not After : Mar 8 05:58:55 2026 GMT
Subject: CN=69a3d59f-0f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:07:2c:2f:ef:6c:cd:68:59:7b:06:62:d9:7e:
cb:35:2d:fa:c4:ba:05:3d:79:03:c5:aa:59:10:4d:
f6:4f:02:31:66:20:d0:74:d6:0d:7e:46:90:83:83:
b9:8c:40:5f:a1:fe:f3:99:c3:c9:b1:6f:ce:f5:e1:
b5:41:1d:6b:fe:05:dc:e3:da:dd:7d:ca:3d:a3:d2:
60:7e:11:60:56:19:ef:8e:09:aa:62:43:e4:10:74:
85:aa:22:95:14:a8:e0:bd:c4:ad:b7:70:6f:f9:20:
8b:dc:eb:a4:e6:bc:e0:1b:32:35:71:c7:b8:26:24:
05:ec:c1:5c:85:c2:0e:6d:c1:d1:06:41:3f:a4:3d:
2c:69:2e:49:fc:0e:61:3e:6a:69:d3:4e:0e:9a:f5:
3c:7d:16:8f:00:84:6a:31:d7:f5:94:eb:b3:8a:fb:
fe:af:5d:83:eb:db:35:7e:8d:60:48:f0:95:c8:b9:
80:08:13:ca:7e:16:a1:30:35:e8:a6:d7:74:f3:c4:
b0:f5:3a:b7:30:c5:37:81:87:5d:60:b4:34:21:91:
45:79:a4:c9:67:f6:73:db:7a:58:88:44:24:39:4b:
fe:e5:86:0f:0a:c9:84:88:99:c9:d2:90:9e:07:b3:
76:5a:57:06:2f:26:97:0a:6b:55:e2:77:6f:92:c4:
92:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3A:8A:CE:E4:AD:56:9B:AE:5E:0A:3B:88:12:F2:4B:47:FB:FA:FE
X509v3 Authority Key Identifier:
keyid:19:79:4F:3C:AA:37:55:27:BA:0F:D3:34:48:0C:7E:03:38:E7:9E:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GXlPPKo3VSe6D9M0SAx-Azjnnio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:f4:40:13:95:51:e2:40:bf:c5:5f:f0:28:44:b8:81:40:75:
43:86:e6:c3:c8:a0:d3:40:a8:0a:db:0d:66:1b:47:16:98:5d:
64:ab:fa:b8:24:e3:df:17:5d:d1:e9:b6:31:2d:c4:24:1f:82:
97:a7:fc:94:4d:87:03:72:3a:03:3c:04:e6:b9:54:11:44:a3:
13:d8:ee:55:10:63:cd:9e:22:e2:0d:93:34:80:2a:7d:d8:8d:
63:2a:c3:60:05:5a:be:1c:20:07:f3:31:a8:58:0d:29:71:d8:
0d:df:5b:4f:28:ce:8c:00:aa:82:5e:f7:07:d1:2c:23:0f:38:
74:c0:07:aa:d9:b7:0a:2e:46:0a:10:97:ff:26:a0:87:b5:1b:
59:47:f8:5c:01:54:13:38:6d:1b:a5:15:58:d0:7a:c8:fa:e9:
93:f6:21:08:6b:8f:84:ee:3a:7b:09:c2:21:37:c4:bd:ec:84:
2f:a9:7c:7d:d2:11:3b:38:88:52:81:49:f0:70:0b:a6:d2:cb:
59:9e:f1:8f:11:cc:0a:f6:00:06:28:3f:7a:7d:bb:3e:f6:a7:
b9:05:47:50:37:25:19:86:51:a5:6c:f1:31:c3:78:ee:19:93:
07:50:ed:59:9d:19:cb:54:35:2a:4e:c6:1d:18:69:fa:5f:48:
bb:3a:30:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:01:48 2026 by rpki-client