
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft
File: GXlPPKo3VSe6D9M0SAx-Azjnnio.mft (raw, json)
Hash identifier: bXkxSBHqiBqxiWoJ+82rxGOHC9mSQSCFi6bWJgygDU0=
Subject key identifier: D6:F1:DE:2B:DE:A8:DF:32:A2:D8:91:42:F9:14:C6:03:E5:E2:65:33
Authority key identifier: 19:79:4F:3C:AA:37:55:27:BA:0F:D3:34:48:0C:7E:03:38:E7:9E:2A
Certificate issuer: /CN=A914FA48/serialNumber=19794F3CAA375527BA0FD334480C7E0338E79E2A
Certificate serial: 01D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GXlPPKo3VSe6D9M0SAx-Azjnnio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft
Manifest number: 01CD
Signing time: Wed 23 Sep 2026 03:38:27 +0000
Manifest this update: Wed 23 Sep 2026 03:38:26 +0000
Manifest next update: Wed 30 Sep 2026 03:38:26 +0000
Files and hashes: 1: GXlPPKo3VSe6D9M0SAx-Azjnnio.crl (hash: /EAIP8VCfIMorNFfRa32z6v8gtlfp+B9hUTJ5RMLwXU=)
2: 435A1DDA9E0611F1BC5E93D14A11F970.roa (hash: m6oDxt6Fo7Qvm1nr9s3HUZMAwYTL790EfhmOXKPIUvU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.crl
rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GXlPPKo3VSe6D9M0SAx-Azjnnio.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 03:38:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 472 (0x1d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914FA48, serialNumber=19794F3CAA375527BA0FD334480C7E0338E79E2A
Validity
Not Before: Sep 23 03:38:26 2026 GMT
Not After : Sep 30 03:38:26 2026 GMT
Subject: CN=6ab349b3-6d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:65:97:c6:93:95:72:43:e1:f9:e0:67:9f:d3:
c1:d7:4f:2d:c1:ef:01:0f:9c:cd:d9:d6:3e:a1:1a:
10:16:03:df:33:3a:f0:58:bf:84:86:98:eb:e4:bd:
7d:e4:97:43:b5:0f:4c:4d:f4:e9:85:0f:25:c6:7f:
05:2d:78:e4:b8:b3:03:ed:05:dc:d8:47:fe:69:a6:
05:c4:7d:b6:3d:c3:ef:1f:b7:d8:14:7d:13:49:2a:
f1:a6:3c:cd:f5:f6:01:ef:f8:84:e7:55:b6:65:f6:
48:f8:9f:76:ff:26:20:7b:3d:16:fe:2a:65:7b:0e:
c3:92:0a:f2:6a:a7:00:7a:c0:20:e4:c3:30:51:09:
a8:ed:98:28:08:a5:99:49:e0:93:9d:c8:9c:c5:30:
a5:59:57:d8:a6:3c:fb:fd:b7:c9:91:0c:2d:a6:04:
a1:55:61:78:79:a4:e6:da:a8:d4:00:26:65:aa:0f:
7e:aa:a9:2f:c3:3a:63:5c:ae:72:64:05:6c:b5:39:
9a:ef:e3:aa:a4:57:af:1f:ee:b2:6f:ac:8b:ab:b3:
84:8d:e3:2d:bf:2d:ae:94:c6:d8:fc:1b:2e:f6:90:
32:13:c8:41:1a:af:fa:39:44:8f:5e:f5:a2:98:38:
e6:7c:32:4a:8e:65:0f:f5:ba:c5:4a:04:a1:9b:10:
47:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F1:DE:2B:DE:A8:DF:32:A2:D8:91:42:F9:14:C6:03:E5:E2:65:33
X509v3 Authority Key Identifier:
keyid:19:79:4F:3C:AA:37:55:27:BA:0F:D3:34:48:0C:7E:03:38:E7:9E:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GXlPPKo3VSe6D9M0SAx-Azjnnio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:c6:c8:c6:53:41:6e:91:94:79:19:d5:82:11:1e:32:14:de:
6a:9b:82:9e:2b:b0:68:b6:2f:f8:fa:01:9f:a8:03:da:45:3e:
ac:97:69:8e:16:1f:95:fc:51:12:5a:a8:7c:82:0e:c1:88:27:
5b:41:5e:f1:ac:31:3b:68:13:f8:37:7f:b5:6a:ee:87:a2:42:
55:e3:5f:4b:48:4e:9b:a8:1a:37:23:39:3d:6f:d1:89:6a:5d:
70:e6:72:57:cd:d8:22:34:b2:78:ca:85:b6:2b:75:55:d4:4c:
38:69:d5:10:d8:35:49:23:fa:65:9a:df:f1:e7:0b:32:cf:bf:
9d:78:30:7d:02:42:67:e6:2e:51:ea:d7:8b:93:de:48:b9:18:
35:d7:62:bb:23:7c:e5:41:aa:15:4c:c2:35:60:10:3b:98:be:
ba:2b:17:13:4f:1a:17:53:8f:17:4d:cb:76:dd:e5:f1:58:15:
15:31:fb:39:72:69:9f:af:d1:c3:a6:26:1e:13:4d:e4:4a:94:
9c:28:1a:cb:31:3e:c5:31:e5:a7:56:4c:f2:bb:40:d5:b9:3a:
09:48:b1:e4:b7:6c:93:c2:7d:46:38:c4:4e:34:33:7d:39:4e:
61:3d:8a:9a:30:4a:f3:a2:d9:d4:86:2c:0d:32:77:17:45:57:
4e:f2:2d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:30:46 2026 by rpki-client