
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft
File: -GGkJMXdlLdB2BgJtff_OVVjdl4.mft (raw, json)
Hash identifier: 1VHdvjDWE4u+4uc/HM9QHfQZSmVjc3I0Lc/YXM3dDZk=
Subject key identifier: 3A:EF:5E:59:40:6F:71:1A:2E:3B:12:87:01:A5:38:CD:D9:0B:37:D3
Authority key identifier: F8:61:A4:24:C5:DD:94:B7:41:D8:18:09:B5:F7:FF:39:55:63:76:5E
Certificate issuer: /CN=A915B6E9/serialNumber=F861A424C5DD94B741D81809B5F7FF395563765E
Certificate serial: 04E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-GGkJMXdlLdB2BgJtff_OVVjdl4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft
Manifest number: 04D4
Signing time: Sat 03 Oct 2026 00:06:02 +0000
Manifest this update: Sat 03 Oct 2026 00:06:01 +0000
Manifest next update: Sat 10 Oct 2026 00:06:01 +0000
Files and hashes: 1: -GGkJMXdlLdB2BgJtff_OVVjdl4.crl (hash: 0BX+5gAWU/7m0Tmp3+RsHTrtiWqpYe8U6fT4cQAocJo=)
2: D2438C7C4B1F11EDAF41BC7FC4F9AE02.roa (hash: y9AWX9pr7/40gfTliDeYcrWRNr/D4ngulxUgREVk2K4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.crl
rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-GGkJMXdlLdB2BgJtff_OVVjdl4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 00:06:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1248 (0x4e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B6E9, serialNumber=F861A424C5DD94B741D81809B5F7FF395563765E
Validity
Not Before: Oct 3 00:06:01 2026 GMT
Not After : Oct 10 00:06:01 2026 GMT
Subject: CN=6ac046ea-bd4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f7:11:c9:79:3f:9a:7e:13:a0:00:8b:7c:98:
c5:5b:c9:44:a7:3b:96:69:52:16:d9:30:7f:f9:1c:
c0:15:be:23:27:b4:5b:74:b2:10:bc:63:87:9e:00:
aa:08:2d:90:53:2d:f0:ef:f4:9c:88:8d:0d:66:32:
3b:f6:32:8e:79:0d:e6:3d:45:5e:30:02:b9:56:45:
1e:85:1d:08:c1:94:70:f0:b1:93:24:10:86:a0:ab:
fb:49:38:c3:78:89:20:ad:94:20:40:15:04:15:20:
54:d8:d4:f0:fe:28:b1:98:9d:3f:84:32:22:21:7f:
8b:05:e1:6f:d7:56:46:9b:4b:70:6e:d0:3d:20:f2:
b7:62:83:41:81:f2:58:3f:b8:46:9e:e2:07:47:36:
8d:b3:94:55:17:f7:b9:17:0f:34:8f:4b:67:c9:3e:
5c:f9:f0:6b:53:72:a2:05:2a:c1:5c:38:df:2c:12:
af:57:a7:77:00:e3:56:5f:96:2e:f7:7e:1f:56:3d:
95:1e:49:22:a3:45:3e:ca:ed:0d:de:e7:43:b9:bd:
26:8f:c0:9a:e5:44:69:0c:8b:0a:e2:78:db:d0:b0:
8e:c2:e7:16:79:c0:a4:51:e0:be:64:d8:06:34:6a:
9d:eb:02:cf:11:aa:94:5f:82:be:3f:60:c4:97:4c:
5c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:EF:5E:59:40:6F:71:1A:2E:3B:12:87:01:A5:38:CD:D9:0B:37:D3
X509v3 Authority Key Identifier:
keyid:F8:61:A4:24:C5:DD:94:B7:41:D8:18:09:B5:F7:FF:39:55:63:76:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-GGkJMXdlLdB2BgJtff_OVVjdl4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:b7:64:37:0c:b3:3c:4b:ce:55:bd:1d:f6:e1:20:5d:89:6c:
2a:0d:14:05:17:a6:ec:a7:27:aa:a6:15:6f:38:49:18:b2:26:
96:26:ca:d5:90:a5:a6:2e:c3:31:09:07:d2:96:60:81:e6:1f:
8c:31:12:69:86:4d:89:e8:7c:80:16:e6:ab:11:47:db:62:4a:
3f:7f:a2:f0:c1:1c:fa:23:2d:ec:a6:0a:1d:7d:83:a1:53:e8:
36:7b:25:e8:e3:b8:00:e3:84:55:e2:11:c4:c0:8a:6a:1a:20:
da:ce:c7:37:3c:88:e9:bb:69:82:f1:86:35:a8:34:a2:e9:cf:
d9:3e:0b:d4:1b:6c:32:dc:0b:17:22:46:1c:ff:5b:89:3d:f1:
65:17:a2:55:62:d5:bb:50:7e:9c:45:ba:32:dd:85:39:40:7e:
d0:b6:43:99:58:43:51:9a:68:68:c8:f8:10:f6:b8:ea:e8:21:
d2:b0:d6:fc:6f:9e:50:6b:7d:70:e5:ed:0b:04:5b:05:70:bd:
11:2f:04:54:2b:34:25:e0:05:4b:33:1f:1e:00:74:18:f6:89:
dc:15:82:f7:dd:b1:dd:47:6a:f2:a1:19:96:b9:51:9c:fb:b4:
df:2c:3b:3a:61:23:11:d0:8c:3e:77:ab:cb:f8:c3:4c:d1:9a:
06:c5:a4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:25:28 2026 by rpki-client