
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.mft
File: GrHejsiRr6LU4cka9Vg0kL-7wgk.mft (raw, json)
Hash identifier: Z/maPR1yjHNNYMiIU8BHdqtl/hzbX6pO9wPPOuS8vWo=
Subject key identifier: 16:29:43:B8:E7:90:7F:52:76:9B:91:8D:1D:7D:66:F7:51:86:5D:91
Authority key identifier: 1A:B1:DE:8E:C8:91:AF:A2:D4:E1:C9:1A:F5:58:34:90:BF:BB:C2:09
Certificate issuer: /CN=A916DB3F/serialNumber=1AB1DE8EC891AFA2D4E1C91AF5583490BFBBC209
Certificate serial: 1EA2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GrHejsiRr6LU4cka9Vg0kL-7wgk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.mft
Manifest number: 1E95
Signing time: Sat 28 Feb 2026 16:05:02 +0000
Manifest this update: Sat 28 Feb 2026 16:05:02 +0000
Manifest next update: Sat 07 Mar 2026 16:05:02 +0000
Files and hashes: 1: GrHejsiRr6LU4cka9Vg0kL-7wgk.crl (hash: n5RoVtPxFaI8C4W+Gr3zFNEwQYXZYqaJ0/sZcZiYCdg=)
2: 7E8D9A52895411E6B3538424C4F9AE02.roa (hash: SuDRS4jGJE9zSZ58w86iX8uePQ9m/GiWmqEd/5+TkEE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.crl
rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GrHejsiRr6LU4cka9Vg0kL-7wgk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 16:05:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7842 (0x1ea2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DB3F, serialNumber=1AB1DE8EC891AFA2D4E1C91AF5583490BFBBC209
Validity
Not Before: Feb 28 16:05:02 2026 GMT
Not After : Mar 7 16:05:02 2026 GMT
Subject: CN=69a3122e-957c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9a:e0:aa:3a:41:46:6d:31:e7:72:e8:91:63:
98:33:8f:d4:77:23:2c:32:35:6c:08:5e:59:62:97:
8d:dd:c1:39:84:85:99:c6:72:0e:22:66:2c:93:ca:
94:f2:9b:dc:42:33:61:48:5f:93:4a:e0:67:50:01:
13:56:34:f3:42:84:8b:17:d1:ae:14:b7:70:8c:dd:
78:2b:22:b4:45:3a:1a:13:b9:28:5b:d7:b1:93:0f:
8d:94:44:5e:3a:f2:f3:73:bc:da:47:e5:10:87:77:
72:57:0d:9e:8d:c9:7a:a7:98:0a:9f:8a:f8:96:7b:
6e:5e:a8:68:23:d9:08:52:e8:52:2c:8b:f8:e9:cb:
d4:4f:54:a5:39:fc:2d:e3:07:3d:79:80:1c:95:08:
04:e1:d5:d1:b3:ff:92:73:57:50:ad:1d:f7:80:81:
10:fa:5c:4e:a7:b2:82:3f:11:7b:12:33:57:a9:2d:
69:9a:28:93:87:9f:27:86:f4:da:29:da:09:32:1a:
5a:d2:2d:36:b5:16:15:5d:92:83:74:4e:32:6c:39:
9b:17:61:b1:a4:aa:66:c6:ab:77:22:2d:b5:d4:94:
75:54:74:a9:39:a5:06:95:28:00:94:08:51:4a:d5:
1d:02:93:42:49:59:d5:a8:b9:3c:c8:1d:e0:3f:e8:
fd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:29:43:B8:E7:90:7F:52:76:9B:91:8D:1D:7D:66:F7:51:86:5D:91
X509v3 Authority Key Identifier:
keyid:1A:B1:DE:8E:C8:91:AF:A2:D4:E1:C9:1A:F5:58:34:90:BF:BB:C2:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GrHejsiRr6LU4cka9Vg0kL-7wgk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:1a:c5:1d:3d:36:6e:99:ed:7f:f5:ac:1e:17:b3:62:96:59:
ba:dc:e0:84:cb:da:60:eb:1c:2f:3e:d7:a1:29:fd:0f:2f:d3:
6b:28:62:9a:33:62:49:e7:3d:d4:97:3f:97:56:02:6f:1d:f6:
9d:dd:bc:71:5b:58:cd:bc:37:03:71:1a:5b:b7:75:42:cf:e6:
c9:ac:7c:66:ff:3f:60:55:87:fd:49:ee:0c:dd:fc:9b:3c:9b:
02:50:1b:f7:4c:22:43:9c:0d:97:70:b4:b6:36:06:5b:99:7a:
55:fc:74:01:64:38:34:75:46:1a:73:bb:13:18:1e:53:ab:60:
44:37:b2:1b:af:3c:ef:71:48:25:a4:57:9c:db:61:24:2b:b7:
1e:03:99:27:ff:f8:fb:a7:7e:05:c7:40:0d:4d:5d:f3:7c:a4:
88:4b:18:d3:4f:27:8e:fa:ea:cd:60:c4:e6:d2:32:59:d0:e3:
55:0a:08:65:46:79:bd:1c:eb:76:66:17:03:58:4c:a1:e7:fb:
ff:56:1b:c1:2a:35:87:1a:0d:e6:a8:2f:a1:71:74:c5:37:d7:
0b:ce:11:67:64:48:cd:96:a0:7c:5c:af:4b:58:76:14:33:36:
01:43:b4:af:b6:d3:e4:93:a7:3c:d2:94:4d:d6:51:e2:c9:a9:
ca:d9:9d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:05:07 2026 by rpki-client