
$ rpki-client -vvf rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft
File: GRFX6ZVM7IiQxhjMBybwB06RDio.mft (raw, json)
Hash identifier: RLYLi7uVsxUodFwufROhVIEUJ+3i9g3QDDjsResxCnY=
Subject key identifier: AC:03:FE:C2:5B:4B:2E:8A:4A:7C:38:78:17:BE:D3:49:6D:1E:E4:7C
Authority key identifier: 19:11:57:E9:95:4C:EC:88:90:C6:18:CC:07:26:F0:07:4E:91:0E:2A
Certificate issuer: /CN=A916FA49/serialNumber=191157E9954CEC8890C618CC0726F0074E910E2A
Certificate serial: 1588
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft
Manifest number: 157D
Signing time: Fri 12 Jun 2026 16:43:55 +0000
Manifest this update: Fri 12 Jun 2026 16:43:55 +0000
Manifest next update: Fri 19 Jun 2026 16:43:55 +0000
Files and hashes: 1: GRFX6ZVM7IiQxhjMBybwB06RDio.crl (hash: 8juQ1rwAoE+gnOqHT3cox1Zo8S10op/kEuQVFCrVx4w=)
2: 0448C04E5CC211E8AC07E63AC4F9AE02.roa (hash: x7YXjzD8EFzf7N4rbQoqJB4eYFt5aSsAHJp7OOa/HsA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.crl
rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 16:43:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5512 (0x1588)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916FA49, serialNumber=191157E9954CEC8890C618CC0726F0074E910E2A
Validity
Not Before: Jun 12 16:43:55 2026 GMT
Not After : Jun 19 16:43:55 2026 GMT
Subject: CN=6a2c374b-283e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6a:4f:37:c0:2b:03:1f:d5:fb:94:53:79:ef:
51:25:01:eb:af:ce:10:25:4c:34:11:a1:05:10:9b:
a0:e1:db:6d:33:de:53:1d:13:92:1e:ea:d0:3e:fa:
2f:4f:6e:f2:2c:de:f2:b1:51:ba:0e:a7:da:a1:a2:
f5:58:33:78:ca:88:b4:62:12:47:d5:93:73:a8:9f:
10:a7:99:b0:87:3d:15:a5:ab:dc:7d:7b:e2:52:af:
80:a5:3b:fd:f8:2c:9c:8a:dd:b4:d1:8e:66:6d:cf:
85:c2:76:94:b8:c4:e2:c0:e7:45:2e:45:2e:6b:00:
29:b0:0a:a7:87:7f:b9:30:4b:9e:1e:e7:b8:26:aa:
05:c8:05:ad:d4:36:c0:5b:40:a4:5f:e0:96:fb:1d:
7d:6c:f3:ec:df:0c:53:6a:b4:c6:d0:3f:2f:30:0e:
fd:a8:02:3d:72:78:b0:2f:b8:1e:fa:aa:aa:51:80:
07:b4:6b:7a:75:8f:e4:ee:88:44:37:d7:d4:e4:bd:
f1:97:c3:ee:92:67:8f:c8:8b:01:20:83:ac:97:f2:
2b:fd:02:b6:a9:ef:14:b3:ca:3d:a8:33:22:45:84:
ef:30:5b:49:03:43:38:06:54:01:1b:31:30:ce:41:
cc:95:f3:5b:5b:8e:1b:a1:38:53:e6:4a:f9:db:f3:
ac:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:03:FE:C2:5B:4B:2E:8A:4A:7C:38:78:17:BE:D3:49:6D:1E:E4:7C
X509v3 Authority Key Identifier:
keyid:19:11:57:E9:95:4C:EC:88:90:C6:18:CC:07:26:F0:07:4E:91:0E:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:cc:43:06:51:4d:38:83:28:4f:24:01:ac:77:51:32:e5:1b:
00:a4:5f:8c:09:42:8f:cf:ea:d6:b9:56:e1:58:eb:97:47:c4:
b4:e3:f5:e2:4b:04:6b:af:c2:c8:84:7d:66:d7:99:8e:4e:1e:
00:95:80:0e:05:27:e4:92:7b:bb:e0:f1:d0:7b:40:86:46:75:
05:ed:cd:cf:09:6e:b0:0b:33:17:15:0a:61:15:97:cf:10:1c:
68:26:ca:9e:93:fd:04:a6:3c:1b:59:e7:db:2d:98:a5:d2:f3:
a3:6f:21:1f:d7:67:5a:45:e5:7b:41:ff:38:de:32:10:58:27:
d4:f4:2f:4b:a6:13:8e:58:61:fd:ec:c4:31:7e:46:7d:c0:10:
30:d4:85:b2:29:b4:3c:2a:c0:0b:9b:6f:ee:7e:14:b7:62:8c:
b7:a1:55:b0:10:a9:3d:f1:bc:86:52:4e:c3:f3:14:ab:b5:82:
a6:01:4c:66:6a:9e:09:2f:73:0a:4d:ee:7c:9b:58:f7:41:25:
66:bc:45:46:09:43:5d:64:0b:1c:b3:27:3b:4a:30:d4:8e:4b:
d5:3e:92:11:7d:5a:26:b8:19:56:98:ed:e4:64:e6:94:64:a8:
39:c0:22:c2:12:3d:ed:fc:6e:01:27:32:e8:f3:b3:4e:fd:92:
5f:8a:f2:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:59:19 2026 by rpki-client