
$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft
File: GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft (raw, json)
Hash identifier: j8GRoJ+CxPrkPJpKoWLAF62AxogehLx7ZELQdS2WlXg=
Subject key identifier: 0E:29:7B:50:04:87:0C:1A:8A:4F:DF:93:F4:29:97:9F:98:45:2D:E0
Authority key identifier: 1A:5B:00:59:7C:8D:7B:61:FB:BE:FE:C5:B9:44:FE:6F:9C:63:E2:20
Certificate issuer: /CN=A912598D/serialNumber=1A5B00597C8D7B61FBBEFEC5B944FE6F9C63E220
Certificate serial: 67
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GlsAWXyNe2H7vv7FuUT-b5xj4iA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft
Manifest number: 5F
Signing time: Mon 11 May 2026 08:17:11 +0000
Manifest this update: Mon 11 May 2026 08:17:10 +0000
Manifest next update: Mon 18 May 2026 08:17:10 +0000
Files and hashes: 1: GlsAWXyNe2H7vv7FuUT-b5xj4iA.crl (hash: i5H9dXSxcLcbdpwrPhg/nlXRqq3B1H5OaoDk9ibnTks=)
2: B17823E6C92411F09DCC8126C4F9AE02.roa (hash: d4byGVZuBDPHHV4mRW8FS73gbpeL9gIriIfIPhZnw/0=)
3: 239DB440D4B011F0A2D8361AC4F9AE02.roa (hash: KGXKq0AkI/BfAPF8kDLFwg0GtVgkSnereWR0OLwNeuQ=)
4: CF829C38C92211F0B48DBA21C4F9AE02.roa (hash: a1ueVHwOYSGifEK3t0tcO96IXICyi2pDqaW2KPvd5wM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.crl
rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GlsAWXyNe2H7vv7FuUT-b5xj4iA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:17:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103 (0x67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912598D, serialNumber=1A5B00597C8D7B61FBBEFEC5B944FE6F9C63E220
Validity
Not Before: May 11 08:17:10 2026 GMT
Not After : May 18 08:17:10 2026 GMT
Subject: CN=6a019087-c2bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b2:e2:01:86:bc:6d:44:5b:1c:e6:89:0f:f0:
f3:9e:71:b7:77:c7:c7:03:82:3d:88:a4:36:4b:26:
cf:79:80:3c:53:7f:1b:00:10:33:0c:8a:62:ec:e0:
ab:99:11:31:90:10:6c:b9:87:96:07:f0:d3:09:80:
d0:76:95:bf:73:15:3c:87:b8:3d:0e:18:3b:bd:1f:
f6:37:93:21:b4:4e:ac:6d:7d:54:d1:7d:8b:6a:59:
34:68:95:60:81:54:f3:e8:55:60:df:8c:68:48:5f:
5a:44:46:bf:73:aa:b6:9a:70:0d:69:97:6c:e9:08:
80:45:75:26:d4:48:95:f0:e4:a8:af:5a:45:d1:3d:
00:f9:78:22:15:03:81:a6:a7:84:b1:d5:e5:7b:57:
c5:d9:00:3f:88:ac:9c:29:02:d2:52:5f:41:68:11:
fb:29:11:e6:ae:9b:22:b5:fe:c5:61:de:cd:72:39:
86:14:d8:78:14:07:70:fe:28:e7:07:8d:40:6d:b2:
96:ed:c9:a8:c6:a4:f0:e3:dd:49:4c:30:3c:f2:63:
97:56:3a:f5:2f:ac:2e:28:91:99:f5:ae:28:7a:9b:
90:a9:95:3e:95:7e:c1:1b:c4:e3:de:66:5e:68:01:
91:47:f5:1f:76:8f:d3:d4:c9:83:b5:1a:c7:77:a2:
44:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:29:7B:50:04:87:0C:1A:8A:4F:DF:93:F4:29:97:9F:98:45:2D:E0
X509v3 Authority Key Identifier:
keyid:1A:5B:00:59:7C:8D:7B:61:FB:BE:FE:C5:B9:44:FE:6F:9C:63:E2:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GlsAWXyNe2H7vv7FuUT-b5xj4iA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a5:3b:3b:db:50:80:0b:2a:2e:77:88:97:fc:26:c3:6e:65:
e0:da:3f:d6:5c:77:eb:d7:ce:b8:96:c2:ce:b3:4b:f2:b4:cc:
76:7d:93:1d:85:b8:08:aa:8d:ed:0a:5d:4f:ec:4e:ce:31:30:
d8:e8:e4:18:24:6d:ee:3d:0d:7c:7e:66:51:b7:31:28:87:10:
d7:48:fe:99:c1:b7:68:bb:7e:5c:50:f1:32:4d:20:d1:ca:d2:
31:19:3b:67:e5:be:1b:33:29:02:19:be:63:5a:73:30:12:16:
fe:80:b8:e6:48:99:c4:af:92:12:f2:69:fa:65:de:25:98:a8:
7c:bc:a6:f9:96:cc:48:26:59:b3:c1:9d:98:f9:f7:f4:db:9a:
4c:c2:2c:9d:38:e1:9d:8d:fe:31:b4:56:c5:9e:90:f9:a8:c1:
46:f7:49:52:ca:55:86:42:a1:a7:f8:a4:48:63:09:86:e3:9f:
0b:3d:88:7b:8f:62:70:d7:60:e8:51:d5:65:75:45:0d:9f:09:
c0:8a:cf:63:91:39:c7:4e:62:64:bd:a5:6a:5e:ba:5e:1e:dc:
f9:b0:44:2c:d5:f5:12:f9:90:3f:e9:78:9a:b6:b0:90:10:45:
b2:92:d1:e8:77:6e:96:ea:d2:2e:91:04:44:43:96:fa:ec:cd:
46:52:9d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:44:33 2026 by rpki-client