
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft
File: 15_gsJykSoRmkoOPxCvPQ9KjKtI.mft (raw, json)
Hash identifier: E+EZg0+9rR1V7fTaArWFEgGKn5TjFfpYLqL3+gPLCEk=
Subject key identifier: AA:27:A4:46:0C:7E:B0:FA:D2:4B:79:FD:5F:28:EE:72:6A:DE:8C:64
Authority key identifier: D7:9F:E0:B0:9C:A4:4A:84:66:92:83:8F:C4:2B:CF:43:D2:A3:2A:D2
Certificate issuer: /CN=A9127DE3/serialNumber=D79FE0B09CA44A846692838FC42BCF43D2A32AD2
Certificate serial: 0127
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft
Manifest number: 0122
Signing time: Mon 21 Sep 2026 05:49:25 +0000
Manifest this update: Mon 21 Sep 2026 05:49:24 +0000
Manifest next update: Mon 28 Sep 2026 05:49:24 +0000
Files and hashes: 1: 15_gsJykSoRmkoOPxCvPQ9KjKtI.crl (hash: fI7JzTc0QgXpBFcEMeX8NePgwSbxhpkjhdXsLnf8358=)
2: AA99F49CFC3711EFA9688687C4F9AE02.roa (hash: gfOD6URsp7SaHqbX7i3uTtfgx5nJhXl7AmIXZ2sSe24=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.crl
rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 05:49:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 295 (0x127)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127DE3, serialNumber=D79FE0B09CA44A846692838FC42BCF43D2A32AD2
Validity
Not Before: Sep 21 05:49:24 2026 GMT
Not After : Sep 28 05:49:24 2026 GMT
Subject: CN=6ab0c565-f629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b0:05:00:f6:1f:12:61:6a:e8:cf:f7:8b:1f:
c7:2b:4a:39:f2:72:a4:8b:a8:ae:5c:d7:fa:df:6c:
3c:ce:50:39:e4:c2:3a:b2:58:cd:95:35:cf:e7:52:
72:7d:2b:8d:6f:4d:59:4c:be:e9:ca:9e:39:fe:99:
e8:3f:22:40:98:7f:15:46:42:e8:58:00:0b:d5:60:
12:9a:62:77:fe:6c:3a:8f:27:3d:67:62:ba:43:db:
e8:0e:20:35:b0:74:23:37:22:90:d4:10:cd:b6:aa:
f1:57:93:fe:cf:5e:d4:31:d9:ae:9a:ba:09:96:62:
bf:ae:ee:12:b2:47:7d:fc:07:8b:d0:3e:2c:e5:e9:
74:98:d7:d6:1b:25:8e:e2:1c:a4:c0:b3:fe:0b:56:
25:76:bf:84:a0:55:28:db:8b:97:0d:12:a9:bd:37:
42:22:bc:f3:67:bf:3a:65:19:60:5b:97:51:2b:23:
f9:4b:63:b5:c0:9f:66:0c:d6:2f:d9:66:2f:df:bc:
6e:a1:51:0f:04:23:be:74:3c:09:53:6b:d3:75:b8:
90:e2:79:99:c1:7c:77:e3:a2:dd:00:83:a9:ab:56:
9b:ec:f5:38:a8:e2:82:94:e9:d7:ec:fe:89:f2:19:
da:12:24:97:31:f3:5b:12:e2:ac:a6:bc:54:fd:96:
5d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:27:A4:46:0C:7E:B0:FA:D2:4B:79:FD:5F:28:EE:72:6A:DE:8C:64
X509v3 Authority Key Identifier:
keyid:D7:9F:E0:B0:9C:A4:4A:84:66:92:83:8F:C4:2B:CF:43:D2:A3:2A:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:1a:ae:57:42:52:80:3c:a0:83:ab:c0:2b:23:0e:23:90:6f:
dc:02:61:97:c0:1e:63:c4:63:eb:67:e4:5b:c9:6c:f4:8a:87:
59:81:c7:91:67:aa:5d:7f:28:a6:de:78:a6:62:fc:49:ca:57:
d4:00:7b:58:d9:d0:00:ba:09:13:b6:07:d7:d4:dd:f2:5a:68:
b8:db:9a:ce:39:a2:5f:35:f5:61:21:a1:71:ac:95:ea:ae:08:
e1:0e:ca:69:ec:33:9a:8a:8f:5b:fd:b2:40:20:d1:39:58:3d:
a0:ab:c8:76:2d:8d:11:2d:3c:53:32:0a:18:4b:33:e2:fc:25:
2d:ac:86:50:43:20:45:0f:d7:82:38:00:51:9e:b7:c8:99:f4:
59:7c:d6:6f:88:43:3d:1d:75:73:37:d5:bf:fa:d7:4d:0e:9c:
71:ae:9f:7e:7c:cf:4c:da:ae:e5:14:e3:65:fd:66:dc:ef:58:
8b:a3:20:24:b9:31:2d:24:83:ec:24:be:23:cf:72:70:2f:89:
5f:21:aa:1c:5c:bb:c2:df:75:7c:0c:1f:51:4f:8e:2a:a0:d7:
3b:91:9f:a8:09:88:21:43:49:31:3c:d9:46:97:16:f0:6f:54:
15:86:7b:bd:15:4f:be:7a:4e:ce:4f:d2:ff:a0:5f:fd:95:c7:
12:af:ec:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:26:31 2026 by rpki-client