
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft
File: GRFX6ZVM7IiQxhjMBybwB06RDio.mft (raw, json)
Hash identifier: P1iNftEIc/pZ8PWtVflX4sR07F2JgaTTTVTG9h8NpIA=
Subject key identifier: D9:21:1D:66:0E:BF:39:0E:65:EB:6E:27:34:0A:34:42:2A:DB:D1:A6
Authority key identifier: 19:11:57:E9:95:4C:EC:88:90:C6:18:CC:07:26:F0:07:4E:91:0E:2A
Certificate issuer: /CN=A916FA49/serialNumber=191157E9954CEC8890C618CC0726F0074E910E2A
Certificate serial: 15CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft
Manifest number: 15BB
Signing time: Fri 25 Sep 2026 12:45:46 +0000
Manifest this update: Fri 25 Sep 2026 12:45:45 +0000
Manifest next update: Fri 02 Oct 2026 12:45:45 +0000
Files and hashes: 1: GRFX6ZVM7IiQxhjMBybwB06RDio.crl (hash: Vgdtp95thSyASDJEbHDhbkw7FuhMfKIaW5zaI8wcPPM=)
2: TvMlzcDTCi4DDr-N6kZvfXfbPVk.asa (hash: XWYDbrsPMeZ/WfTitnqs6rnmXLKMybxL7A4P/kSuv7c=)
3: 0448C04E5CC211E8AC07E63AC4F9AE02.roa (hash: x7YXjzD8EFzf7N4rbQoqJB4eYFt5aSsAHJp7OOa/HsA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.crl
rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 12:45:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5583 (0x15cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916FA49, serialNumber=191157E9954CEC8890C618CC0726F0074E910E2A
Validity
Not Before: Sep 25 12:45:45 2026 GMT
Not After : Oct 2 12:45:45 2026 GMT
Subject: CN=6ab66cfa-71f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d0:1f:7e:38:48:49:7e:a5:f8:58:09:a4:6b:
a3:14:51:40:63:48:6a:9c:6d:0c:7f:fa:f3:8d:22:
19:fa:f4:4d:b3:be:9b:5f:2c:d1:e1:e8:82:ca:87:
5e:40:5a:f7:aa:f9:5d:c9:02:c2:c8:29:39:4e:0f:
62:8b:b9:7b:d8:6c:67:8f:fe:0e:aa:f9:eb:9e:ee:
cb:08:02:ed:28:a0:b0:38:d0:a9:2c:e5:56:61:8d:
d8:b8:ef:a8:60:99:98:63:73:7a:60:f6:3f:64:14:
37:5e:2e:c7:2d:46:43:ff:1c:82:61:5e:6a:a3:8d:
95:54:b2:74:77:95:33:39:71:2d:a8:86:e2:95:90:
7a:6b:26:c1:59:11:b8:e3:8a:d7:70:af:a8:14:de:
12:71:af:8a:32:9e:60:3a:25:35:ff:dd:62:99:35:
a8:7e:35:42:d6:ed:db:45:93:bb:f0:f0:ae:d5:76:
f4:bb:de:c3:09:64:98:9d:f3:e0:24:28:99:cd:64:
32:c8:3e:a3:e2:d0:c4:a0:af:ee:d1:a8:32:c0:b3:
38:4f:32:b6:15:4e:e2:2d:d4:6d:74:f9:d0:18:79:
18:fa:55:03:42:7f:65:9d:c5:ff:f3:59:56:a3:44:
bc:17:fb:bb:d0:d2:7d:5c:0a:31:c3:3f:7a:75:aa:
d5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:21:1D:66:0E:BF:39:0E:65:EB:6E:27:34:0A:34:42:2A:DB:D1:A6
X509v3 Authority Key Identifier:
keyid:19:11:57:E9:95:4C:EC:88:90:C6:18:CC:07:26:F0:07:4E:91:0E:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:7e:14:86:2c:dc:a9:2e:a2:c0:fc:9a:89:25:b8:55:bb:b0:
47:ca:0f:e0:e1:09:c2:e0:06:14:a0:32:f9:a1:15:67:99:4d:
8a:1b:f0:3c:6d:9e:e7:44:ef:9d:c2:cd:72:1e:48:ce:72:82:
6d:94:d5:c5:d2:4d:e6:b9:71:6c:fa:91:5a:02:74:eb:b5:53:
ef:a2:13:d6:e6:af:49:bd:3e:fb:e7:39:ee:eb:d9:4b:8c:1d:
e5:67:92:20:6a:a2:db:06:fb:4d:e3:0d:70:d8:43:74:cb:56:
fc:65:ad:4d:40:8f:15:fb:6f:9d:96:91:8b:d7:97:e7:43:ad:
64:7b:bc:0b:52:aa:86:87:28:70:59:70:fa:46:55:2a:1a:36:
d6:42:8f:24:6d:9f:b5:36:ae:ec:4e:6e:dc:b5:1a:a4:13:b5:
b1:2c:60:18:7a:c9:58:15:07:52:ea:ad:97:56:61:86:64:65:
f3:e3:b1:a1:ab:8b:42:21:de:aa:4c:5d:96:66:17:27:c4:31:
08:ca:ea:c5:14:2f:2e:87:71:3e:0e:6f:2c:34:f1:50:9a:ab:
fd:d8:28:01:fe:0a:48:bb:4c:49:f9:0f:3f:0b:bf:4d:52:45:
f3:9a:87:70:6f:b4:32:3d:7c:9e:78:3e:d0:dd:8b:04:99:6a:
bb:55:47:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:38:47 2026 by rpki-client