
$ rpki-client -vvf rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft
File: GRFX6ZVM7IiQxhjMBybwB06RDio.mft (raw, json)
Hash identifier: PLXZZusIgHq27pLKhv3WiovCS4bz2eP7wnUppvWgn4c=
Subject key identifier: 68:F3:2B:FC:8B:D5:70:05:64:D6:E2:DC:66:B0:A3:93:6C:20:16:29
Authority key identifier: 19:11:57:E9:95:4C:EC:88:90:C6:18:CC:07:26:F0:07:4E:91:0E:2A
Certificate issuer: /CN=A916FA49/serialNumber=191157E9954CEC8890C618CC0726F0074E910E2A
Certificate serial: 1560
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft
Manifest number: 1555
Signing time: Thu 26 Mar 2026 16:45:24 +0000
Manifest this update: Thu 26 Mar 2026 16:45:23 +0000
Manifest next update: Thu 02 Apr 2026 16:45:23 +0000
Files and hashes: 1: GRFX6ZVM7IiQxhjMBybwB06RDio.crl (hash: Ciyf/SNJ0wvOZ/+oLhm+nRVcKpg2QMu8qw+pJJPqeh8=)
2: 0448C04E5CC211E8AC07E63AC4F9AE02.roa (hash: x7YXjzD8EFzf7N4rbQoqJB4eYFt5aSsAHJp7OOa/HsA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.crl
rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 16:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5472 (0x1560)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916FA49, serialNumber=191157E9954CEC8890C618CC0726F0074E910E2A
Validity
Not Before: Mar 26 16:45:23 2026 GMT
Not After : Apr 2 16:45:23 2026 GMT
Subject: CN=69c562a4-71a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c1:c3:c5:85:6a:87:94:51:a0:48:7d:c8:00:
33:0f:34:b1:a6:93:50:a4:f0:be:07:7b:a7:8f:b6:
ea:87:f6:84:1a:8b:0f:3e:b1:89:70:4a:7e:b8:df:
5c:71:1e:6e:14:df:d2:7c:ba:51:5d:1e:42:33:fe:
57:a4:1a:ca:19:95:22:bc:5a:86:84:59:98:68:08:
e7:8c:49:a2:92:eb:bb:e3:dc:ee:0c:b4:21:0f:df:
45:3f:5b:82:17:e2:3b:ed:30:99:0a:8f:be:34:98:
e5:33:24:f0:b5:7d:2b:b2:64:6c:6f:9c:e6:81:54:
df:e1:c1:00:78:10:49:51:fc:41:23:c5:5c:50:ca:
d2:86:87:80:a0:fe:5a:0c:d9:6d:31:24:1c:f2:f5:
3d:f4:98:12:ff:c7:2e:03:3a:cf:83:f1:c2:aa:3b:
6c:8b:79:ab:79:29:7a:37:79:fc:62:2c:ca:bb:d5:
fe:50:99:9b:3f:52:15:8b:0d:1f:9a:fd:31:8e:73:
85:d3:a5:cd:76:09:6c:b5:08:a9:eb:2f:0b:a4:dc:
76:39:d2:dd:7a:3f:f1:4a:8b:bc:f5:c9:15:bb:25:
26:44:12:3e:6c:10:15:a6:2a:8e:61:01:32:c7:27:
56:18:a3:4e:9d:be:3b:68:aa:d0:7c:6b:11:5e:d9:
e9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F3:2B:FC:8B:D5:70:05:64:D6:E2:DC:66:B0:A3:93:6C:20:16:29
X509v3 Authority Key Identifier:
keyid:19:11:57:E9:95:4C:EC:88:90:C6:18:CC:07:26:F0:07:4E:91:0E:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:6c:af:0e:20:b1:d9:b6:e2:f5:b0:70:56:73:0a:4c:20:d8:
73:27:64:92:7c:08:57:69:18:dc:58:45:32:1a:84:2c:d2:8f:
a2:6c:67:27:07:a8:38:df:5f:84:e6:19:bb:b4:d2:0f:3c:16:
de:34:f1:ee:a8:2a:62:38:90:04:ba:e1:8b:8e:b4:13:af:56:
d6:27:e5:f9:e3:8b:09:ce:04:c5:5d:b5:63:85:2a:d2:69:f7:
dc:7a:e9:4d:b7:c2:8b:29:3d:11:d8:0e:41:b1:c4:8e:85:de:
b2:17:09:7d:d1:77:34:db:e6:9f:51:a0:c7:80:bc:0b:2e:fa:
66:0e:3f:3f:0d:16:c3:f1:b7:fc:5c:88:3a:a4:6e:f2:5b:b5:
4e:79:d0:05:4d:ff:1b:2e:df:d2:43:11:5c:a4:0b:67:ec:f0:
d9:06:da:d1:b6:b0:df:65:e9:29:d5:26:4c:53:b9:c1:12:9a:
31:e8:30:d3:cb:7a:ee:72:b7:2a:04:aa:3d:97:2c:5d:7c:0b:
58:16:f5:71:02:79:25:ca:bb:ee:b1:3c:00:be:31:50:e6:e4:
e2:74:ab:0a:43:28:6e:3b:9b:31:86:b1:a1:7d:64:3f:c9:31:
2d:a8:fc:5b:d1:07:09:db:3b:71:c3:a6:70:76:83:e3:1c:3e:
5d:a4:6f:41
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkZBNDkxMTAvBgNVBAUTKDE5MTE1N0U5OTU0Q0VDODg5MEM2MThDQzA3MjZGMDA3
NEU5MTBFMkEwHhcNMjYwMzI2MTY0NTIzWhcNMjYwNDAyMTY0NTIzWjAYMRYwFAYD
VQQDEw02OWM1NjJhNC03MWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1sHDxYVqh5RRoEh9yAAzDzSxppNQpPC+B3unj7bqh/aEGosPPrGJcEp+uN9c
cR5uFN/SfLpRXR5CM/5XpBrKGZUivFqGhFmYaAjnjEmikuu749zuDLQhD99FP1uC
F+I77TCZCo++NJjlMyTwtX0rsmRsb5zmgVTf4cEAeBBJUfxBI8VcUMrShoeAoP5a
DNltMSQc8vU99JgS/8cuAzrPg/HCqjtsi3mreSl6N3n8YizKu9X+UJmbP1IViw0f
mv0xjnOF06XNdglstQip6y8LpNx2OdLdej/xSou89ckVuyUmRBI+bBAVpiqOYQEy
xydWGKNOnb47aKrQfGsRXtnpjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGjzK/yL
1XAFZNbi3Gawo5NsIBYpMB8GA1UdIwQYMBaAFBkRV+mVTOyIkMYYzAcm8AdOkQ4q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkE0OS83MDJEODEyNDVD
QzExMUU4OUEzNkI4MzdDNEY5QUUwMi9HUkZYNlpWTTdJaVF4aGpNQnlid0IwNlJE
aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dSRlg2WlZNN0lpUXhoak1CeWJ3QjA2UkRpby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RkE0OS83MDJEODEyNDVDQzExMUU4OUEzNkI4MzdDNEY5QUUwMi9HUkZYNlpWTTdJ
aVF4aGpNQnlid0IwNlJEaW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAuGyvDiCx2bbi9bBwVnMKTCDYcydkknwIV2kY3FhFMhqELNKPomxnJweoON9f
hOYZu7TSDzwW3jTx7qgqYjiQBLrhi460E69W1ifl+eOLCc4ExV21Y4Uq0mn33Hrp
TbfCiyk9EdgOQbHEjoXeshcJfdF3NNvmn1Ggx4C8Cy76Zg4/Pw0Ww/G3/FyIOqRu
8lu1TnnQBU3/Gy7f0kMRXKQLZ+zw2Qba0baw32XpKdUmTFO5wRKaMegw08t67nK3
KgSqPZcsXXwLWBb1cQJ5Jcq77rE8AL4xUObk4nSrCkMobjubMYaxoX1kP8kxLaj8
W9EHCds7ccOmcHaD4xw+XaRvQQ==
-----END CERTIFICATE-----
Generated at Fri Mar 27 08:48:40 2026 by rpki-client