
$ rpki-client -vvf rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft
File: GHdbe2us8oHq7XjadoaGguUxsfA.mft (raw, json)
Hash identifier: bJVYar3CYXC2DKAKOeTQ9tJJy1LBc8UIRSJitJ0uzi4=
Subject key identifier: 0D:60:1C:B6:2C:92:3C:58:97:8A:78:A8:AD:A5:C7:71:B9:E3:16:20
Authority key identifier: 18:77:5B:7B:6B:AC:F2:81:EA:ED:78:DA:76:86:86:82:E5:31:B1:F0
Certificate issuer: /CN=A9115A98/serialNumber=18775B7B6BACF281EAED78DA76868682E531B1F0
Certificate serial: 10DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHdbe2us8oHq7XjadoaGguUxsfA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft
Manifest number: 10CF
Signing time: Tue 12 May 2026 17:20:29 +0000
Manifest this update: Tue 12 May 2026 17:20:28 +0000
Manifest next update: Tue 19 May 2026 17:20:28 +0000
Files and hashes: 1: GHdbe2us8oHq7XjadoaGguUxsfA.crl (hash: z4sL3H+dcDV89rHjIST4PxhXuMDgErbVsgX8izI21T4=)
2: 6CE4307243AB11E98FAE6F0AC4F9AE02.roa (hash: HxPDHKbAptGURrp1VPcHC1Bsg9OYOIPrENYm1X1q9Hw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.crl
rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHdbe2us8oHq7XjadoaGguUxsfA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:20:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4314 (0x10da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9115A98, serialNumber=18775B7B6BACF281EAED78DA76868682E531B1F0
Validity
Not Before: May 12 17:20:28 2026 GMT
Not After : May 19 17:20:28 2026 GMT
Subject: CN=6a03615d-139b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ea:19:d2:a5:42:aa:76:9b:47:69:7c:a8:00:
06:fe:9b:bc:b5:a3:24:4f:fc:06:69:23:a5:37:a2:
8f:17:02:2c:ff:c6:ad:be:f2:45:76:67:9a:41:06:
67:ad:85:d6:0c:57:2d:7d:98:a6:29:44:7c:e2:27:
4e:05:6d:89:27:1b:d5:58:d6:53:e7:e1:c8:1f:14:
e9:b9:40:77:88:56:59:65:5e:28:42:0c:77:38:d2:
fa:fc:49:6c:5f:48:37:23:08:21:a9:13:07:f5:c5:
fe:34:da:39:a0:d3:f6:9b:f0:71:97:72:a4:4e:b2:
04:96:4d:ce:b0:4f:60:1c:c5:69:0b:60:f9:e7:0d:
35:b3:de:2c:8d:4e:89:eb:d6:c4:cc:19:44:84:9c:
c5:d5:6e:3b:7e:88:cf:61:9a:8b:d3:02:0c:ca:e2:
44:c5:09:28:0f:90:05:3c:ae:1c:b8:73:dc:44:11:
58:75:d5:66:3b:28:f5:04:8e:f8:4c:42:4a:db:61:
73:76:cb:90:cd:66:ac:2c:9c:00:44:f0:4c:0b:59:
b8:8a:a5:d4:9f:6a:96:61:c8:9a:1f:15:93:b1:9d:
fe:e9:fd:af:f5:86:41:43:37:84:03:ae:f4:4d:b9:
00:f0:d2:39:6b:90:87:78:bf:be:bd:09:b9:16:50:
b1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:60:1C:B6:2C:92:3C:58:97:8A:78:A8:AD:A5:C7:71:B9:E3:16:20
X509v3 Authority Key Identifier:
keyid:18:77:5B:7B:6B:AC:F2:81:EA:ED:78:DA:76:86:86:82:E5:31:B1:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHdbe2us8oHq7XjadoaGguUxsfA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:a6:1c:36:ac:95:8d:06:a1:b8:49:ef:56:c1:29:c7:70:1b:
bc:5b:7f:34:a3:c3:b5:73:29:fb:d4:87:29:1b:c5:75:fb:e8:
1d:d0:51:70:59:7a:a7:b9:b4:1c:5b:16:00:81:97:59:9c:bf:
fe:e3:5a:b2:85:47:76:31:06:6a:9f:79:9d:fe:e3:1a:7b:51:
c5:56:2a:ed:9a:77:f1:f1:7b:8f:ef:99:90:e0:06:2f:e9:c1:
b1:c8:3c:13:d1:d0:28:3c:4b:61:92:39:61:10:f1:60:02:52:
fe:40:46:43:31:b2:b0:01:bd:61:fb:af:fa:c1:1e:04:88:25:
64:d8:af:00:37:74:6c:82:f9:d6:91:96:88:28:13:5c:7b:e3:
fd:75:17:03:41:22:b9:d7:d7:42:4e:ed:71:c6:a6:ca:3a:56:
ac:ee:d5:43:21:0b:ec:63:05:11:f5:ff:b1:91:ce:bc:18:06:
cb:13:4b:b2:4f:1b:fb:c8:ae:7b:b1:2b:34:c1:63:23:39:d0:
f7:79:f5:38:21:84:e6:8d:af:b1:f3:ee:ab:d9:c3:da:ee:79:
0a:75:2a:da:ee:7e:0d:cc:ea:fe:7b:22:c5:a5:60:ba:e8:04:
25:6f:bc:98:60:3e:13:18:25:06:ba:12:22:d7:bd:f0:7d:13:
6c:f7:d8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:47:17 2026 by rpki-client