
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft
File: GHAMs9ZQejMEuusnDe7RMBzj2QI.mft (raw, json)
Hash identifier: MqPV2ztf4B51kFVtLF1AMoyMTso1afRI26zxPuGPpFQ=
Subject key identifier: 4C:58:3A:0D:AA:EF:FC:C3:AD:78:38:49:76:2C:41:60:12:D4:90:35
Authority key identifier: 18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02
Certificate issuer: /CN=A912FBCF/serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902
Certificate serial: 193E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft
Manifest number: 18F7
Signing time: Tue 12 May 2026 16:27:13 +0000
Manifest this update: Tue 12 May 2026 16:27:13 +0000
Manifest next update: Tue 19 May 2026 16:27:13 +0000
Files and hashes: 1: GHAMs9ZQejMEuusnDe7RMBzj2QI.crl (hash: 59cz1DERQFR2BFFoCjPTRxluCE1st+fbWf5UMAi4GjM=)
2: BB9C86EA0B0F11E89DF24170C4F9AE02.roa (hash: RgXjb/3wdjxxFYUoIZCRdIJiherawNnAPpUhLQuHKPg=)
3: C2BE71E8AA9A11E7B4776E52C4F9AE02.roa (hash: 3C64H5TTmCuYQdL00baZE5DrSlLKNNzObsXzg0r0ppM=)
4: E8780C5EAC8011E79D9EAC60C4F9AE02.roa (hash: opW5wPBuNhAuRVkS5AxsUE3oeDI1EolWp41aFUC/CMs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl
rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:27:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6462 (0x193e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FBCF, serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902
Validity
Not Before: May 12 16:27:13 2026 GMT
Not After : May 19 16:27:13 2026 GMT
Subject: CN=6a0354e1-dda1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2d:7d:f1:6b:c9:8f:49:71:ae:c4:a1:9e:ce:
f8:67:ba:d7:a2:3b:b9:a8:aa:0b:61:97:1f:fd:71:
55:b6:ab:14:2e:93:66:15:25:56:fd:e6:48:43:74:
61:e6:db:4d:bf:6b:7b:f5:e7:e5:85:de:1a:ad:c4:
90:d6:f1:78:cc:ec:42:5e:c4:0f:13:4e:e8:0b:40:
65:09:21:63:7f:ac:da:ae:62:17:76:d7:06:a2:74:
8a:12:c9:73:06:ab:d9:b5:47:d1:c5:a6:fc:6b:d3:
62:b9:84:cb:b7:09:b0:45:11:18:80:f3:65:15:e8:
5c:11:8f:64:dc:65:40:4f:56:b1:10:ce:c6:d3:24:
49:57:f7:b8:3b:19:1b:1f:8a:d3:fc:1c:f1:4c:05:
6b:85:36:4c:3d:91:81:cb:4c:9c:9e:46:c7:be:4f:
8b:c9:2e:21:f9:7f:c7:f6:4e:dd:af:51:f1:2e:05:
b4:ba:0c:38:0a:a9:ea:5d:13:8f:80:64:c0:4d:cb:
b6:cd:b5:2e:2a:44:e8:1c:86:b9:e5:62:c5:d4:00:
9b:a2:1e:ef:79:a0:37:bd:7f:99:3b:f5:4d:a0:2b:
31:a5:ee:95:8f:c6:5f:4a:f5:af:28:35:4c:60:cd:
c1:00:2c:10:4d:42:46:2b:4a:fd:41:1e:e2:9d:4e:
5f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:58:3A:0D:AA:EF:FC:C3:AD:78:38:49:76:2C:41:60:12:D4:90:35
X509v3 Authority Key Identifier:
keyid:18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:2c:2e:18:47:36:48:ac:75:fa:15:51:6e:2e:f1:83:1f:a5:
7c:4b:f8:dc:7d:26:67:8e:dd:14:f6:ca:cc:0d:77:08:e3:53:
27:17:6e:5c:f6:b4:c9:11:a8:81:e6:a0:99:14:93:5f:12:a5:
94:c0:89:63:a7:18:7f:13:7e:6b:2d:db:08:a2:44:44:05:11:
4b:b2:e1:27:e8:4e:8f:31:e9:2c:0f:54:fc:b3:5c:15:90:0d:
dc:ba:7a:9a:1c:87:31:ab:ee:98:28:c2:e2:a2:af:6c:b4:77:
87:35:8c:10:90:2a:21:2a:04:46:99:19:67:5c:7d:b2:fe:24:
54:f9:1e:52:05:0f:68:23:4f:e4:fd:bd:55:b8:34:2f:5f:b7:
ce:0b:7c:6c:79:26:a7:a5:cf:49:29:85:9c:7f:ab:57:90:ec:
7e:4f:38:a0:c8:34:eb:49:9f:57:b3:b8:6a:a9:44:8a:7c:6f:
fe:01:e1:33:61:2b:5d:68:39:b1:17:2b:88:79:b4:12:d6:4d:
63:89:42:28:ec:cd:80:a5:5a:4d:0c:2f:33:29:cb:67:f9:ef:
b2:7d:53:47:7c:c0:4a:60:78:a8:c3:91:76:b4:de:23:80:34:
3f:ed:4a:83:00:97:19:af:c2:44:6e:a8:10:04:e6:75:77:61:
d6:03:66:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:32:42 2026 by rpki-client