
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.mft
File: GHkad7eTMW9ffev2Atp8TmnIvGs.mft (raw, json)
Hash identifier: XHKVNTQEpbi1NpyYpu9QHLzoYh+A8chUFk6diprkiEA=
Subject key identifier: FD:03:51:E6:D7:2B:ED:9C:4F:F2:B9:97:5F:0F:C9:11:9B:FD:46:93
Authority key identifier: 18:79:1A:77:B7:93:31:6F:5F:7D:EB:F6:02:DA:7C:4E:69:C8:BC:6B
Certificate issuer: /CN=A9185259/serialNumber=18791A77B793316F5F7DEBF602DA7C4E69C8BC6B
Certificate serial: 5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHkad7eTMW9ffev2Atp8TmnIvGs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.mft
Manifest number: 5C
Signing time: Wed 25 Mar 2026 07:16:09 +0000
Manifest this update: Wed 25 Mar 2026 07:16:09 +0000
Manifest next update: Wed 01 Apr 2026 07:16:09 +0000
Files and hashes: 1: GHkad7eTMW9ffev2Atp8TmnIvGs.crl (hash: zrZMGjIwunWaYjENnkJqPU7I8BQ4MFV9fD7m1KFL83I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.crl
rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHkad7eTMW9ffev2Atp8TmnIvGs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:16:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92 (0x5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185259, serialNumber=18791A77B793316F5F7DEBF602DA7C4E69C8BC6B
Validity
Not Before: Mar 25 07:16:09 2026 GMT
Not After : Apr 1 07:16:09 2026 GMT
Subject: CN=69c38bb9-605b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bf:18:ef:4e:35:ac:4b:f7:0e:46:66:ef:96:
03:f7:cd:be:b8:d9:24:51:6a:6d:b0:9e:53:6e:3b:
49:fd:58:50:41:77:2a:0f:fa:b6:4b:1d:e3:a5:96:
88:9d:93:ae:93:34:4b:14:f6:d0:85:35:a0:a1:30:
9a:b9:8f:a8:a9:e4:e3:c2:0b:26:2f:e9:de:2f:90:
9e:c1:c1:93:c5:14:fa:27:e5:6b:43:8c:7a:c7:be:
e2:0f:de:95:eb:fa:2f:37:d5:75:e3:00:6f:28:b9:
35:fc:5a:3e:85:81:48:b0:40:48:69:e6:9c:f5:1d:
55:de:09:4d:83:dc:4b:0e:5e:42:43:69:18:dc:fc:
4d:4a:db:eb:29:6e:4d:66:f3:4e:b3:0b:78:70:6b:
ab:23:a7:a8:65:0b:87:6f:e1:bb:b9:21:33:a9:7c:
8f:aa:6e:99:83:9d:49:a2:6b:0e:78:2f:d6:05:bc:
dd:cd:35:a3:ea:b7:f6:1e:e8:77:b7:37:02:ef:10:
23:59:74:0d:ff:c6:91:e8:36:b1:26:5d:96:70:73:
63:ba:c6:1a:c6:84:c6:a8:3d:1d:d6:a5:e7:c0:05:
d1:a3:d7:2f:3d:c1:94:39:cb:e4:9e:d2:d7:42:05:
9d:f1:89:81:11:38:44:4f:d7:d9:04:29:76:6c:05:
22:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:03:51:E6:D7:2B:ED:9C:4F:F2:B9:97:5F:0F:C9:11:9B:FD:46:93
X509v3 Authority Key Identifier:
keyid:18:79:1A:77:B7:93:31:6F:5F:7D:EB:F6:02:DA:7C:4E:69:C8:BC:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHkad7eTMW9ffev2Atp8TmnIvGs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:ca:fc:96:cf:b9:e2:7e:0e:d3:91:16:16:84:89:39:67:7d:
f3:a3:9f:af:1f:79:6a:e4:71:9c:78:33:63:88:00:2a:a2:eb:
80:9f:3a:00:c7:fb:eb:c8:c3:5d:8e:99:37:eb:5d:f5:61:d9:
55:56:10:80:0c:b2:69:61:f2:48:70:f9:3e:8b:85:d3:1e:88:
f8:c6:cc:27:60:9d:30:ce:30:aa:7b:d0:5e:4c:10:35:ce:30:
37:12:f3:47:7d:e3:0a:a1:86:a8:e5:28:93:73:9c:df:5e:ab:
41:5a:21:d9:82:88:c2:b5:27:87:44:65:49:ad:40:08:c0:b9:
bf:bd:88:bd:9e:b5:e9:b6:38:fa:a0:de:67:d1:92:cb:2a:d9:
f8:5d:80:97:c3:4b:9f:6a:21:f3:9f:24:b9:0b:c6:a7:f5:ce:
21:05:d4:77:0c:b1:a2:21:eb:c1:c4:7d:e6:29:3c:96:9e:c5:
bf:10:47:62:6e:6a:40:7d:5c:0d:6f:37:87:a4:da:e5:c6:e8:
4e:cf:86:a3:1f:e9:b8:dc:9b:4d:c2:1a:69:1a:cb:fa:eb:fa:
f1:34:a0:fd:94:eb:7b:e7:40:d0:c7:4e:e0:62:b9:cf:1b:e5:
a4:1f:16:85:43:2b:84:60:ec:d5:62:6c:d6:cc:f7:c8:99:84:
01:98:91:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:43:15 2026 by rpki-client