
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.mft
File: GHkad7eTMW9ffev2Atp8TmnIvGs.mft (raw, json)
Hash identifier: A58Qzrr+KvyKJ09efmXJhLDt/F/YgzHgJV7eU5Kh18Y=
Subject key identifier: 39:8B:D9:F6:A7:D2:3C:18:DD:47:95:D3:E9:63:A1:CA:8B:95:57:BC
Authority key identifier: 18:79:1A:77:B7:93:31:6F:5F:7D:EB:F6:02:DA:7C:4E:69:C8:BC:6B
Certificate issuer: /CN=A9185259/serialNumber=18791A77B793316F5F7DEBF602DA7C4E69C8BC6B
Certificate serial: 99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHkad7eTMW9ffev2Atp8TmnIvGs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.mft
Manifest number: 99
Signing time: Thu 23 Jul 2026 09:13:04 +0000
Manifest this update: Thu 23 Jul 2026 09:13:04 +0000
Manifest next update: Thu 30 Jul 2026 09:13:04 +0000
Files and hashes: 1: GHkad7eTMW9ffev2Atp8TmnIvGs.crl (hash: 1cqhz9p/EXrae/CVCW49qFOcS6BYuzovbWtnX0Cqc5E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.crl
rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHkad7eTMW9ffev2Atp8TmnIvGs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:13:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153 (0x99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185259, serialNumber=18791A77B793316F5F7DEBF602DA7C4E69C8BC6B
Validity
Not Before: Jul 23 09:13:04 2026 GMT
Not After : Jul 30 09:13:04 2026 GMT
Subject: CN=6a61db20-1262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e2:db:b0:aa:6b:39:b4:da:6e:7d:89:5c:8e:
b4:de:0d:d3:f6:18:dc:b4:ae:ce:26:f8:85:a8:f4:
59:e2:df:4e:64:4b:24:4b:a3:81:01:3e:c4:81:9e:
83:a7:46:5a:5a:8e:2e:5b:9f:a4:67:81:bc:3f:96:
06:d0:bd:3b:21:ac:d8:db:02:c0:31:80:94:a8:2c:
f5:80:99:7f:c5:30:12:a9:f2:ff:53:62:2b:2e:88:
47:dc:44:92:40:3e:0a:d6:0e:cd:d6:02:1b:64:5c:
d9:3c:85:28:0b:5b:64:d4:b2:3a:57:32:86:b3:ee:
ad:42:3d:ce:42:3c:ff:10:e5:b3:65:cc:5d:9f:17:
c7:8d:ef:f1:d9:b2:18:19:e3:0f:7d:4a:fc:8f:ac:
c6:aa:00:35:03:3e:ac:01:5e:50:88:c7:cd:75:83:
e4:80:67:7c:95:f2:05:23:f4:7d:c4:d1:aa:7e:3e:
5d:dd:89:e2:15:c9:5c:ba:25:65:79:cd:31:e6:72:
cb:54:58:9a:86:d0:6f:85:ad:e5:01:17:86:f9:03:
de:51:b9:52:68:d3:f9:84:34:bc:37:31:0d:27:d9:
ba:ad:ab:ec:30:42:5e:b8:c6:2f:b1:40:08:3b:77:
d1:ac:45:26:3b:10:14:6b:1d:5a:ea:cb:ba:78:fe:
23:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:8B:D9:F6:A7:D2:3C:18:DD:47:95:D3:E9:63:A1:CA:8B:95:57:BC
X509v3 Authority Key Identifier:
keyid:18:79:1A:77:B7:93:31:6F:5F:7D:EB:F6:02:DA:7C:4E:69:C8:BC:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHkad7eTMW9ffev2Atp8TmnIvGs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:f4:7b:7c:da:3c:d0:99:d0:79:91:d3:e2:8e:cc:e2:4c:c1:
7f:62:a1:d3:8b:31:3d:e5:aa:bf:66:0e:24:a3:92:8b:a6:11:
46:80:12:07:fb:ac:f0:2e:86:c8:69:8e:18:11:5f:88:a4:a0:
01:9f:4b:04:20:40:18:ce:3a:53:bf:5e:80:d1:7b:86:cb:0a:
d2:5b:40:38:a1:7d:e3:96:26:91:95:dc:11:31:4c:58:f4:3e:
fc:d1:b3:95:01:27:9b:fa:79:64:55:8a:1d:20:9c:6b:b7:fd:
56:e4:41:76:97:13:2a:84:aa:74:bb:10:7c:78:bd:f3:80:38:
5b:ca:b2:88:f4:45:8b:f7:8d:04:ae:c2:0c:c9:da:ae:1e:70:
64:ee:b2:42:57:93:40:eb:e8:28:1c:26:22:54:d0:50:a6:23:
78:71:d2:4d:20:87:47:ef:68:d9:44:8a:e6:8f:e4:32:f9:ba:
f8:0f:bf:40:fe:0f:71:af:02:e8:fc:01:92:46:12:03:ab:f2:
74:37:cb:a8:75:86:fc:78:a1:ac:7e:97:bf:49:f4:e8:ac:4e:
74:fb:b2:f5:d8:8e:7a:90:65:54:52:a7:87:60:3d:0f:61:13:
68:4c:75:98:6f:11:62:88:92:a6:df:83:13:1f:1f:03:6a:2b:
7f:03:24:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:43:54 2026 by rpki-client