
$ rpki-client -vvf rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft
File: GHL5iLZXI3g3mSN-VU28xuSdFLA.mft (raw, json)
Hash identifier: i8Mg0J+2ews91K358AuyQFD/p/S2BE5CoIqQrLIAaFQ=
Subject key identifier: 4B:1E:96:19:52:CC:64:7B:38:FE:11:C4:F6:C8:F7:1A:63:CD:2F:76
Authority key identifier: 18:72:F9:88:B6:57:23:78:37:99:23:7E:55:4D:BC:C6:E4:9D:14:B0
Certificate issuer: /CN=A919986F/serialNumber=1872F988B65723783799237E554DBCC6E49D14B0
Certificate serial: 0BD0
Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft
Manifest number: 0BD0
Signing time: Wed 22 Jul 2026 15:39:37 +0000
Manifest this update: Wed 22 Jul 2026 15:39:37 +0000
Manifest next update: Wed 29 Jul 2026 15:39:37 +0000
Files and hashes: 1: GHL5iLZXI3g3mSN-VU28xuSdFLA.crl (hash: 3Qm/Gtzh+3e3a0GUtKYmArngTXDUWNtxTQPbVyCEkMw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.crl
rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:39:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3024 (0xbd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919986F, serialNumber=1872F988B65723783799237E554DBCC6E49D14B0
Validity
Not Before: Jul 22 15:39:37 2026 GMT
Not After : Jul 29 15:39:37 2026 GMT
Subject: CN=6a60e439-4e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c5:6d:98:67:d5:af:00:6c:db:ea:fe:ee:e9:
2e:b2:37:73:c4:88:83:21:3b:f3:26:e8:60:26:1e:
f6:c2:f1:c5:d1:9d:5d:ae:10:13:c6:e6:7c:72:2f:
1d:16:62:bb:64:45:ec:34:9c:23:3d:b5:a9:4a:cd:
54:d3:ee:c6:f6:3c:8c:58:57:49:ee:fc:ca:3e:c5:
66:b1:75:ed:03:aa:50:04:e8:85:78:45:88:1e:eb:
c6:cd:e9:2b:48:66:75:0b:65:82:57:3d:9e:76:41:
8f:e2:ac:63:a6:6e:6e:48:75:43:ef:44:4d:85:5e:
f2:a6:f5:e5:7f:8c:7d:80:63:af:e4:48:d7:f7:4a:
15:eb:0d:82:8c:16:b7:97:8e:72:00:ee:69:0b:46:
ee:7d:d5:7e:58:81:f1:25:5d:7a:65:24:e2:42:d2:
a4:7d:ac:8f:03:ce:d2:cc:33:9f:39:76:b9:94:84:
7d:c2:33:25:00:2c:06:49:b7:8e:f9:f8:30:f1:54:
c6:97:c9:e1:de:9c:00:2d:23:f9:a6:a7:28:3f:4c:
2c:61:0d:af:31:ea:a8:59:8b:d3:89:df:b8:d7:69:
20:32:f0:9e:25:dc:20:ac:e5:2c:8d:7d:f6:f7:f3:
4a:d9:08:11:b7:ec:35:0e:4a:68:f8:e3:f1:df:78:
d8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:1E:96:19:52:CC:64:7B:38:FE:11:C4:F6:C8:F7:1A:63:CD:2F:76
X509v3 Authority Key Identifier:
keyid:18:72:F9:88:B6:57:23:78:37:99:23:7E:55:4D:BC:C6:E4:9D:14:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:5f:90:94:e3:f9:72:b6:6d:09:b4:6b:96:83:69:05:81:99:
64:6f:f6:f4:01:94:b4:f3:cb:61:26:07:38:a3:5d:be:5a:fa:
a0:6d:43:d4:50:7d:99:1b:de:f4:1d:05:10:d5:14:5a:34:e0:
32:07:95:1c:79:8a:2b:0a:a6:4c:8f:d0:2d:9a:1d:6b:ab:48:
33:58:19:ae:2e:12:0f:62:eb:ff:15:d2:ba:b4:77:2c:eb:f1:
ec:25:3f:53:f8:cb:4e:ba:b0:77:ff:ac:13:df:09:84:05:04:
b2:b4:e5:ef:98:29:1b:07:27:5d:18:c4:5e:51:ba:ec:67:d9:
b3:95:63:6a:e9:0b:06:54:b3:94:af:97:e3:74:7c:9b:74:a3:
c1:a2:7e:69:00:4b:d6:35:5c:98:fe:a8:cf:ae:be:70:41:1f:
6f:1a:5c:25:04:ad:46:bc:82:53:33:99:75:b1:5e:15:1c:fd:
da:1b:f3:47:c5:13:63:13:4d:75:f0:3a:00:27:52:ab:b2:69:
50:1d:8e:b1:eb:89:9d:88:82:1a:2e:b5:df:33:b0:8c:e8:fd:
6d:93:ae:62:8a:27:59:73:e4:61:80:e3:6c:b3:a9:a7:15:80:
09:c5:28:f5:0b:00:39:78:3c:57:fa:3f:91:98:01:58:85:ae:
78:c0:38:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:40:56 2026 by rpki-client