
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.mft
File: GhgU2ojNOn_lNTsbW4hNytEkeJY.mft (raw, json)
Hash identifier: z9R6BX8Pu8n3UwJqOndYa+iLpqZQ54YvsVuCSw+kGKo=
Subject key identifier: 7F:88:A2:31:B3:33:5A:D6:D0:07:FA:3A:C5:14:65:C4:AA:50:33:4F
Authority key identifier: 1A:18:14:DA:88:CD:3A:7F:E5:35:3B:1B:5B:88:4D:CA:D1:24:78:96
Certificate issuer: /CN=A91B5FA7/serialNumber=1A1814DA88CD3A7FE5353B1B5B884DCAD1247896
Certificate serial: 8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhgU2ojNOn_lNTsbW4hNytEkeJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.mft
Manifest number: 8C
Signing time: Sun 27 Sep 2026 08:07:14 +0000
Manifest this update: Sun 27 Sep 2026 08:07:14 +0000
Manifest next update: Sun 04 Oct 2026 08:07:14 +0000
Files and hashes: 1: GhgU2ojNOn_lNTsbW4hNytEkeJY.crl (hash: QiHdmFXMgg7zI7v57j7tY/sQO2sMqCvPzStXZjE0V+w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.crl
rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhgU2ojNOn_lNTsbW4hNytEkeJY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 08:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140 (0x8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5FA7, serialNumber=1A1814DA88CD3A7FE5353B1B5B884DCAD1247896
Validity
Not Before: Sep 27 08:07:14 2026 GMT
Not After : Oct 4 08:07:14 2026 GMT
Subject: CN=6ab8ceb2-bba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:32:4d:87:ce:34:2f:8a:47:09:49:34:f8:2a:
df:9e:db:c6:f6:15:cb:e5:67:49:b1:47:76:d0:52:
e9:48:63:5c:01:32:76:55:1e:cb:0f:c4:ad:b3:f5:
6b:91:6a:8d:c7:f7:cb:c4:32:b2:68:9a:4a:97:49:
06:00:30:f7:bf:98:ce:86:38:ec:77:6a:11:7a:31:
a4:ad:f2:9f:52:95:4b:47:fe:49:79:e4:96:61:04:
67:14:22:c2:34:05:7c:2f:97:56:0a:20:a3:ab:b8:
b9:2a:ce:db:1c:ef:c8:c1:ed:7a:7d:08:8c:48:3a:
92:75:bd:23:5f:a0:8d:a4:74:dc:88:6a:4b:03:8d:
cf:2e:b0:07:26:1f:09:7e:58:b8:0e:88:ff:19:b1:
a2:7d:64:11:c8:a5:2a:34:29:b9:3e:2c:9b:dd:a4:
af:95:36:52:93:a4:51:d9:50:e9:4d:ca:a8:f2:ea:
cc:b4:69:82:66:33:89:8c:81:54:7f:06:4f:8e:3a:
b1:37:62:8d:be:f4:3f:86:92:7a:fe:ce:07:59:d4:
fc:5d:72:38:b7:04:0c:0e:e8:fb:da:b5:52:43:34:
34:c6:a3:b7:2f:09:2b:ef:82:ab:1c:02:fb:a0:15:
e9:aa:dc:05:a4:75:27:3c:ad:fd:b7:6f:b6:e1:fc:
7a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:88:A2:31:B3:33:5A:D6:D0:07:FA:3A:C5:14:65:C4:AA:50:33:4F
X509v3 Authority Key Identifier:
keyid:1A:18:14:DA:88:CD:3A:7F:E5:35:3B:1B:5B:88:4D:CA:D1:24:78:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhgU2ojNOn_lNTsbW4hNytEkeJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:0c:d5:64:06:86:b8:fe:24:14:f9:8c:8e:07:d4:4c:9c:3d:
9a:bc:52:82:49:bb:60:5c:22:83:38:fa:19:54:35:c8:0a:35:
c2:26:ac:b7:d1:12:dd:d7:b4:20:d5:bd:d0:e2:40:24:77:4a:
7c:10:f1:eb:e7:9f:67:00:86:ba:f2:9c:35:1d:65:e6:b6:bc:
68:e6:fe:46:3f:e0:e4:8a:6a:0c:03:c7:a2:5a:e7:10:fe:5d:
d5:16:97:ad:30:e8:c1:2c:83:6c:b7:c0:e3:e2:a3:e4:af:2b:
ce:f6:7c:11:93:d1:c5:b0:71:29:76:47:85:50:a7:be:2a:11:
47:27:ad:47:6d:7b:f9:ac:c9:a8:43:d4:fc:d2:32:be:76:87:
26:90:8d:ce:d3:8b:2b:be:cd:4c:a7:c3:cf:18:d4:96:da:ac:
21:2d:ce:94:ae:38:77:50:74:94:57:a2:bf:64:64:f8:79:58:
06:93:d3:ba:bb:d7:9e:ad:f9:74:78:ff:c0:a4:ff:81:b2:8a:
99:20:ae:78:0b:83:35:92:85:53:5c:31:f1:47:0e:8d:8e:c2:
b3:d7:52:80:e0:85:2d:ef:8b:64:00:76:28:fc:8f:61:81:26:
85:5d:26:d1:ef:73:5d:6b:02:c3:9f:a9:08:63:56:f6:c9:18:
20:c6:64:25
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjVGQTcxMTAvBgNVBAUTKDFBMTgxNERBODhDRDNBN0ZFNTM1M0IxQjVCODg0RENB
RDEyNDc4OTYwHhcNMjYwOTI3MDgwNzE0WhcNMjYxMDA0MDgwNzE0WjAYMRYwFAYD
VQQDEw02YWI4Y2ViMi1iYmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtDJNh840L4pHCUk0+CrfntvG9hXL5WdJsUd20FLpSGNcATJ2VR7LD8Sts/Vr
kWqNx/fLxDKyaJpKl0kGADD3v5jOhjjsd2oRejGkrfKfUpVLR/5JeeSWYQRnFCLC
NAV8L5dWCiCjq7i5Ks7bHO/Iwe16fQiMSDqSdb0jX6CNpHTciGpLA43PLrAHJh8J
fli4Doj/GbGifWQRyKUqNCm5Piyb3aSvlTZSk6RR2VDpTcqo8urMtGmCZjOJjIFU
fwZPjjqxN2KNvvQ/hpJ6/s4HWdT8XXI4twQMDuj72rVSQzQ0xqO3Lwkr74KrHAL7
oBXpqtwFpHUnPK39t2+24fx6AwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH+IojGz
M1rW0Af6OsUUZcSqUDNPMB8GA1UdIwQYMBaAFBoYFNqIzTp/5TU7G1uITcrRJHiW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUZBNy83RDAzMDdFNEVD
MTkxMUYwOEFFRkZDQjgzQjZGNTZCQy9HaGdVMm9qTk9uX2xOVHNiVzRoTnl0RWtl
SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0doZ1Uyb2pOT25fbE5Uc2JXNGhOeXRFa2VKWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NUZBNy83RDAzMDdFNEVDMTkxMUYwOEFFRkZDQjgzQjZGNTZCQy9HaGdVMm9qTk9u
X2xOVHNiVzRoTnl0RWtlSlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAQzVZAaGuP4kFPmMjgfUTJw9mrxSgkm7YFwigzj6GVQ1yAo1wiast9ES3de0
INW90OJAJHdKfBDx6+efZwCGuvKcNR1l5ra8aOb+Rj/g5IpqDAPHolrnEP5d1RaX
rTDowSyDbLfA4+Kj5K8rzvZ8EZPRxbBxKXZHhVCnvioRRyetR217+azJqEPU/NIy
vnaHJpCNztOLK77NTKfDzxjUltqsIS3OlK44d1B0lFeiv2Rk+HlYBpPTurvXnq35
dHj/wKT/gbKKmSCueAuDNZKFU1wx8UcOjY7Cs9dSgOCFLe+LZAB2KPyPYYEmhV0m
0e9zXWsCw5+pCGNW9skYIMZkJQ==
-----END CERTIFICATE-----
Generated at Tue Sep 29 05:03:57 2026 by rpki-client