
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B85E7/5143B874608611F19E4777E26E47A888/ghbCCBg3GK6QL0P2htUqRHMUc5g.mft
File: ghbCCBg3GK6QL0P2htUqRHMUc5g.mft (raw, json)
Hash identifier: 6FvSkOGvch7j0LAOhmX6+B/nJ2cjDxiZGELmR9UWKig=
Subject key identifier: 1A:D9:00:96:6E:6F:91:08:D3:F9:7A:11:B7:46:60:E5:30:CE:4B:83
Authority key identifier: 82:16:C2:08:18:37:18:AE:90:2F:43:F6:86:D5:2A:44:73:14:73:98
Certificate issuer: /CN=A91B85E7/serialNumber=8216C208183718AE902F43F686D52A4473147398
Certificate serial: 1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghbCCBg3GK6QL0P2htUqRHMUc5g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B85E7/5143B874608611F19E4777E26E47A888/ghbCCBg3GK6QL0P2htUqRHMUc5g.mft
Manifest number: 19
Signing time: Thu 23 Jul 2026 11:02:21 +0000
Manifest this update: Thu 23 Jul 2026 11:02:21 +0000
Manifest next update: Thu 30 Jul 2026 11:02:21 +0000
Files and hashes: 1: ghbCCBg3GK6QL0P2htUqRHMUc5g.crl (hash: Lpyz+PwtKnYsTiph1U53NTI2/yHgbjrUoIdT9ntKh9M=)
2: CCFC8F4A608611F181B017396F47A888.roa (hash: NX7Ssb4nWxHkVFaOlDGe8x1QhapCEO7PXneQ/Q5Nq70=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B85E7/5143B874608611F19E4777E26E47A888/ghbCCBg3GK6QL0P2htUqRHMUc5g.crl
rsync://rpki.apnic.net/member_repository/A91B85E7/5143B874608611F19E4777E26E47A888/ghbCCBg3GK6QL0P2htUqRHMUc5g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghbCCBg3GK6QL0P2htUqRHMUc5g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 11:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26 (0x1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B85E7, serialNumber=8216C208183718AE902F43F686D52A4473147398
Validity
Not Before: Jul 23 11:02:21 2026 GMT
Not After : Jul 30 11:02:21 2026 GMT
Subject: CN=6a61f4bd-78fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cf:1b:cc:90:d1:70:cf:2b:ed:d0:50:0e:72:
6c:82:da:b4:46:ab:9e:9a:54:6b:47:6a:60:19:f7:
5c:be:eb:b6:d7:04:1f:05:10:65:28:63:d5:2d:2a:
7f:2d:fc:7e:40:db:e5:c0:2d:fe:88:b6:99:a2:97:
85:38:5f:b7:1d:74:42:e1:15:e9:6f:79:b8:1f:df:
64:f0:a1:e4:3e:3b:26:ef:c9:3e:71:5f:72:c3:6a:
f3:43:d8:77:bd:45:a9:53:dd:9a:a4:f0:55:4f:c1:
d7:be:a8:83:00:ac:08:9f:98:df:fd:4f:ff:45:a0:
68:2b:53:f3:15:84:fe:10:5e:aa:37:7c:3a:b6:dc:
a0:10:88:bc:28:7d:fc:62:91:bd:25:2c:2d:d4:13:
5f:6e:33:6a:4f:a3:9a:a7:66:37:5f:3c:42:f4:24:
02:08:e7:76:cd:f9:c5:80:00:a1:bd:d5:70:80:0f:
ce:93:1d:24:65:80:b3:ba:d2:20:42:20:1b:7f:e9:
07:e1:09:31:e5:a9:8b:4c:64:dc:74:70:b3:de:62:
c4:d4:3b:5f:69:b7:31:11:36:59:22:b8:cd:d4:2b:
11:09:7f:44:4a:7a:43:b8:d8:22:fa:62:6d:1f:6d:
7a:61:18:fd:c0:f6:4b:29:df:e1:3b:24:01:7d:ad:
3d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D9:00:96:6E:6F:91:08:D3:F9:7A:11:B7:46:60:E5:30:CE:4B:83
X509v3 Authority Key Identifier:
keyid:82:16:C2:08:18:37:18:AE:90:2F:43:F6:86:D5:2A:44:73:14:73:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B85E7/5143B874608611F19E4777E26E47A888/ghbCCBg3GK6QL0P2htUqRHMUc5g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghbCCBg3GK6QL0P2htUqRHMUc5g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B85E7/5143B874608611F19E4777E26E47A888/ghbCCBg3GK6QL0P2htUqRHMUc5g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ff:8a:74:65:06:10:b4:2d:29:6c:32:29:0e:29:6a:a8:d0:
50:a4:ba:80:ca:b3:97:8c:5d:9f:19:a1:d1:86:71:8f:56:64:
ea:70:1b:97:ac:07:70:3f:51:b5:9d:25:f0:49:e4:2d:7d:0d:
e9:40:2d:95:4a:e4:d0:9a:e4:b3:9c:8b:cc:48:36:04:b8:f0:
2b:e0:74:73:ae:bc:47:bf:8e:e2:93:40:c9:bf:2b:0f:cf:72:
50:e5:96:51:7d:ac:45:d8:07:62:46:63:9b:ae:50:45:a2:6b:
31:f3:41:04:e2:f7:72:e9:c3:6f:9b:2c:e6:eb:f0:4b:b2:90:
79:f6:b7:f3:4f:61:71:b2:9d:4d:8b:a4:1f:a0:f8:60:b6:45:
e0:34:a0:34:76:68:32:c8:7f:d1:85:c1:8c:08:da:4e:dd:bb:
7f:55:80:02:64:3c:63:19:24:5a:59:89:84:00:0e:49:02:de:
52:c3:1b:06:a4:fc:d5:38:81:24:ca:0f:ef:82:44:ce:45:ff:
e0:03:8b:f6:d2:2b:23:06:55:3c:af:d9:8e:f2:e7:fe:36:27:
24:0b:79:dd:43:98:17:d0:8f:86:b2:a4:4d:f4:5f:d6:72:42:
36:aa:44:2e:f6:a1:db:92:25:13:ff:47:47:7b:4d:1a:78:30:
36:4d:73:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:28:59 2026 by rpki-client