
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft
File: GHAMs9ZQejMEuusnDe7RMBzj2QI.mft (raw, json)
Hash identifier: DrPDckEJF6fWLcPTWLVNbf8qbSDqUM38w/rccqDnyMU=
Subject key identifier: EF:16:4A:67:15:F5:52:FB:AD:DB:B2:BE:A3:67:64:3D:49:3D:4F:33
Authority key identifier: 18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02
Certificate issuer: /CN=A912FBCF/serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902
Certificate serial: 193B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft
Manifest number: 18F4
Signing time: Wed 06 May 2026 16:24:49 +0000
Manifest this update: Wed 06 May 2026 16:24:48 +0000
Manifest next update: Wed 13 May 2026 16:24:48 +0000
Files and hashes: 1: GHAMs9ZQejMEuusnDe7RMBzj2QI.crl (hash: NWYu4e7+zFwwPUJ1viLXzwAdnpqtVdo8BSseJ9kjlB4=)
2: C2BE71E8AA9A11E7B4776E52C4F9AE02.roa (hash: 3C64H5TTmCuYQdL00baZE5DrSlLKNNzObsXzg0r0ppM=)
3: E8780C5EAC8011E79D9EAC60C4F9AE02.roa (hash: opW5wPBuNhAuRVkS5AxsUE3oeDI1EolWp41aFUC/CMs=)
4: BB9C86EA0B0F11E89DF24170C4F9AE02.roa (hash: RgXjb/3wdjxxFYUoIZCRdIJiherawNnAPpUhLQuHKPg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl
rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 16:24:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6459 (0x193b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FBCF, serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902
Validity
Not Before: May 6 16:24:48 2026 GMT
Not After : May 13 16:24:48 2026 GMT
Subject: CN=69fb6b50-1d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:55:62:ef:d3:bd:74:91:85:a9:23:d6:36:04:
a6:91:2f:3c:bd:27:49:e1:c1:34:7a:ca:90:73:a5:
9d:81:b6:b2:e3:8e:74:5a:af:90:65:75:0f:c3:3b:
66:bf:75:ec:ac:5d:a8:3a:03:cb:ab:f8:00:57:59:
ab:ae:ac:43:a6:cc:45:c8:28:2d:cf:de:f5:12:62:
49:f3:c7:60:a7:9e:02:a4:38:f2:9f:b8:37:17:8f:
73:68:23:86:54:f8:74:37:eb:d2:5c:91:dd:6c:d5:
d9:9e:9d:68:6a:4c:fe:db:f2:6a:18:4e:d5:cd:40:
61:cc:92:11:51:09:fb:67:e0:5f:eb:96:0b:ef:bd:
93:1e:1a:ef:44:13:0c:11:0a:6c:c5:b7:42:b9:d2:
1a:92:ae:d1:3a:ae:7a:79:0a:15:67:d3:4a:e9:dd:
ab:ac:08:7d:fc:6f:9b:71:44:a6:05:ac:9e:07:f9:
20:9c:7d:a8:87:3f:96:c9:d9:20:ac:eb:c6:41:72:
f7:4d:86:d3:59:89:aa:0a:84:90:c6:68:ac:36:ca:
d2:47:fb:f0:09:6f:41:9b:7a:fd:c9:2f:6a:30:f9:
d0:a6:08:3a:64:f9:f7:fc:aa:fb:a4:8a:9a:7e:24:
6e:03:e9:75:77:35:5c:25:33:14:45:04:6b:80:a7:
e3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:16:4A:67:15:F5:52:FB:AD:DB:B2:BE:A3:67:64:3D:49:3D:4F:33
X509v3 Authority Key Identifier:
keyid:18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:e5:a2:d9:a6:e3:73:73:4c:3c:5c:8a:fe:ce:60:3f:72:09:
1c:23:d9:4c:04:53:c9:be:c7:e6:1e:6e:b3:4f:ff:d7:1e:e0:
61:68:5d:c3:a7:9d:9b:16:67:b0:70:24:29:d9:81:3e:ec:9d:
d9:66:ca:bf:a7:3b:ec:a5:49:a5:4e:c1:2a:28:d0:94:6f:82:
7e:8f:27:8d:03:b1:31:d6:29:fa:3b:f9:62:cd:50:8c:08:3c:
4f:1f:ce:1f:b7:ee:a5:24:a2:02:64:32:d8:a5:34:f1:92:56:
c1:21:11:7f:39:db:ce:82:ba:ec:c4:5e:4b:43:76:0a:ef:c8:
c7:8b:8e:f9:22:77:19:93:bc:c2:e0:95:46:78:03:da:85:5d:
16:cb:f4:77:2a:16:b3:5a:9e:ae:b8:58:bb:72:70:f7:eb:32:
d8:09:8b:86:89:cc:34:94:15:c7:30:56:91:50:ae:e9:81:75:
e9:0d:b3:09:48:6b:56:1d:e4:01:d8:6a:2a:15:33:53:d2:77:
26:d5:44:14:08:65:01:c0:fe:09:3a:19:c7:6e:fd:8f:28:ed:
6a:39:96:5a:c6:ec:ce:3d:74:23:86:6c:84:56:ae:4f:50:17:
de:d5:1a:8b:67:65:8c:1c:62:24:13:7f:19:d1:1a:e2:ee:99:
23:9c:1d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 06:30:34 2026 by rpki-client