
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91448CB/D31464FA9BC511F18FE0376C5711F970/GHWJdndWd8NAIPDun97Wlit4ol8.mft
File: GHWJdndWd8NAIPDun97Wlit4ol8.mft (raw, json)
Hash identifier: +rGQu+oqcw0ENlmjXZVfIrr5fMSy8/L6oQAkMemkcag=
Subject key identifier: 2B:12:BD:77:EE:D8:BF:D5:EB:17:83:A4:29:3F:24:AB:DB:C2:41:34
Authority key identifier: 18:75:89:76:77:56:77:C3:40:20:F0:EE:9F:DE:D6:96:2B:78:A2:5F
Certificate issuer: /CN=A91448CB/serialNumber=18758976775677C34020F0EE9FDED6962B78A25F
Certificate serial: 20
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GHWJdndWd8NAIPDun97Wlit4ol8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91448CB/D31464FA9BC511F18FE0376C5711F970/GHWJdndWd8NAIPDun97Wlit4ol8.mft
Manifest number: 20
Signing time: Sat 17 Oct 2026 09:39:38 +0000
Manifest this update: Sat 17 Oct 2026 09:39:37 +0000
Manifest next update: Sat 24 Oct 2026 09:39:37 +0000
Files and hashes: 1: GHWJdndWd8NAIPDun97Wlit4ol8.crl (hash: OMjL8ECnR+aQWFvfsP3kytLkwMTPfkl7nMXx+NSHJKQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91448CB/D31464FA9BC511F18FE0376C5711F970/GHWJdndWd8NAIPDun97Wlit4ol8.crl
rsync://rpki.apnic.net/member_repository/A91448CB/D31464FA9BC511F18FE0376C5711F970/GHWJdndWd8NAIPDun97Wlit4ol8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GHWJdndWd8NAIPDun97Wlit4ol8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 09:39:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91448CB, serialNumber=18758976775677C34020F0EE9FDED6962B78A25F
Validity
Not Before: Oct 17 09:39:37 2026 GMT
Not After : Oct 24 09:39:37 2026 GMT
Subject: CN=6ad3425a-2ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fd:f3:c2:cd:43:7d:3e:04:17:86:15:3d:2a:
e3:23:17:66:8c:b8:db:3e:ba:e0:92:80:25:57:19:
b2:9f:dd:68:ec:10:ee:62:e9:6a:1f:3a:8b:9c:2a:
0e:63:8b:6b:1c:8c:80:6c:79:b1:fb:a1:5e:87:eb:
51:e5:78:7a:1c:6b:61:4c:c5:24:f0:53:d1:30:4e:
7e:78:19:9c:4f:20:ec:bb:25:39:36:36:72:3c:d5:
b0:6a:12:62:97:92:8c:d1:9e:c8:e5:42:c7:4e:f7:
89:80:ab:07:53:eb:35:f9:b2:4a:1e:cd:24:59:57:
52:ea:5c:b1:55:8b:8d:39:e6:cd:4f:04:6a:b0:e8:
25:ae:4e:49:65:56:0b:0f:68:db:90:04:8d:ef:ad:
b2:7d:01:29:a0:b8:7d:a0:99:63:33:d3:c1:b5:dd:
d0:95:15:b7:63:61:dd:6d:70:6b:06:a9:56:57:33:
d0:e7:f5:f4:94:a0:e3:2e:98:b3:f2:55:e1:a0:6e:
5e:13:52:af:ab:dc:78:91:0c:d8:92:a4:3a:6e:96:
ee:8f:5a:f3:f3:51:0b:af:40:8a:4d:7b:7c:11:f3:
33:e9:19:dc:04:e8:cf:56:31:38:d1:55:de:4b:b0:
e8:98:bf:b4:19:e6:4a:e5:9b:c4:31:43:89:38:7e:
2d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:12:BD:77:EE:D8:BF:D5:EB:17:83:A4:29:3F:24:AB:DB:C2:41:34
X509v3 Authority Key Identifier:
keyid:18:75:89:76:77:56:77:C3:40:20:F0:EE:9F:DE:D6:96:2B:78:A2:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91448CB/D31464FA9BC511F18FE0376C5711F970/GHWJdndWd8NAIPDun97Wlit4ol8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GHWJdndWd8NAIPDun97Wlit4ol8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91448CB/D31464FA9BC511F18FE0376C5711F970/GHWJdndWd8NAIPDun97Wlit4ol8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ba:b6:12:84:d2:32:34:18:37:bf:3a:c5:d1:9f:44:b6:3c:
25:f2:71:3e:16:7c:b6:7f:5a:83:76:66:4f:84:4f:7d:3d:bb:
1e:56:a6:26:e0:bc:ec:8b:c2:35:eb:49:a6:6d:0f:ee:be:da:
6c:e7:b3:f8:91:fa:08:d3:72:05:e6:97:21:81:a6:15:92:18:
91:ed:a1:e7:32:5b:df:70:11:92:0b:a6:18:24:97:15:57:81:
62:a6:f3:cf:73:c5:81:30:76:d8:dc:a4:59:6c:24:6f:18:79:
f5:96:c8:60:bf:32:a6:26:d0:09:3a:ce:28:09:46:89:4f:f5:
98:bc:4e:6d:40:a6:7b:0c:a4:c8:27:06:e3:9e:3f:cd:a5:43:
1a:c5:ec:94:5f:d9:5c:ea:8a:df:2a:cd:f3:02:28:58:48:3f:
6e:74:7d:0c:2a:c9:84:72:1c:66:fa:37:53:60:96:5b:bd:e2:
ee:bf:04:99:d1:31:ee:63:96:3e:9c:4c:ca:cf:fe:f9:24:0e:
e6:bc:ec:26:49:6a:7c:72:d8:f4:cb:92:d6:23:e0:38:e6:87:
7d:2b:1e:af:56:59:f9:c4:18:19:7e:d4:19:f7:69:73:d6:58:
bd:7d:dc:8c:7f:ed:0c:91:28:a9:3a:ae:01:b6:16:94:d7:38:
83:d5:71:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 18:49:02 2026 by rpki-client