
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.mft
File: GHkad7eTMW9ffev2Atp8TmnIvGs.mft (raw, json)
Hash identifier: uqb5xXH3zw8rael4VQQJZunZkG+YH7BPesfSPoVQhKA=
Subject key identifier: 17:A9:20:D6:C2:33:B9:1A:EF:65:35:0C:C5:7E:3D:38:69:73:CE:C4
Authority key identifier: 18:79:1A:77:B7:93:31:6F:5F:7D:EB:F6:02:DA:7C:4E:69:C8:BC:6B
Certificate issuer: /CN=A9185259/serialNumber=18791A77B793316F5F7DEBF602DA7C4E69C8BC6B
Certificate serial: 79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHkad7eTMW9ffev2Atp8TmnIvGs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.mft
Manifest number: 79
Signing time: Thu 21 May 2026 07:48:53 +0000
Manifest this update: Thu 21 May 2026 07:48:52 +0000
Manifest next update: Thu 28 May 2026 07:48:52 +0000
Files and hashes: 1: GHkad7eTMW9ffev2Atp8TmnIvGs.crl (hash: gHvXHgv2WDeHJ1NKbURS1VXw7rePKkc3ueR0aMzRu4M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.crl
rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHkad7eTMW9ffev2Atp8TmnIvGs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 07:48:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121 (0x79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185259, serialNumber=18791A77B793316F5F7DEBF602DA7C4E69C8BC6B
Validity
Not Before: May 21 07:48:52 2026 GMT
Not After : May 28 07:48:52 2026 GMT
Subject: CN=6a0eb8e5-da91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7c:6c:7b:c7:5e:95:6b:60:2c:fc:b2:4a:6e:
95:40:da:77:8e:bd:a5:8a:01:3a:65:a2:dc:51:80:
76:28:e7:9d:98:c7:f5:11:9e:ab:f6:03:1b:87:3f:
25:fe:4c:a4:ce:f2:07:55:b7:3d:50:04:e3:a1:2c:
fd:bb:f1:13:b7:7c:a7:e3:3c:c9:e2:b5:20:7d:b5:
af:56:4b:33:07:b4:64:8e:04:0b:2d:d7:5d:b3:62:
e4:74:9e:c0:74:af:e8:54:93:ff:fd:96:67:71:6a:
8e:44:b4:05:a4:83:f2:50:84:d5:fa:b6:47:7d:84:
af:66:7d:0e:87:32:48:a9:2d:5f:bd:74:d0:0a:80:
0c:39:72:0d:2c:33:60:0e:a3:3c:2a:3e:7f:f0:d7:
ff:d1:e2:cf:89:54:5d:3f:5a:15:e3:03:f0:5d:0d:
1e:c8:4f:d4:c6:a3:7a:d1:a9:6d:9a:9b:26:64:44:
60:bc:ac:a1:e4:f4:fa:81:0f:aa:d4:37:ad:b0:01:
8f:a1:9e:44:5b:47:01:09:90:3d:ce:af:9e:75:e1:
bd:2a:2f:db:0a:10:0e:ec:d1:f2:87:eb:ac:f6:6e:
96:d6:ae:0e:94:d8:62:e9:bb:b1:fb:7f:41:59:b2:
f9:2d:b7:a5:65:c5:b2:ec:de:64:12:e2:b3:de:a4:
28:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A9:20:D6:C2:33:B9:1A:EF:65:35:0C:C5:7E:3D:38:69:73:CE:C4
X509v3 Authority Key Identifier:
keyid:18:79:1A:77:B7:93:31:6F:5F:7D:EB:F6:02:DA:7C:4E:69:C8:BC:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHkad7eTMW9ffev2Atp8TmnIvGs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:36:25:5b:67:39:be:a9:0a:46:a4:bd:56:e6:63:5c:60:8a:
9e:16:18:3e:cf:b1:0f:23:78:81:b5:90:34:bd:8b:c2:2c:a2:
59:55:c5:4e:93:92:88:1c:cc:29:36:f5:3c:a8:b8:02:6d:46:
af:e0:8f:d1:5c:5c:b7:0e:57:93:f1:c7:17:c1:ad:22:f8:3c:
36:41:cf:35:35:5b:c8:27:02:c7:9e:e5:5d:58:bd:a1:23:a0:
3a:43:0a:20:cd:d6:89:d8:a9:df:d9:9d:17:98:ec:8a:f2:d8:
2a:d9:a0:95:4e:fa:7d:34:c5:f8:ef:06:33:92:d2:0a:c4:c1:
bb:09:05:0d:bf:68:2f:7e:d7:70:93:a9:4f:ce:ee:9e:cc:f1:
50:22:0f:b1:19:a7:22:f5:a6:12:56:18:fb:17:fd:a5:87:5e:
90:80:7d:b0:a1:f2:aa:09:35:ab:87:a3:c7:f1:29:2e:5d:6c:
44:02:bd:e1:74:90:f4:aa:bb:10:fe:e2:c0:b6:5f:00:70:28:
05:6c:5c:7a:e4:a2:b6:e6:e0:18:4a:7f:d8:80:91:03:4a:6a:
2e:5c:45:4e:36:26:51:bf:82:3e:d4:e2:15:bf:3b:2a:a7:1c:
41:ab:c9:5a:9c:dc:ed:51:a8:bd:5c:f8:0d:ad:56:40:39:00:
eb:62:48:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:35:44 2026 by rpki-client