
$ rpki-client -vvf rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft
File: GHL5iLZXI3g3mSN-VU28xuSdFLA.mft (raw, json)
Hash identifier: KTf3Kk5kKJBFpkZLJ5M8THGC+iL0NoCnKIEp2xo37xQ=
Subject key identifier: C6:D3:73:90:58:AA:82:ED:9F:2B:EF:8A:5E:5D:33:4D:F1:51:D1:41
Authority key identifier: 18:72:F9:88:B6:57:23:78:37:99:23:7E:55:4D:BC:C6:E4:9D:14:B0
Certificate issuer: /CN=A919986F/serialNumber=1872F988B65723783799237E554DBCC6E49D14B0
Certificate serial: 0BBF
Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft
Manifest number: 0BBF
Signing time: Thu 18 Jun 2026 15:33:27 +0000
Manifest this update: Thu 18 Jun 2026 15:33:27 +0000
Manifest next update: Thu 25 Jun 2026 15:33:27 +0000
Files and hashes: 1: GHL5iLZXI3g3mSN-VU28xuSdFLA.crl (hash: YigxfLkK1DYGGWH3avvnCjX3c8LooIc8aIfJvpmp6Hk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.crl
rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Jun 2026 15:33:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3007 (0xbbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919986F, serialNumber=1872F988B65723783799237E554DBCC6E49D14B0
Validity
Not Before: Jun 18 15:33:27 2026 GMT
Not After : Jun 25 15:33:27 2026 GMT
Subject: CN=6a340fc7-d482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:73:f6:16:c3:da:d9:63:c4:a5:96:eb:37:8b:
35:a8:86:e2:4d:51:db:03:db:83:04:3d:10:12:5c:
e9:60:15:41:3e:13:4a:dc:12:c0:46:da:e4:0b:ff:
53:3b:44:0f:36:df:86:54:43:67:71:95:a5:a4:a8:
d6:1c:00:c5:36:ec:60:19:e4:e2:25:c6:f4:4b:3b:
3a:ab:4c:d5:75:85:03:8c:ad:6b:b4:7c:8d:bd:17:
94:e1:65:99:82:04:fa:b1:61:88:a9:f6:b7:cb:73:
12:a4:ae:75:9a:d1:95:48:86:a8:58:d3:13:44:2e:
ed:d4:0b:c9:5e:52:7e:31:e5:25:4b:c0:bd:8e:35:
70:b9:e9:49:ec:46:a2:6c:07:67:9c:02:5b:98:46:
51:bb:2a:5c:8f:82:3e:96:d5:cc:2d:75:21:3b:72:
e4:a8:f1:d4:72:b5:78:23:89:39:36:36:9b:3c:a0:
d6:d8:08:03:e0:00:68:e5:79:7f:c5:51:2e:4d:e4:
17:79:85:75:ce:54:7f:e8:39:07:cf:d0:26:b9:7e:
ae:4c:1d:4c:f1:bd:75:0f:01:65:fa:53:4a:89:a8:
48:45:1c:a5:83:60:bc:dd:08:2d:f9:cb:41:06:5a:
6b:68:5a:0d:8a:a9:ea:48:43:2f:4b:e5:4e:30:ca:
a1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D3:73:90:58:AA:82:ED:9F:2B:EF:8A:5E:5D:33:4D:F1:51:D1:41
X509v3 Authority Key Identifier:
keyid:18:72:F9:88:B6:57:23:78:37:99:23:7E:55:4D:BC:C6:E4:9D:14:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:05:ed:46:71:86:7f:16:a4:76:43:d7:3f:12:47:45:27:62:
13:3b:cb:97:46:de:1e:07:28:3d:16:1a:fa:48:58:20:92:94:
1d:c4:98:1a:01:d3:41:05:37:d0:58:8f:62:84:a3:e0:be:d7:
20:6a:38:22:c0:c5:f4:f9:d6:33:74:d7:8a:27:19:71:21:43:
73:cb:28:ab:34:db:bc:1f:e8:91:d3:88:69:39:99:c6:f2:1c:
6b:6d:c0:54:67:bc:6e:ec:72:3e:ac:3f:6a:ac:4c:64:ce:b0:
f3:4c:26:89:6f:a1:40:ee:e8:3b:4f:a1:d3:9f:67:ae:e1:2e:
4c:3c:53:0d:22:ff:68:e1:c8:5c:0f:49:93:54:cf:a4:c5:17:
42:58:22:9a:38:df:ee:05:a8:6f:b7:13:42:5a:80:c0:4c:0f:
7c:c0:39:ed:72:9f:71:6e:a1:20:77:7d:d1:7e:2a:13:df:72:
87:e7:a5:4f:8b:3b:9b:58:79:0e:73:97:d6:07:57:b2:4d:86:
d7:cf:9a:f4:ca:0e:71:a5:e5:ce:66:73:b7:0a:cb:9c:45:81:
3d:90:69:e6:98:15:51:7e:46:bd:a3:75:6b:31:9d:74:62:20:
b7:97:ee:03:11:38:2b:72:9d:e2:c2:77:ca:15:5b:ff:c8:22:
2a:d3:52:70
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC78wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTk4NkYxMTAvBgNVBAUTKDE4NzJGOTg4QjY1NzIzNzgzNzk5MjM3RTU1NERCQ0M2
RTQ5RDE0QjAwHhcNMjYwNjE4MTUzMzI3WhcNMjYwNjI1MTUzMzI3WjAYMRYwFAYD
VQQDEw02YTM0MGZjNy1kNDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqXP2FsPa2WPEpZbrN4s1qIbiTVHbA9uDBD0QElzpYBVBPhNK3BLARtrkC/9T
O0QPNt+GVENncZWlpKjWHADFNuxgGeTiJcb0Szs6q0zVdYUDjK1rtHyNvReU4WWZ
ggT6sWGIqfa3y3MSpK51mtGVSIaoWNMTRC7t1AvJXlJ+MeUlS8C9jjVwuelJ7Eai
bAdnnAJbmEZRuypcj4I+ltXMLXUhO3LkqPHUcrV4I4k5NjabPKDW2AgD4ABo5Xl/
xVEuTeQXeYV1zlR/6DkHz9AmuX6uTB1M8b11DwFl+lNKiahIRRylg2C83Qgt+ctB
BlpraFoNiqnqSEMvS+VOMMqhkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMbTc5BY
qoLtnyvvil5dM03xUdFBMB8GA1UdIwQYMBaAFBhy+Yi2VyN4N5kjflVNvMbknRSw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTg2Ri9BNjFERjFEQTQ2
NkExMUVBQTAwN0VGMUZDNEY5QUUwMi9HSEw1aUxaWEkzZzNtU04tVlUyOHh1U2RG
TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy
RkQxRkYyL0dITDVpTFpYSTNnM21TTi1WVTI4eHVTZEZMQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OTg2Ri9BNjFERjFEQTQ2NkExMUVBQTAwN0VGMUZDNEY5QUUwMi9HSEw1aUxaWEkz
ZzNtU04tVlUyOHh1U2RGTEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABAXtRnGGfxakdkPXPxJHRSdiEzvLl0beHgcoPRYa+khYIJKUHcSYGgHTQQU3
0FiPYoSj4L7XIGo4IsDF9PnWM3TXiicZcSFDc8soqzTbvB/okdOIaTmZxvIca23A
VGe8buxyPqw/aqxMZM6w80wmiW+hQO7oO0+h059nruEuTDxTDSL/aOHIXA9Jk1TP
pMUXQlgimjjf7gWob7cTQlqAwEwPfMA57XKfcW6hIHd90X4qE99yh+elT4s7m1h5
DnOX1gdXsk2G18+a9MoOcaXlzmZztwrLnEWBPZBp5pgVUX5GvaN1azGddGIgt5fu
AxE4K3Kd4sJ3yhVb/8giKtNScA==
-----END CERTIFICATE-----
Generated at Sat Jun 20 13:37:10 2026 by rpki-client