
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft
File: GHL5iLZXI3g3mSN-VU28xuSdFLA.mft (raw, json)
Hash identifier: atJinFZtVmohf9xORgzQVMD450ZpBAZ1UzDACOhBHjw=
Subject key identifier: 59:8F:29:27:16:91:A3:12:AE:CB:33:D1:0F:E9:81:60:6A:53:E0:BA
Authority key identifier: 18:72:F9:88:B6:57:23:78:37:99:23:7E:55:4D:BC:C6:E4:9D:14:B0
Certificate issuer: /CN=A919986F/serialNumber=1872F988B65723783799237E554DBCC6E49D14B0
Certificate serial: 0BF0
Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft
Manifest number: 0BF0
Signing time: Fri 18 Sep 2026 15:33:18 +0000
Manifest this update: Fri 18 Sep 2026 15:33:17 +0000
Manifest next update: Fri 25 Sep 2026 15:33:17 +0000
Files and hashes: 1: GHL5iLZXI3g3mSN-VU28xuSdFLA.crl (hash: cb4NFD4jZ7G6D1ICAjxW+SdbRg/OmGlJEWPKiSp5wLE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.crl
rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3056 (0xbf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919986F, serialNumber=1872F988B65723783799237E554DBCC6E49D14B0
Validity
Not Before: Sep 18 15:33:17 2026 GMT
Not After : Sep 25 15:33:17 2026 GMT
Subject: CN=6aad59be-5037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e1:8a:e5:4a:1d:dc:96:1c:92:c2:2f:54:76:
dc:09:03:e6:f5:69:1e:8c:eb:f5:bf:3d:d9:d1:03:
0d:22:ee:40:ef:76:2b:36:d1:e9:cb:6c:d6:9d:0c:
0c:cc:ad:f5:3c:10:27:f7:01:ce:5f:37:7d:2d:37:
e5:9c:f9:82:07:78:2c:3a:c1:74:30:82:c5:2e:d0:
b0:0c:48:3d:1c:87:fe:a9:79:5a:69:9b:97:58:7d:
8f:18:47:d0:30:9f:22:69:16:d1:f3:c1:b1:8e:2f:
3a:27:07:a7:3c:55:36:0b:67:c6:6b:da:05:91:97:
07:35:58:37:cd:9f:a8:a0:3e:f5:97:28:59:59:8b:
73:1d:54:46:7b:20:d9:d5:0c:2b:cb:e8:6d:e2:8a:
70:af:6a:aa:44:d9:64:d4:ee:12:3d:17:95:8a:87:
bf:41:89:5c:ee:8a:4c:8c:96:95:6b:33:17:7d:1e:
2e:61:3b:f9:c8:84:2e:1d:17:fc:16:e3:2c:de:f1:
ff:04:9d:9f:d6:20:2a:25:c0:bd:f8:ee:7c:25:8e:
66:5e:b2:52:ff:61:57:0b:1a:89:cc:a6:a4:79:aa:
95:eb:ea:25:2c:75:d2:53:c1:b7:29:c4:0c:65:c9:
57:54:7f:6d:01:f0:37:90:31:0b:f0:b0:19:8a:8a:
bd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8F:29:27:16:91:A3:12:AE:CB:33:D1:0F:E9:81:60:6A:53:E0:BA
X509v3 Authority Key Identifier:
keyid:18:72:F9:88:B6:57:23:78:37:99:23:7E:55:4D:BC:C6:E4:9D:14:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c9:d1:d4:6b:95:d6:8e:1d:c5:84:a3:bb:25:1c:9a:9c:13:54:
64:74:64:eb:42:51:ca:a0:31:c2:a7:16:e4:71:5a:b5:e1:a8:
f9:68:34:d3:5a:f4:71:3d:f8:73:15:cf:6a:b1:40:d3:c8:8d:
5c:d7:4d:72:d3:ce:04:f1:c5:50:a8:6f:76:23:21:34:bd:c8:
39:a7:bd:39:9f:19:f2:8b:68:26:85:83:b3:79:ba:7f:be:56:
37:c6:79:d6:06:96:7a:a7:95:48:21:1e:a4:76:a1:da:6b:c0:
b8:14:07:b9:9b:47:cf:54:02:25:1a:8b:65:e7:3d:73:77:1d:
19:55:0d:51:8d:bd:83:97:91:32:40:6e:92:29:6b:a5:ad:69:
0e:48:b3:46:d4:1b:05:c5:25:e3:d9:e8:e6:89:23:dc:8f:d0:
f1:1c:67:1a:c4:15:5c:81:5d:fc:bb:45:7a:b1:3c:8e:a8:e2:
df:5e:b9:86:cf:2b:cb:f6:1d:b5:a2:9c:83:83:74:32:62:ef:
d0:d2:4b:f0:0c:78:1f:98:f1:21:2c:a4:bd:51:0c:53:c9:20:
ca:79:20:fe:9a:31:c6:c7:e3:80:d2:98:c2:02:4f:ec:21:8d:
be:5d:74:ef:c7:2a:c2:d4:fb:d8:ff:e4:74:5a:66:82:e3:83:
f1:20:c2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 23:00:33 2026 by rpki-client