
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.mft
File: GhgU2ojNOn_lNTsbW4hNytEkeJY.mft (raw, json)
Hash identifier: TmhnkkdQoW2VbraJ6aVVHWhHBod0ap7NoZVVrBW88h4=
Subject key identifier: 10:00:96:00:57:DA:26:60:8E:AA:D8:73:51:16:CB:9B:61:DF:94:FA
Authority key identifier: 1A:18:14:DA:88:CD:3A:7F:E5:35:3B:1B:5B:88:4D:CA:D1:24:78:96
Certificate issuer: /CN=A91B5FA7/serialNumber=1A1814DA88CD3A7FE5353B1B5B884DCAD1247896
Certificate serial: 92
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhgU2ojNOn_lNTsbW4hNytEkeJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.mft
Manifest number: 92
Signing time: Fri 09 Oct 2026 08:13:19 +0000
Manifest this update: Fri 09 Oct 2026 08:13:18 +0000
Manifest next update: Fri 16 Oct 2026 08:13:18 +0000
Files and hashes: 1: GhgU2ojNOn_lNTsbW4hNytEkeJY.crl (hash: s5g2sW/BaM74mjUczALlVM/hUT/5miD/KJp69vLSqHg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.crl
rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhgU2ojNOn_lNTsbW4hNytEkeJY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 08:13:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146 (0x92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5FA7, serialNumber=1A1814DA88CD3A7FE5353B1B5B884DCAD1247896
Validity
Not Before: Oct 9 08:13:18 2026 GMT
Not After : Oct 16 08:13:18 2026 GMT
Subject: CN=6ac8a21f-5515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5a:2a:d1:3c:9c:e6:f2:fe:05:db:4c:5c:be:
b8:f7:07:1d:06:00:2c:9e:96:1f:bb:60:1d:66:0a:
97:af:04:1c:c6:5e:1f:e0:6d:40:71:92:b7:45:30:
2a:b4:b5:6c:78:47:5f:e0:61:4a:35:5a:32:8d:fa:
99:19:bf:96:4e:24:5b:7e:cf:26:e5:dc:07:4f:a9:
86:de:33:35:68:9c:f8:87:1a:66:e5:ea:b4:1d:3f:
b9:fc:3d:02:42:4b:cf:76:fa:a8:af:49:7e:83:58:
60:59:a1:11:47:39:bf:11:6e:67:a5:8e:14:4c:3e:
e4:4a:a4:ba:d7:9d:27:a4:09:83:67:30:19:c6:ed:
32:74:58:48:0c:e8:01:d9:d0:d0:85:dc:e1:85:73:
89:ec:17:74:f9:d6:d2:6c:e6:5a:85:d3:bd:29:29:
1e:93:28:2e:a0:21:46:d7:b7:b6:af:7a:26:e8:b1:
db:38:c7:06:d4:ce:06:41:43:05:d1:0b:46:c1:f2:
66:08:b3:9e:d9:05:64:f8:94:6c:7e:6e:ea:c9:28:
f6:ee:23:bc:88:89:9f:e8:8a:ef:f7:c9:75:ed:c7:
8b:f7:4b:e3:b8:25:a4:32:e8:e5:7d:63:15:66:dd:
34:e4:d3:3a:2b:58:b4:b5:aa:8f:b1:5d:87:13:85:
00:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:00:96:00:57:DA:26:60:8E:AA:D8:73:51:16:CB:9B:61:DF:94:FA
X509v3 Authority Key Identifier:
keyid:1A:18:14:DA:88:CD:3A:7F:E5:35:3B:1B:5B:88:4D:CA:D1:24:78:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhgU2ojNOn_lNTsbW4hNytEkeJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:8b:13:fb:d7:86:3e:25:1e:1a:cc:f4:86:a5:57:29:41:fd:
63:ab:54:91:18:b1:2c:d7:23:d5:52:fc:0e:ed:56:71:e9:67:
ca:7a:08:e4:82:0a:f0:a8:5b:50:8b:48:f4:dd:d5:f7:55:8e:
e0:4c:1d:f5:c2:9b:f0:2c:e5:74:bd:7e:7a:9f:05:39:80:da:
ce:a2:ac:c5:03:9a:cc:2f:6b:ba:b3:99:b8:04:6e:55:2c:42:
56:b2:2f:73:6b:a4:88:74:67:01:10:86:a7:c6:e5:a6:14:b8:
18:f5:65:65:13:88:1f:f3:bf:31:ed:bb:d7:43:7d:08:75:06:
ad:2b:68:5b:af:82:b0:4a:c8:81:0b:9c:1d:23:ea:bc:32:8e:
e0:40:3a:00:a3:e5:f5:ca:95:ab:63:35:3c:95:ef:1e:fa:08:
b4:e0:6f:09:c0:61:38:83:ed:f2:cf:81:4c:83:2b:de:d4:c8:
44:c5:80:33:23:2d:0b:96:8f:79:7e:14:6e:5f:90:9f:4f:f2:
a4:6d:cb:9c:c6:65:c2:d9:24:7e:03:15:b3:1f:43:f5:a8:ca:
11:0a:b2:79:fb:ba:11:86:85:46:5e:d7:df:7d:8b:dc:f6:24:
e6:79:0f:d0:18:cd:b9:c4:3a:1c:8e:ad:43:a3:24:7f:6e:98:
7e:ab:25:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:17:50 2026 by rpki-client