
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.mft
File: GhgU2ojNOn_lNTsbW4hNytEkeJY.mft (raw, json)
Hash identifier: nIILDZd3z9DWWn16kf+tGKgmX/8EF0Roi2V9K0cTnhE=
Subject key identifier: 03:B1:89:D9:DB:55:9D:8D:57:84:10:00:D6:CB:35:6E:21:CA:DE:D5
Authority key identifier: 1A:18:14:DA:88:CD:3A:7F:E5:35:3B:1B:5B:88:4D:CA:D1:24:78:96
Certificate issuer: /CN=A91B5FA7/serialNumber=1A1814DA88CD3A7FE5353B1B5B884DCAD1247896
Certificate serial: 4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhgU2ojNOn_lNTsbW4hNytEkeJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.mft
Manifest number: 4A
Signing time: Tue 19 May 2026 08:14:19 +0000
Manifest this update: Tue 19 May 2026 08:14:19 +0000
Manifest next update: Tue 26 May 2026 08:14:19 +0000
Files and hashes: 1: GhgU2ojNOn_lNTsbW4hNytEkeJY.crl (hash: +r9b5Ydb9BtYSBk3FY0tLgr0BhvyQEsRtDBpV/+aCE4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.crl
rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhgU2ojNOn_lNTsbW4hNytEkeJY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 26 May 2026 08:14:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74 (0x4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5FA7, serialNumber=1A1814DA88CD3A7FE5353B1B5B884DCAD1247896
Validity
Not Before: May 19 08:14:19 2026 GMT
Not After : May 26 08:14:19 2026 GMT
Subject: CN=6a0c1bdb-54fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ad:19:40:70:75:3f:07:c3:80:54:f4:fe:15:
01:ec:b8:72:bb:19:3e:1b:c5:2d:82:3c:91:f5:35:
a6:51:1d:6e:72:a3:ce:53:e3:17:de:c3:5f:49:02:
b8:bd:70:f5:d7:47:e3:64:08:e7:a5:a0:d3:72:ce:
13:75:ae:95:b7:9f:0e:bb:31:ba:df:79:14:de:68:
eb:ec:bd:cf:75:a2:44:d3:46:b7:14:aa:d7:6b:c0:
8d:8f:69:3a:7a:1b:cf:25:15:a1:2e:5b:ff:30:28:
7e:1a:82:8e:5d:8f:96:c2:55:37:1c:cc:82:aa:96:
7c:92:df:95:f9:6f:d1:06:53:30:6d:7f:3d:51:1a:
93:94:f5:5d:1d:6e:57:6e:b0:e3:1b:8b:ce:7f:6f:
d1:54:a3:10:38:a4:99:e7:dd:ae:af:15:6f:06:25:
90:af:e7:ea:2c:e6:87:a3:c9:c7:23:d8:fb:d0:8a:
87:f2:a1:97:1f:8a:b5:e4:84:1f:9a:c0:00:6d:e8:
9f:67:b9:00:a8:03:21:f7:c8:83:8e:70:e8:6b:60:
8e:37:d7:1d:32:5d:d4:cb:51:93:fe:53:9d:87:79:
98:1f:18:96:7f:ab:13:32:a3:3b:08:2a:88:69:4c:
81:0f:b8:6d:8e:e4:b1:74:2a:f5:38:3f:8e:e0:2f:
fd:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B1:89:D9:DB:55:9D:8D:57:84:10:00:D6:CB:35:6E:21:CA:DE:D5
X509v3 Authority Key Identifier:
keyid:1A:18:14:DA:88:CD:3A:7F:E5:35:3B:1B:5B:88:4D:CA:D1:24:78:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhgU2ojNOn_lNTsbW4hNytEkeJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:dd:0c:58:f3:ce:a8:72:e4:bc:fe:26:5e:59:63:e9:06:65:
fb:98:26:30:eb:ed:d4:ba:96:ea:0b:4d:4e:d8:50:70:87:66:
b5:4b:a6:63:4b:d7:f8:8b:b4:da:10:ea:e3:ec:05:26:a9:56:
97:17:63:9e:68:8d:71:d1:dd:8c:db:63:b9:16:eb:f8:0c:10:
ed:95:48:c6:1a:51:89:3d:5d:f8:4a:f0:54:d2:1c:89:c6:0f:
85:6a:12:d7:33:dc:ac:33:59:84:c1:17:97:aa:18:22:3b:3f:
64:7c:4d:ea:5a:85:cd:e5:f7:06:f4:34:7d:87:1c:71:09:b6:
b7:09:57:63:89:a9:90:78:f0:8c:dd:50:4c:dc:e2:65:e0:a4:
4e:26:5f:0b:44:92:89:6c:b5:ed:3a:e0:87:42:df:e6:7b:a6:
27:32:b5:21:19:b6:36:fc:b5:50:d3:48:b8:ce:f6:a1:49:0a:
e4:67:48:e8:68:25:71:96:54:61:a6:c3:19:a5:c0:01:c8:9d:
b6:94:f4:57:32:4b:e1:ce:59:ff:dd:81:cf:23:12:67:4e:ab:
2b:c6:18:3e:2b:14:3d:79:a9:09:b4:4e:5d:cb:6c:39:cc:be:
49:b7:4a:d0:b4:dd:95:ba:ae:7f:25:f5:87:80:40:ae:1e:63:
db:4c:32:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:58 2026 by rpki-client