
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B85E7/5143B874608611F19E4777E26E47A888/ghbCCBg3GK6QL0P2htUqRHMUc5g.mft
File: ghbCCBg3GK6QL0P2htUqRHMUc5g.mft (raw, json)
Hash identifier: YdqouHVfyYLheYzi60SA4Yw3bP0iDJlg13pCwZ4Te1Q=
Subject key identifier: FD:C3:02:0E:2F:C1:99:02:85:70:42:0F:8F:28:3B:28:25:F8:25:BB
Authority key identifier: 82:16:C2:08:18:37:18:AE:90:2F:43:F6:86:D5:2A:44:73:14:73:98
Certificate issuer: /CN=A91B85E7/serialNumber=8216C208183718AE902F43F686D52A4473147398
Certificate serial: 28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghbCCBg3GK6QL0P2htUqRHMUc5g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B85E7/5143B874608611F19E4777E26E47A888/ghbCCBg3GK6QL0P2htUqRHMUc5g.mft
Manifest number: 27
Signing time: Wed 19 Aug 2026 09:31:50 +0000
Manifest this update: Wed 19 Aug 2026 09:31:49 +0000
Manifest next update: Wed 26 Aug 2026 09:31:49 +0000
Files and hashes: 1: ghbCCBg3GK6QL0P2htUqRHMUc5g.crl (hash: dGqJPBoyRaX4tYEMLjiUStg8XplofUBVLX+6caFvxYQ=)
2: CCFC8F4A608611F181B017396F47A888.roa (hash: NX7Ssb4nWxHkVFaOlDGe8x1QhapCEO7PXneQ/Q5Nq70=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B85E7/5143B874608611F19E4777E26E47A888/ghbCCBg3GK6QL0P2htUqRHMUc5g.crl
rsync://rpki.apnic.net/member_repository/A91B85E7/5143B874608611F19E4777E26E47A888/ghbCCBg3GK6QL0P2htUqRHMUc5g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghbCCBg3GK6QL0P2htUqRHMUc5g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:31:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40 (0x28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B85E7, serialNumber=8216C208183718AE902F43F686D52A4473147398
Validity
Not Before: Aug 19 09:31:49 2026 GMT
Not After : Aug 26 09:31:49 2026 GMT
Subject: CN=6a857805-a9f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:cf:7a:79:8c:7c:78:e6:a1:98:b3:6f:93:dd:
da:83:39:e9:75:31:47:d2:ec:f5:97:c2:d5:43:b7:
65:58:60:59:42:c5:29:e4:fd:43:43:18:b3:4d:fb:
fb:f9:e4:0b:9f:c2:9d:5c:3c:5b:39:a3:6a:ab:50:
45:b5:e3:37:df:56:a6:3c:1b:ca:da:3e:9d:a3:ee:
2b:9b:e6:90:70:d0:be:5e:b4:a6:87:46:33:47:2e:
e9:3e:be:0d:6c:e1:4c:87:e3:1f:35:b0:b4:d4:63:
ef:8f:28:c9:aa:2b:5a:af:16:c8:98:65:49:c7:0e:
c2:ff:ad:25:7f:29:d4:e1:d5:9a:13:ae:02:63:6b:
ca:69:bf:2c:15:c4:0a:4d:75:71:04:09:03:73:87:
a3:13:3a:b6:e5:6e:7a:2c:00:bf:6a:da:91:93:3a:
7a:a1:20:a6:0e:34:e3:94:66:6b:6a:6e:81:35:d6:
96:d2:f0:08:37:76:9d:e5:92:39:ec:13:84:5c:ef:
11:a3:c7:5d:b8:21:07:b0:57:72:88:cd:ec:f0:90:
74:d7:21:19:ac:b8:1c:d2:5b:c9:19:83:b6:92:af:
d9:e7:3a:29:43:dd:f9:28:46:ff:fe:df:3d:83:5f:
03:c7:82:0f:5c:53:63:24:b7:c1:71:e8:28:4a:b1:
57:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C3:02:0E:2F:C1:99:02:85:70:42:0F:8F:28:3B:28:25:F8:25:BB
X509v3 Authority Key Identifier:
keyid:82:16:C2:08:18:37:18:AE:90:2F:43:F6:86:D5:2A:44:73:14:73:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B85E7/5143B874608611F19E4777E26E47A888/ghbCCBg3GK6QL0P2htUqRHMUc5g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghbCCBg3GK6QL0P2htUqRHMUc5g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B85E7/5143B874608611F19E4777E26E47A888/ghbCCBg3GK6QL0P2htUqRHMUc5g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:ad:70:d4:70:ba:7e:3b:30:d4:37:e1:db:55:05:ad:f0:b2:
bd:17:f9:73:65:aa:5e:94:f4:e1:a4:12:64:c9:fa:74:38:71:
70:e4:b9:77:c5:e0:76:66:09:67:44:69:2f:d9:a2:f7:41:63:
7d:42:df:d5:c9:0e:63:8c:eb:83:d4:19:04:b9:d6:92:e6:08:
32:55:17:8e:25:ef:9f:1d:c8:8a:c5:61:fd:b2:43:59:d2:27:
95:b5:1c:25:ee:84:7b:23:42:c4:f3:53:a5:a7:ef:89:9b:0c:
74:cb:76:c3:a4:94:b3:ed:ca:6e:05:56:86:64:7f:6f:d9:c9:
10:05:52:6f:6b:23:4f:44:b6:ec:95:c2:08:41:18:17:d8:e3:
79:16:68:a9:20:63:c4:fe:02:5f:b4:8e:c8:e3:6e:a9:d0:7a:
3f:5e:83:ed:fe:b0:7f:be:5a:ad:df:95:b1:56:a9:a0:6e:53:
b8:9c:b3:25:c2:7e:dc:d7:ca:cf:f9:5d:a5:ea:39:10:8c:5b:
a7:dd:93:1a:5c:fe:b6:a9:0d:10:a9:8f:53:56:bf:43:08:7f:
86:a1:ed:09:5e:3e:1a:34:ba:ed:e5:34:6b:ed:9f:cc:24:4a:
8d:d1:3a:2e:c1:38:58:c2:c9:33:0d:ae:16:f0:17:c4:ee:2d:
8a:66:72:a2
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
ODVFNzExMC8GA1UEBRMoODIxNkMyMDgxODM3MThBRTkwMkY0M0Y2ODZENTJBNDQ3
MzE0NzM5ODAeFw0yNjA4MTkwOTMxNDlaFw0yNjA4MjYwOTMxNDlaMBgxFjAUBgNV
BAMTDTZhODU3ODA1LWE5ZjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDiz3p5jHx45qGYs2+T3dqDOel1MUfS7PWXwtVDt2VYYFlCxSnk/UNDGLNN+/v5
5Aufwp1cPFs5o2qrUEW14zffVqY8G8raPp2j7iub5pBw0L5etKaHRjNHLuk+vg1s
4UyH4x81sLTUY++PKMmqK1qvFsiYZUnHDsL/rSV/KdTh1ZoTrgJja8ppvywVxApN
dXEECQNzh6MTOrblbnosAL9q2pGTOnqhIKYONOOUZmtqboE11pbS8Ag3dp3lkjns
E4Rc7xGjx124IQewV3KIzezwkHTXIRmsuBzSW8kZg7aSr9nnOilD3fkoRv/+3z2D
XwPHgg9cU2Mkt8Fx6ChKsVd1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU/cMCDi/B
mQKFcEIPjyg7KCX4JbswHwYDVR0jBBgwFoAUghbCCBg3GK6QL0P2htUqRHMUc5gw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4NUU3LzUxNDNCODc0NjA4
NjExRjE5RTQ3NzdFMjZFNDdBODg4L2doYkNDQmczR0s2UUwwUDJodFVxUkhNVWM1
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZ2hiQ0NCZzNHSzZRTDBQMmh0VXFSSE1VYzVnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4
NUU3LzUxNDNCODc0NjA4NjExRjE5RTQ3NzdFMjZFNDdBODg4L2doYkNDQmczR0s2
UUwwUDJodFVxUkhNVWM1Zy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAWrXDUcLp+OzDUN+HbVQWt8LK9F/lzZapelPThpBJkyfp0OHFw5Ll3xeB2Zgln
RGkv2aL3QWN9Qt/VyQ5jjOuD1BkEudaS5ggyVReOJe+fHciKxWH9skNZ0ieVtRwl
7oR7I0LE81Olp++Jmwx0y3bDpJSz7cpuBVaGZH9v2ckQBVJvayNPRLbslcIIQRgX
2ON5FmipIGPE/gJftI7I426p0Ho/XoPt/rB/vlqt35WxVqmgblO4nLMlwn7c18rP
+V2l6jkQjFun3ZMaXP62qQ0QqY9TVr9DCH+Goe0JXj4aNLrt5TRr7Z/MJEqN0Tou
wThYwskzDa4W8BfE7i2KZnKi
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:52:54 2026 by rpki-client