
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft
File: GHAMs9ZQejMEuusnDe7RMBzj2QI.mft (raw, json)
Hash identifier: +VsaTvcNjfHNB8q/CaLc/q60YNl2TkcYmdELnfqRjcU=
Subject key identifier: D4:CA:4C:71:04:23:6B:AC:18:27:B2:9B:68:91:0E:A3:5B:A7:85:16
Authority key identifier: 18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02
Certificate issuer: /CN=A912FBCF/serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902
Certificate serial: 194E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft
Manifest number: 1907
Signing time: Fri 12 Jun 2026 16:24:22 +0000
Manifest this update: Fri 12 Jun 2026 16:24:22 +0000
Manifest next update: Fri 19 Jun 2026 16:24:22 +0000
Files and hashes: 1: GHAMs9ZQejMEuusnDe7RMBzj2QI.crl (hash: HyMtkAjWmSk1aPZ2C2OCc0KYsU3FFpREKD7g5vub7Z4=)
2: BB9C86EA0B0F11E89DF24170C4F9AE02.roa (hash: RgXjb/3wdjxxFYUoIZCRdIJiherawNnAPpUhLQuHKPg=)
3: E8780C5EAC8011E79D9EAC60C4F9AE02.roa (hash: opW5wPBuNhAuRVkS5AxsUE3oeDI1EolWp41aFUC/CMs=)
4: C2BE71E8AA9A11E7B4776E52C4F9AE02.roa (hash: 3C64H5TTmCuYQdL00baZE5DrSlLKNNzObsXzg0r0ppM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl
rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 16:24:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6478 (0x194e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FBCF, serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902
Validity
Not Before: Jun 12 16:24:22 2026 GMT
Not After : Jun 19 16:24:22 2026 GMT
Subject: CN=6a2c32b6-2707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e3:f1:ac:73:00:bb:0a:2e:3f:43:0d:a1:68:
75:e5:83:ff:4f:d3:ba:5a:49:57:55:15:c3:7e:8a:
33:9f:21:34:07:94:66:8f:5b:b4:90:6b:06:d8:6a:
77:29:66:3f:36:a0:2c:32:5b:16:95:6a:63:b1:28:
c3:7e:aa:ca:51:fe:21:7b:82:2c:18:3b:2d:1a:00:
f3:aa:ba:c0:00:28:ac:44:e6:c8:72:4b:56:ba:6a:
3b:d8:9a:53:67:25:e6:cf:80:5b:46:d3:05:07:6b:
1e:09:52:44:e4:b5:3d:b4:39:51:8b:4c:b4:b7:63:
5f:a8:9c:8f:a8:1b:73:27:4b:3c:0c:0c:e7:ae:26:
3f:63:04:a1:86:7c:86:96:c4:15:be:ff:19:ae:92:
bd:82:a9:01:81:87:75:55:ea:0a:f7:66:3f:79:6c:
c8:08:28:75:d9:9f:de:f3:ab:35:f2:c4:8e:dc:aa:
33:f9:6b:0d:50:27:91:68:83:a0:ff:20:6a:d9:01:
08:f3:b2:4f:ac:9c:12:50:21:c0:b6:af:4a:15:c2:
02:0d:de:19:e7:7e:50:4c:81:48:07:dc:f9:72:1e:
1e:d5:00:2d:7f:02:4d:25:8a:95:98:ee:48:1b:ec:
8a:77:fc:74:9b:79:c3:4a:bd:36:7b:41:b8:3d:ff:
a2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CA:4C:71:04:23:6B:AC:18:27:B2:9B:68:91:0E:A3:5B:A7:85:16
X509v3 Authority Key Identifier:
keyid:18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:23:97:5c:0a:66:a1:55:47:40:f7:ab:91:dd:5e:2d:aa:62:
e6:44:df:11:07:6d:b3:5f:d5:6b:2c:7e:86:17:3b:26:bf:50:
8b:b9:8a:6b:fd:dd:48:fd:01:e1:7a:0b:ff:e6:82:a0:db:a4:
50:75:90:7b:0b:b3:95:ba:c2:d9:b0:43:d4:f8:a1:aa:43:af:
29:3a:9e:7c:19:c9:f8:42:60:62:29:69:30:1e:74:6b:41:3f:
07:cf:01:d5:8e:5c:ba:1f:bf:3e:8a:d8:31:62:32:af:88:5c:
bd:d4:14:6e:70:67:10:ad:9d:3c:25:30:80:cc:d9:76:ea:f5:
fe:12:41:ff:db:89:08:92:54:1e:e4:d6:62:79:1f:2d:5b:56:
9a:9d:ee:06:3c:95:f9:6d:78:f3:b4:3e:e7:76:b2:47:d8:e8:
b0:b1:a6:4b:83:c0:a4:7b:75:65:a9:a9:d5:dc:96:10:56:41:
e8:29:62:6e:57:9f:ff:07:2f:80:2c:30:18:15:e7:d7:53:96:
63:14:da:5c:0c:40:de:b5:fd:f9:7b:33:65:50:00:6a:51:8b:
d9:91:ee:fc:1a:db:da:91:2d:52:be:ae:3d:01:ae:7e:77:bb:
72:56:15:47:96:d7:7a:4d:76:f4:b8:3f:d0:12:0d:09:ea:21:
d1:83:1a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:56:02 2026 by rpki-client