
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.mft
File: GhajkdMlFwt7hcS_x4VaF300e24.mft (raw, json)
Hash identifier: USBUB7aWDNAjoqcqxovZ0NpjiRu9Syg3C/nhVxLipc8=
Subject key identifier: 0E:93:C1:45:D7:B0:52:A5:56:19:08:B7:D6:D9:6E:C6:D5:ED:06:C0
Authority key identifier: 1A:16:A3:91:D3:25:17:0B:7B:85:C4:BF:C7:85:5A:17:7D:34:7B:6E
Certificate issuer: /CN=A913B510/serialNumber=1A16A391D325170B7B85C4BFC7855A177D347B6E
Certificate serial: 7D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GhajkdMlFwt7hcS_x4VaF300e24.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.mft
Manifest number: 7B
Signing time: Sun 01 Mar 2026 09:04:52 +0000
Manifest this update: Sun 01 Mar 2026 09:04:51 +0000
Manifest next update: Sun 08 Mar 2026 09:04:51 +0000
Files and hashes: 1: GhajkdMlFwt7hcS_x4VaF300e24.crl (hash: 79nxlCO7RIUrzv/Y2HSLdhCe81UPS2hrCtC/FZa5hOU=)
2: 9CAF31CA5D8111F0A04DD550C4F9AE02.roa (hash: eX2tn1QIuokhr40tRhM6FAH4/iDlJ6AsfUDI7tg8Vpk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.crl
rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GhajkdMlFwt7hcS_x4VaF300e24.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:04:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125 (0x7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B510, serialNumber=1A16A391D325170B7B85C4BFC7855A177D347B6E
Validity
Not Before: Mar 1 09:04:51 2026 GMT
Not After : Mar 8 09:04:51 2026 GMT
Subject: CN=69a40133-5ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0a:bd:bf:9d:cb:d6:bd:3e:e3:93:88:76:7a:
37:09:14:ef:b6:c4:9b:95:94:73:88:f4:02:07:47:
21:fd:b8:c8:98:cf:06:a3:3e:bf:da:88:08:fd:06:
cd:a9:f9:5b:1b:9a:de:9f:eb:d5:3d:15:77:c7:65:
16:9a:60:ae:0c:70:e9:0d:26:58:07:52:c0:8d:31:
15:52:f5:79:8b:b7:7a:c9:93:7d:05:7a:4d:70:38:
1b:1a:90:c9:4c:8d:3c:68:98:f9:a9:57:c5:bd:4e:
af:f9:bc:c4:58:78:b3:e9:e0:d4:cc:7c:88:89:e1:
a7:1a:5c:e1:07:a8:cf:c2:8a:95:7a:d8:b9:36:1d:
f6:30:09:1f:3e:0b:6e:66:12:9a:98:9d:d2:98:ea:
6d:1d:46:62:a1:68:17:5a:f8:bb:54:5b:c9:7f:44:
73:ac:b5:40:eb:05:22:fa:8b:60:4f:00:6b:8c:58:
1f:13:81:0c:6d:4f:55:42:ad:6b:9a:7b:7b:76:a1:
22:fb:5c:fe:7d:73:d2:ee:b3:64:b9:11:fb:1b:a3:
6c:cc:13:8f:12:b1:f0:0f:a2:88:ad:df:b8:80:98:
63:fa:23:1e:81:16:40:98:11:a4:61:dd:32:3f:bf:
c7:6f:66:90:6b:e6:52:7d:0d:7c:f2:1d:09:06:24:
da:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:93:C1:45:D7:B0:52:A5:56:19:08:B7:D6:D9:6E:C6:D5:ED:06:C0
X509v3 Authority Key Identifier:
keyid:1A:16:A3:91:D3:25:17:0B:7B:85:C4:BF:C7:85:5A:17:7D:34:7B:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GhajkdMlFwt7hcS_x4VaF300e24.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:ef:b0:eb:e5:ff:27:3a:5d:a8:de:6c:bc:1a:5e:e2:56:f0:
f5:a7:32:57:58:ca:dc:64:94:11:bc:af:0f:07:79:14:ee:b4:
a3:6c:e5:ab:20:74:a7:f2:fb:ac:3b:fa:80:73:63:8a:90:5c:
03:70:b2:0f:7d:9c:e2:31:95:c2:f5:60:a2:0b:62:b3:ad:a2:
cd:b7:72:d3:5c:a6:d8:01:ae:1b:73:ec:83:c1:b5:83:c2:1e:
47:32:04:b3:5d:d4:cd:b9:eb:0e:82:ab:34:1c:3c:db:39:2a:
b0:31:f8:9e:28:18:5b:c9:a6:81:9c:d4:5b:52:5d:df:e9:28:
f2:a8:c7:16:dc:d8:b1:f4:de:75:93:77:b7:2d:de:b4:9f:2a:
8f:49:36:19:89:4c:2d:d5:84:6d:a2:e0:11:1f:6b:74:3f:19:
51:df:4b:55:06:90:eb:75:96:ed:b9:ab:1f:f2:df:be:7b:11:
cd:6e:05:e5:90:f0:55:65:2d:19:ff:16:c7:4e:04:66:bb:d2:
17:ce:50:af:e1:19:05:55:4a:fc:44:cf:91:95:a2:9e:f6:63:
b4:fb:4a:1c:00:9a:a5:0b:17:c3:01:14:b0:70:41:11:12:21:
6b:f4:56:fd:93:08:37:67:2f:91:21:ac:7e:d6:37:01:bc:52:
f7:19:dc:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:18:43 2026 by rpki-client