
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.mft
File: GhajkdMlFwt7hcS_x4VaF300e24.mft (raw, json)
Hash identifier: zbboWx/+vboLJLD6JXILsca7n6GpB2F1YfbaUngR10I=
Subject key identifier: 35:A6:42:F1:C9:54:F4:D2:CF:66:8D:1D:16:BA:1F:C5:86:6A:07:72
Authority key identifier: 1A:16:A3:91:D3:25:17:0B:7B:85:C4:BF:C7:85:5A:17:7D:34:7B:6E
Certificate issuer: /CN=A913B510/serialNumber=1A16A391D325170B7B85C4BFC7855A177D347B6E
Certificate serial: EA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GhajkdMlFwt7hcS_x4VaF300e24.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.mft
Manifest number: E5
Signing time: Mon 21 Sep 2026 06:30:17 +0000
Manifest this update: Mon 21 Sep 2026 06:30:17 +0000
Manifest next update: Mon 28 Sep 2026 06:30:17 +0000
Files and hashes: 1: GhajkdMlFwt7hcS_x4VaF300e24.crl (hash: 7EajUbkZYJXo5322PPhoenLeS57JF6x2e7gQcIigTz8=)
2: 9CAF31CA5D8111F0A04DD550C4F9AE02.roa (hash: ObOITIzgGgqGBPGudigAZ1pn1ycFYqSZSvvOBF2J+iU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.crl
rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GhajkdMlFwt7hcS_x4VaF300e24.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 234 (0xea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B510, serialNumber=1A16A391D325170B7B85C4BFC7855A177D347B6E
Validity
Not Before: Sep 21 06:30:17 2026 GMT
Not After : Sep 28 06:30:17 2026 GMT
Subject: CN=6ab0cef9-4b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:69:3b:9f:4e:17:9d:d3:d8:03:d7:61:e6:bf:
99:04:62:25:2f:8d:fa:70:f8:e6:64:92:ce:b9:bd:
34:08:eb:2c:b1:a9:df:55:62:61:2a:93:3f:c8:2e:
d5:b1:51:5e:d0:d0:ed:fc:da:ce:fd:4b:0d:75:06:
c9:71:8d:0c:db:eb:f9:f5:f7:5e:49:b9:3a:98:7e:
53:07:35:fb:e0:3d:d6:0c:48:4d:6e:a9:fa:07:f4:
b8:8c:32:75:dc:f2:e4:49:e3:0d:bf:16:1c:54:a4:
1d:6e:71:2f:a6:14:aa:c5:b8:35:61:2c:f0:67:01:
cb:e8:f9:c5:4d:ea:af:af:8d:8a:99:e5:1f:74:f4:
4d:f7:19:d4:eb:65:53:67:aa:8f:cf:ca:26:9d:bd:
e1:d6:8c:f3:a5:3e:bc:a1:a8:38:f3:e5:dd:fc:fc:
ef:0b:d0:a3:20:ae:df:80:2a:e2:b6:92:3a:90:f5:
15:f0:d1:6e:e9:3f:f0:f2:bf:f6:87:56:5f:87:ed:
a8:75:df:2a:e2:20:24:22:75:de:2a:fa:2b:eb:e5:
ed:47:57:90:1e:87:8e:1c:bd:ff:2f:78:01:9b:81:
4b:99:fe:ce:6c:8c:3b:e9:9a:a8:e5:40:ab:59:8b:
57:87:d5:36:d5:63:bd:9a:1b:23:fd:0c:ff:ba:40:
6a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A6:42:F1:C9:54:F4:D2:CF:66:8D:1D:16:BA:1F:C5:86:6A:07:72
X509v3 Authority Key Identifier:
keyid:1A:16:A3:91:D3:25:17:0B:7B:85:C4:BF:C7:85:5A:17:7D:34:7B:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GhajkdMlFwt7hcS_x4VaF300e24.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:49:2b:a8:5f:3c:f8:89:57:91:1c:cc:f9:09:1c:e8:3e:80:
06:cd:36:f8:d2:2d:af:7d:a1:09:f2:43:a7:4d:6a:2c:a0:78:
49:d9:0e:2c:70:e7:fa:56:83:d2:e7:0d:b4:f0:4c:09:09:58:
bb:56:ca:64:5b:07:ed:1e:a4:4e:5b:f5:8f:d7:5b:7f:cf:c4:
df:b9:7b:b2:be:5b:c5:ae:0c:09:ec:a7:e3:45:dc:71:a8:72:
fc:0d:01:c4:43:f1:af:2f:3a:9a:09:d1:91:dd:19:c2:73:24:
22:22:b3:1b:35:20:e5:f2:83:7a:d0:6c:c1:cf:cb:48:82:92:
15:69:ad:45:c1:4e:24:2e:a6:49:41:33:e9:53:c0:97:36:8a:
0e:37:18:9b:4f:04:c7:8d:3c:d4:33:6e:69:f4:05:df:84:f0:
70:bc:14:89:3f:b0:86:40:da:d4:c6:4d:f2:eb:37:69:38:38:
4c:6c:e3:ed:3b:05:14:7f:42:20:af:de:a2:fd:71:3d:0a:0f:
bd:c2:d7:24:3b:51:84:03:38:8e:5b:52:08:63:05:2b:3e:08:
bb:43:4d:95:9d:f0:a2:3c:55:a5:27:b2:29:b7:ab:f8:48:d6:
de:bc:03:4b:14:b4:e6:8e:79:75:94:75:f4:e8:d3:ce:ae:9f:
e2:83:b6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:26:17 2026 by rpki-client