
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.mft
File: ghhST3oWtYwNm3OUAxk5fuT8pv0.mft (raw, json)
Hash identifier: 3Hmyblgscq6fjr721SiYnKy0187BEiztnjiCpgtgqjE=
Subject key identifier: B1:8E:1A:9A:31:03:89:0B:84:DA:EE:62:9B:8C:40:F2:B8:73:BA:00
Authority key identifier: 82:18:52:4F:7A:16:B5:8C:0D:9B:73:94:03:19:39:7E:E4:FC:A6:FD
Certificate issuer: /CN=A9179EE2/serialNumber=8218524F7A16B58C0D9B73940319397EE4FCA6FD
Certificate serial: 08AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghhST3oWtYwNm3OUAxk5fuT8pv0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.mft
Manifest number: 0891
Signing time: Fri 12 Jun 2026 20:39:04 +0000
Manifest this update: Fri 12 Jun 2026 20:39:03 +0000
Manifest next update: Fri 19 Jun 2026 20:39:03 +0000
Files and hashes: 1: ghhST3oWtYwNm3OUAxk5fuT8pv0.crl (hash: 5nHH6TI7CfFlsE67gEtZBp8vHQHSAlIQtjl80yiG0zs=)
2: 816A256CF57311EA86849119C4F9AE02.roa (hash: 0r9XfnUOK88lrdHrVj5W9qn3Uab5Rf0RHHQdbv15M8Q=)
3: 431106B2125611ED9FB5292EC4F9AE02.roa (hash: HC1HlngI6XYoexa+iP3Lsv/hSItkWBl0CdvwYSY1Yh0=)
4: FD10505CC75011EFBA3D195BC4F9AE02.roa (hash: o4pPobBwjt8OFkaZBIgV8zZzFKBhPJBPQIzcgJ7nHNM=)
5: 81E94F18F57311EA86849119C4F9AE02.roa (hash: o7hslMVigOY231eahjNEQ0NYOJaFI9mq6NC5ziX7dQc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.crl
rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghhST3oWtYwNm3OUAxk5fuT8pv0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:39:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2223 (0x8af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179EE2, serialNumber=8218524F7A16B58C0D9B73940319397EE4FCA6FD
Validity
Not Before: Jun 12 20:39:03 2026 GMT
Not After : Jun 19 20:39:03 2026 GMT
Subject: CN=6a2c6e68-656d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0b:68:39:3b:a2:4e:1e:f9:e8:ab:00:31:a4:
96:38:93:c1:6a:66:23:be:d3:50:18:f2:c0:6f:f9:
da:47:e4:b4:28:ae:f4:4b:13:3a:14:05:18:49:2a:
9b:30:76:4a:80:fa:93:d5:5f:53:19:69:b6:bc:9f:
e5:21:fb:93:d2:97:99:ff:5a:66:72:f2:70:3f:80:
8c:5d:9e:e2:f2:19:aa:f2:b0:f4:9c:ee:0e:23:47:
cd:cf:15:ea:55:6b:74:4b:ac:5a:e2:3d:f0:d5:d4:
1a:d7:a7:0c:8a:05:7c:27:ea:1d:9d:3b:4a:91:53:
53:23:e9:2e:48:60:81:d7:f8:a8:ab:a8:14:cf:c3:
fd:34:1c:52:6d:df:7c:6f:79:a9:40:f4:85:84:6d:
70:69:9b:ea:f9:4d:92:30:b8:61:df:ae:32:e9:f4:
17:a8:84:3a:5c:80:20:07:cf:a7:9f:09:b2:ec:ab:
a3:b8:bc:f3:7f:b7:07:dc:c8:f5:92:ab:1a:30:03:
ce:a4:83:2e:69:27:47:b3:6f:03:38:42:ee:cd:e5:
79:9b:c7:82:32:d9:b7:56:88:5d:03:e8:69:15:2e:
d9:45:41:49:fd:2a:4c:29:52:df:e4:10:e1:86:84:
31:d6:b7:73:72:4b:36:24:05:19:17:a0:6c:03:ea:
72:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8E:1A:9A:31:03:89:0B:84:DA:EE:62:9B:8C:40:F2:B8:73:BA:00
X509v3 Authority Key Identifier:
keyid:82:18:52:4F:7A:16:B5:8C:0D:9B:73:94:03:19:39:7E:E4:FC:A6:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghhST3oWtYwNm3OUAxk5fuT8pv0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:d9:d3:74:00:5b:c2:04:01:55:d1:1d:4a:c7:36:bc:2f:74:
c6:ce:a1:45:ed:eb:55:3c:87:fb:b4:da:3d:4b:f7:5b:5d:98:
5e:5d:01:3d:3d:e6:57:c1:57:6e:19:a7:1b:75:d5:9c:22:98:
11:78:0c:d9:df:88:ce:b1:e1:f9:4e:3c:78:b2:62:0d:46:9a:
09:5c:ae:15:de:2a:16:9d:a3:ff:ff:fb:3d:27:c4:83:5f:b7:
9a:7f:65:8e:a6:c3:23:f3:d5:a3:59:c5:8c:15:f6:6f:c2:bb:
68:c3:f5:8c:79:68:3a:35:aa:38:de:a1:9c:9a:0d:f6:47:02:
f8:9b:de:fe:ec:27:46:3d:53:12:f1:cc:c4:b5:94:27:a9:5e:
f6:8e:44:fc:f6:b2:6f:40:b3:82:f0:4e:f9:49:c5:08:9e:29:
2d:9f:ab:ef:bc:6a:04:33:44:28:88:08:e2:c9:d6:6a:d9:27:
49:e0:1a:49:f2:be:4e:7a:14:74:b2:04:22:c7:eb:44:04:6d:
98:c1:ae:e8:9b:e1:07:d5:a8:a6:5b:63:71:f2:81:d2:21:e4:
cf:0b:6f:52:0d:86:ad:65:2f:61:df:8b:3e:a7:a5:94:31:cb:
e1:2b:33:47:d8:75:35:65:a1:92:ef:1f:20:79:23:c4:7d:0b:
7c:18:e1:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:11:24 2026 by rpki-client