
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.mft
File: ghhST3oWtYwNm3OUAxk5fuT8pv0.mft (raw, json)
Hash identifier: kjZFrmvxTOIbtuu/yrjl80aDBuTlrjRFHqbkeKzjz90=
Subject key identifier: 01:A3:CB:98:35:8A:1C:6C:EF:1C:FF:07:8B:29:DD:E4:35:85:9D:B7
Authority key identifier: 82:18:52:4F:7A:16:B5:8C:0D:9B:73:94:03:19:39:7E:E4:FC:A6:FD
Certificate issuer: /CN=A9179EE2/serialNumber=8218524F7A16B58C0D9B73940319397EE4FCA6FD
Certificate serial: 0870
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghhST3oWtYwNm3OUAxk5fuT8pv0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.mft
Manifest number: 085A
Signing time: Sat 28 Feb 2026 21:05:37 +0000
Manifest this update: Sat 28 Feb 2026 21:05:36 +0000
Manifest next update: Sat 07 Mar 2026 21:05:36 +0000
Files and hashes: 1: ghhST3oWtYwNm3OUAxk5fuT8pv0.crl (hash: zdrOEIyWNzZ275/kHFkhy7NbNsCRNnaH5capmvp+Idc=)
2: FD10505CC75011EFBA3D195BC4F9AE02.roa (hash: RFXFLbfPMswavWrUDead3dZJrNbmMrDVn5BBss+224o=)
3: 81E94F18F57311EA86849119C4F9AE02.roa (hash: fM2853AKKDQQAB2/Kr7iTiJjwEOnxdTuJ36kW9eGPn4=)
4: 816A256CF57311EA86849119C4F9AE02.roa (hash: S/d5sEqdO01YShk4FFKSvZDJHeUngWSrU/C2gCzBq48=)
5: 431106B2125611ED9FB5292EC4F9AE02.roa (hash: E13oM+sPfT/280KBw0uNWXc9bnWkj58M4pqBAZ8YZQo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.crl
rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghhST3oWtYwNm3OUAxk5fuT8pv0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 21:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2160 (0x870)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179EE2, serialNumber=8218524F7A16B58C0D9B73940319397EE4FCA6FD
Validity
Not Before: Feb 28 21:05:36 2026 GMT
Not After : Mar 7 21:05:36 2026 GMT
Subject: CN=69a358a1-0174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f6:a6:65:6a:27:99:19:fd:df:d4:93:e5:30:
ea:45:19:07:65:35:35:e2:33:d9:60:26:46:9e:54:
ea:a4:a0:ef:50:7a:3f:73:2a:cb:27:2e:a3:d9:22:
89:f2:5a:8b:8f:c7:72:3b:88:83:f9:6b:a9:df:db:
74:50:bd:40:64:2a:29:58:8f:dc:39:ac:42:1d:bd:
46:5f:f3:8f:be:3a:dc:0c:8b:0a:18:50:d2:d9:9c:
d3:41:23:52:3b:bd:6e:df:9c:e3:9e:c4:38:4b:cf:
15:a8:f1:74:d6:2a:63:0e:3d:04:b5:a1:2d:ff:d5:
e2:cf:c9:2d:e2:74:61:77:49:b7:65:2b:37:d1:c3:
5d:bb:5b:71:e2:ce:0c:8d:44:39:67:69:1d:51:23:
cc:47:ec:ee:39:d7:04:a6:55:5f:15:f2:59:5f:d0:
17:85:da:87:27:49:21:50:11:5a:e6:d7:1b:45:75:
db:a2:48:91:8e:e8:3a:69:48:c3:59:07:dd:61:a9:
d6:47:22:27:39:ee:ff:79:6b:7e:2e:b0:aa:76:56:
8e:b3:62:6c:5f:ca:02:0c:f9:93:f2:66:37:1a:fa:
82:29:04:82:f0:32:a2:42:45:ae:1a:04:bf:85:f2:
c2:be:72:5c:1c:08:4d:71:95:60:18:b2:88:8e:7d:
ea:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A3:CB:98:35:8A:1C:6C:EF:1C:FF:07:8B:29:DD:E4:35:85:9D:B7
X509v3 Authority Key Identifier:
keyid:82:18:52:4F:7A:16:B5:8C:0D:9B:73:94:03:19:39:7E:E4:FC:A6:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghhST3oWtYwNm3OUAxk5fuT8pv0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:f9:3d:9a:56:48:bb:a9:1b:6a:ef:57:2d:da:80:fd:bd:fe:
fc:07:9b:a9:68:1e:3b:ff:c1:49:69:5c:e9:94:33:c5:1a:67:
80:05:d9:9a:47:a0:b5:be:16:f5:09:88:48:e0:8c:c3:75:04:
49:74:b0:b9:ff:2c:5c:a6:41:9b:41:9f:27:c9:54:a5:f8:24:
eb:99:29:d9:00:66:80:18:19:b3:23:05:b8:56:f6:63:18:64:
f7:78:d2:71:21:1a:51:23:42:6c:50:02:54:14:f0:39:e8:31:
c0:59:0a:f3:be:b5:c7:df:eb:87:2f:fd:94:c1:61:9a:15:89:
94:f6:cd:46:03:0a:fa:d7:90:36:b5:42:77:dc:4d:2a:7e:5c:
55:93:14:19:78:0c:69:87:2c:23:de:b8:34:cf:be:5f:79:a4:
e1:15:22:28:a6:3e:b3:77:1b:5d:f4:0a:fa:50:4d:6a:93:af:
ba:f0:8b:bc:49:50:da:f3:2f:cc:71:c9:0a:2d:ef:a5:c5:58:
8a:79:88:53:0e:1e:a5:69:41:02:b2:e2:22:0f:94:e3:00:f6:
5c:5e:16:36:09:0a:30:92:dc:20:d8:90:d6:df:6f:65:3f:ae:
0f:51:e6:e2:92:9c:7a:42:b2:e0:83:3a:5a:f3:04:d0:10:53:
6e:e2:60:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:17:30 2026 by rpki-client