
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.mft
File: GHkad7eTMW9ffev2Atp8TmnIvGs.mft (raw, json)
Hash identifier: wn8ik+tHzBLuqVrTIOHJSLGZbWmvkV00iPJeb5UeKQA=
Subject key identifier: 64:47:AC:84:54:A3:69:35:7C:E2:77:F4:9E:57:63:60:C8:E7:63:C8
Authority key identifier: 18:79:1A:77:B7:93:31:6F:5F:7D:EB:F6:02:DA:7C:4E:69:C8:BC:6B
Certificate issuer: /CN=A9185259/serialNumber=18791A77B793316F5F7DEBF602DA7C4E69C8BC6B
Certificate serial: 67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHkad7eTMW9ffev2Atp8TmnIvGs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.mft
Manifest number: 67
Signing time: Wed 15 Apr 2026 07:29:38 +0000
Manifest this update: Wed 15 Apr 2026 07:29:38 +0000
Manifest next update: Wed 22 Apr 2026 07:29:38 +0000
Files and hashes: 1: GHkad7eTMW9ffev2Atp8TmnIvGs.crl (hash: hMRJ5Dt1vQaIuiHpHNEn3tfOXzEO4LP+qDnPDaDxSgQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.crl
rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHkad7eTMW9ffev2Atp8TmnIvGs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 07:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103 (0x67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185259, serialNumber=18791A77B793316F5F7DEBF602DA7C4E69C8BC6B
Validity
Not Before: Apr 15 07:29:38 2026 GMT
Not After : Apr 22 07:29:38 2026 GMT
Subject: CN=69df3e62-fd4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:72:18:fa:57:eb:7e:09:7f:9d:e2:b2:df:78:
7e:d6:08:7b:70:44:c6:7f:86:41:7c:75:3a:46:e8:
1a:9c:48:0c:00:90:16:e4:3d:20:00:37:4e:24:3e:
b5:49:17:4b:ad:ad:a1:ea:84:a4:a7:a8:bb:36:48:
d6:93:d7:b5:e5:9e:df:89:6f:eb:00:5e:de:8b:94:
6a:15:cc:48:5c:c5:49:cb:d8:73:38:f1:f8:a5:fe:
de:68:20:f6:74:59:96:b4:a2:95:7f:1c:30:fe:25:
72:93:3d:0d:ae:d7:92:0a:9c:0a:64:ca:be:80:a2:
b7:99:a5:c6:4c:5a:30:86:ee:fe:2b:c7:c9:78:01:
6b:52:d2:10:fc:27:2b:5e:83:95:09:6d:70:8e:38:
cc:79:44:08:25:dc:fe:39:a4:a1:01:92:5d:2f:c7:
7c:ee:ea:7b:46:fb:a8:c6:8c:45:f0:8e:3c:6b:dc:
67:3d:c4:46:4e:57:6e:63:9a:5a:ab:25:0e:3c:df:
87:e0:03:fa:05:81:f5:07:ec:72:1a:db:cb:8c:c1:
03:ae:e2:d6:64:ed:c2:4f:0d:ee:b8:58:d7:dd:b9:
36:49:4e:a1:dd:cd:41:06:47:74:18:2b:12:9d:69:
85:2f:b1:c7:a0:e8:30:18:ba:16:0a:3c:6c:04:f2:
8d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:47:AC:84:54:A3:69:35:7C:E2:77:F4:9E:57:63:60:C8:E7:63:C8
X509v3 Authority Key Identifier:
keyid:18:79:1A:77:B7:93:31:6F:5F:7D:EB:F6:02:DA:7C:4E:69:C8:BC:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHkad7eTMW9ffev2Atp8TmnIvGs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:70:1e:52:38:cb:ce:0f:20:b1:48:cb:f6:07:34:6e:2c:ed:
da:55:d0:9e:ff:5d:32:91:34:0e:2f:fe:02:bf:da:46:31:93:
d6:3a:5a:d8:ca:67:48:26:07:0a:ea:8c:1a:86:6c:3d:ed:91:
0b:3c:32:21:27:20:fc:ed:98:59:31:cb:30:99:0a:44:83:c5:
1b:d8:b9:b0:07:90:c9:50:bc:0c:2d:06:e7:25:fa:6c:e4:09:
73:ff:f9:cc:6f:9e:af:36:74:56:85:10:97:06:d6:65:ab:c1:
23:14:4d:28:c6:f5:bf:9d:17:b4:40:36:0b:0d:c0:ec:ad:bb:
db:57:dd:d3:cc:b6:79:a2:a4:13:bc:f6:f3:0f:5e:94:0f:07:
77:8d:d4:41:9e:ff:43:26:67:eb:5d:56:81:8b:93:cd:92:98:
8b:b2:d5:41:bb:90:95:96:a0:1b:67:ec:27:c2:25:72:90:30:
a4:85:60:4d:f8:49:1b:e5:f1:3d:4c:50:ca:ed:66:4f:d0:5c:
19:19:a8:75:7a:0d:33:91:dc:ce:7b:34:bd:95:0e:b2:f4:1d:
3c:65:81:d6:c5:2e:2b:8c:84:d3:43:59:18:a5:e1:cf:99:81:
c1:97:39:d8:ea:28:b6:73:58:72:95:79:5a:dc:37:e7:84:63:
c1:35:c4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:16:29 2026 by rpki-client