
$ rpki-client -vvf rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft
File: GHL5iLZXI3g3mSN-VU28xuSdFLA.mft (raw, json)
Hash identifier: LqHxq27HlkcnSMSp839LE5XyXEZbV0p3i855P0V1wV4=
Subject key identifier: 82:8B:30:95:D3:ED:3A:B0:4E:E5:3B:78:68:62:06:C3:08:BB:02:C8
Authority key identifier: 18:72:F9:88:B6:57:23:78:37:99:23:7E:55:4D:BC:C6:E4:9D:14:B0
Certificate issuer: /CN=A919986F/serialNumber=1872F988B65723783799237E554DBCC6E49D14B0
Certificate serial: 0B85
Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft
Manifest number: 0B85
Signing time: Mon 02 Mar 2026 01:45:40 +0000
Manifest this update: Mon 02 Mar 2026 01:45:37 +0000
Manifest next update: Mon 09 Mar 2026 01:45:37 +0000
Files and hashes: 1: GHL5iLZXI3g3mSN-VU28xuSdFLA.crl (hash: Q0wYlJyPJKeB+M1QfS3Io9MvbQjvfiJR/n4rsh96qU4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.crl
rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:45:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2949 (0xb85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919986F, serialNumber=1872F988B65723783799237E554DBCC6E49D14B0
Validity
Not Before: Mar 2 01:45:37 2026 GMT
Not After : Mar 9 01:45:37 2026 GMT
Subject: CN=69a4ebc3-2c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f9:6d:c3:83:0f:7a:b7:1c:51:45:07:33:0c:
e0:19:d4:7b:56:07:e0:92:03:65:a3:5d:1d:9e:db:
3f:63:9b:02:0d:77:9a:52:69:90:17:3f:e6:f6:b4:
eb:9c:b0:40:5f:a0:35:ec:91:82:9a:f4:15:ec:30:
81:23:ec:a7:63:89:ca:80:f8:fd:51:76:b7:d2:db:
51:c1:ed:58:14:2e:3f:82:34:9c:6e:57:3d:84:17:
b0:09:a5:46:3d:21:67:e0:8c:86:59:62:f8:50:bb:
19:fd:da:08:28:e4:10:19:9f:c6:9e:41:05:62:37:
b6:ed:98:e5:3e:38:22:9f:27:69:ce:73:e9:93:ec:
7b:3f:09:c5:24:5e:8d:30:6e:6a:a7:9f:75:93:f1:
3d:e7:7f:45:83:0c:03:0f:04:75:8a:5d:db:f8:2c:
be:b0:07:28:31:d2:75:77:ef:3a:27:aa:7b:89:b5:
3e:24:da:1d:2d:66:23:1e:e0:ca:94:fa:83:81:c7:
96:90:8c:ee:72:a2:20:cc:2a:99:19:6a:03:73:ed:
6e:a3:0f:6b:a9:a1:03:c6:a9:9e:0d:2b:e0:35:20:
cb:94:5e:6b:ce:27:bb:6a:49:44:03:b1:b4:91:bb:
76:4e:3a:57:41:ef:16:6c:87:38:6d:ce:84:11:76:
33:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:8B:30:95:D3:ED:3A:B0:4E:E5:3B:78:68:62:06:C3:08:BB:02:C8
X509v3 Authority Key Identifier:
keyid:18:72:F9:88:B6:57:23:78:37:99:23:7E:55:4D:BC:C6:E4:9D:14:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:54:5a:af:d9:51:62:eb:34:8a:c1:ef:ca:c0:fc:d0:69:80:
49:df:90:3e:53:f3:d7:31:0d:df:d1:97:a8:f7:2b:df:0f:2c:
77:96:16:e7:70:f6:f0:98:53:2b:79:82:1f:8c:ca:f8:6b:13:
04:a6:51:80:20:70:07:27:65:fd:37:7c:a5:e3:4c:16:fa:0e:
7b:eb:65:3b:e3:f0:13:f9:0a:6a:53:88:c6:a9:f4:77:bd:84:
7f:fe:36:cb:be:7a:08:8d:b2:f4:1a:77:53:8c:1c:03:8c:9e:
3a:51:44:1e:bf:68:fe:89:5f:df:45:e3:a1:35:28:31:d6:cc:
3e:ec:6f:e9:66:b9:a1:ea:7b:63:44:59:1c:24:94:36:c1:d3:
1e:75:46:bf:06:b3:dc:f9:ee:bd:e4:9b:eb:5a:ae:fd:9b:cb:
d4:b6:9e:57:db:b0:76:ae:a8:55:69:12:f7:b5:18:87:9c:57:
0f:1a:de:89:40:bb:ea:67:43:0f:92:12:0b:e7:fd:de:3d:2c:
f9:53:4b:bf:8f:d5:ed:a2:cb:85:c9:d8:ed:f1:e8:38:b8:42:
42:69:99:c4:60:1e:65:b6:dc:0c:97:dc:31:63:14:f7:75:0d:
6d:da:12:ce:d2:80:d8:6b:34:6c:b6:ff:1d:d5:ac:9d:42:1f:
36:b5:25:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:39:42 2026 by rpki-client