
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.mft
File: GhgU2ojNOn_lNTsbW4hNytEkeJY.mft (raw, json)
Hash identifier: +7zhGh3q0tcLLIg4gRUoMBj+OPtUXQYoPivdd1tDR0I=
Subject key identifier: FB:4E:3F:38:F6:30:AD:08:C5:3A:78:C2:76:E3:B7:E4:1D:6A:E6:65
Authority key identifier: 1A:18:14:DA:88:CD:3A:7F:E5:35:3B:1B:5B:88:4D:CA:D1:24:78:96
Certificate issuer: /CN=A91B5FA7/serialNumber=1A1814DA88CD3A7FE5353B1B5B884DCAD1247896
Certificate serial: 6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhgU2ojNOn_lNTsbW4hNytEkeJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.mft
Manifest number: 6C
Signing time: Mon 27 Jul 2026 10:13:36 +0000
Manifest this update: Mon 27 Jul 2026 10:13:35 +0000
Manifest next update: Mon 03 Aug 2026 10:13:35 +0000
Files and hashes: 1: GhgU2ojNOn_lNTsbW4hNytEkeJY.crl (hash: ljsulqFqdOOhwovx7lV10FfiuGd3e91LmNIAmj7Feb4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.crl
rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhgU2ojNOn_lNTsbW4hNytEkeJY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 10:13:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108 (0x6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5FA7, serialNumber=1A1814DA88CD3A7FE5353B1B5B884DCAD1247896
Validity
Not Before: Jul 27 10:13:35 2026 GMT
Not After : Aug 3 10:13:35 2026 GMT
Subject: CN=6a672f50-e5af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9d:32:a7:c3:91:18:99:5b:a6:52:8a:54:92:
f2:ce:62:3f:78:a1:cf:e2:cd:06:9e:e3:72:a1:00:
aa:bb:81:67:c2:50:92:97:8e:8a:4e:47:2c:f4:43:
d9:4d:5c:e5:8a:20:f9:4a:0b:fd:4c:e9:db:3e:f7:
75:bd:ab:4d:e4:ea:95:76:fa:5f:50:55:c7:3f:8e:
79:9f:90:8d:9c:97:1a:0b:25:2b:9b:7f:7e:80:ff:
d2:bc:7b:31:4d:42:ff:bf:01:22:af:5d:ea:79:2c:
fc:7e:2c:6f:fc:ea:c1:19:cb:a5:73:95:99:e5:16:
c5:14:b1:95:02:dd:92:57:08:1c:4a:5a:00:71:79:
46:a3:d3:7f:5d:db:73:19:23:e2:73:0e:d4:11:c0:
91:55:5e:36:24:77:5b:48:6a:0f:c3:c5:f6:62:30:
32:17:bb:57:63:f9:19:2b:2a:ea:14:a5:b8:55:05:
16:1c:85:ee:d5:60:66:9f:07:b1:3e:24:f3:3a:6c:
27:29:14:fb:31:7d:af:1d:5a:a1:88:83:94:f3:8c:
94:22:c2:4b:39:5a:df:3a:9c:4e:d8:6d:fe:94:78:
f4:8e:21:50:53:d2:cd:bf:29:cd:d6:ca:75:94:2c:
a3:d1:9f:87:2b:0c:d8:ec:97:4b:d3:c9:b1:4e:c1:
87:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:4E:3F:38:F6:30:AD:08:C5:3A:78:C2:76:E3:B7:E4:1D:6A:E6:65
X509v3 Authority Key Identifier:
keyid:1A:18:14:DA:88:CD:3A:7F:E5:35:3B:1B:5B:88:4D:CA:D1:24:78:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhgU2ojNOn_lNTsbW4hNytEkeJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:88:4d:b4:09:fd:9e:e5:38:41:cf:57:72:b1:2d:5a:a3:35:
9c:90:40:fc:4d:6a:94:21:5f:77:f3:7a:a9:d8:50:68:92:54:
09:a9:75:ca:1e:e0:5d:90:5e:16:75:38:21:14:27:f0:cd:ae:
f5:b6:58:63:c5:53:70:da:f6:37:c6:7d:60:61:06:30:fb:59:
07:63:d1:01:63:7b:76:07:10:55:96:a1:ee:7e:18:27:1a:99:
34:c9:70:53:cf:18:b9:39:7d:84:c5:cb:da:ae:7a:23:10:7d:
d7:dd:dd:92:c7:35:97:73:17:b5:66:da:e7:e3:2a:2a:7b:ef:
2b:99:73:da:44:8f:78:e9:15:25:19:cf:47:16:58:e6:06:ba:
03:25:e7:c8:81:58:af:02:d3:de:ac:da:68:5c:d0:10:cb:a5:
58:62:dc:84:fe:0a:71:02:b7:5d:5c:02:5a:25:09:30:31:e3:
e6:47:8b:c0:cd:88:bc:29:27:a6:8a:60:dc:ca:12:c3:56:0d:
04:ca:bc:a7:de:b5:58:5d:da:03:73:aa:89:ba:c7:e7:fb:33:
c1:e8:f1:bf:86:15:fa:60:b6:fc:5f:b3:c2:1b:6f:e0:8c:16:
e6:d5:d6:da:a5:60:1f:5d:f7:61:20:a4:36:06:ed:07:85:5c:
03:32:c6:c7
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
NUZBNzExMC8GA1UEBRMoMUExODE0REE4OENEM0E3RkU1MzUzQjFCNUI4ODREQ0FE
MTI0Nzg5NjAeFw0yNjA3MjcxMDEzMzVaFw0yNjA4MDMxMDEzMzVaMBgxFjAUBgNV
BAMTDTZhNjcyZjUwLWU1YWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDOnTKnw5EYmVumUopUkvLOYj94oc/izQae43KhAKq7gWfCUJKXjopORyz0Q9lN
XOWKIPlKC/1M6ds+93W9q03k6pV2+l9QVcc/jnmfkI2clxoLJSubf36A/9K8ezFN
Qv+/ASKvXep5LPx+LG/86sEZy6VzlZnlFsUUsZUC3ZJXCBxKWgBxeUaj039d23MZ
I+JzDtQRwJFVXjYkd1tIag/DxfZiMDIXu1dj+RkrKuoUpbhVBRYche7VYGafB7E+
JPM6bCcpFPsxfa8dWqGIg5TzjJQiwks5Wt86nE7Ybf6UePSOIVBT0s2/Kc3WynWU
LKPRn4crDNjsl0vTybFOwYetAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU+04/OPYw
rQjFOnjCduO35B1q5mUwHwYDVR0jBBgwFoAUGhgU2ojNOn/lNTsbW4hNytEkeJYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI1RkE3LzdEMDMwN0U0RUMx
OTExRjA4QUVGRkNCODNCNkY1NkJDL0doZ1Uyb2pOT25fbE5Uc2JXNGhOeXRFa2VK
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvR2hnVTJvak5Pbl9sTlRzYlc0aE55dEVrZUpZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI1
RkE3LzdEMDMwN0U0RUMxOTExRjA4QUVGRkNCODNCNkY1NkJDL0doZ1Uyb2pOT25f
bE5Uc2JXNGhOeXRFa2VKWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA5iE20Cf2e5ThBz1dysS1aozWckED8TWqUIV9383qp2FBoklQJqXXKHuBdkF4W
dTghFCfwza71tlhjxVNw2vY3xn1gYQYw+1kHY9EBY3t2BxBVlqHufhgnGpk0yXBT
zxi5OX2ExcvarnojEH3X3d2SxzWXcxe1Ztrn4yoqe+8rmXPaRI946RUlGc9HFljm
BroDJefIgVivAtPerNpoXNAQy6VYYtyE/gpxArddXAJaJQkwMePmR4vAzYi8KSem
imDcyhLDVg0Eyryn3rVYXdoDc6qJusfn+zPB6PG/hhX6YLb8X7PCG2/gjBbm1dba
pWAfXfdhIKQ2Bu0HhVwDMsbH
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:16:24 2026 by rpki-client