
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.mft
File: GhgU2ojNOn_lNTsbW4hNytEkeJY.mft (raw, json)
Hash identifier: OYtYx4zx8MbjBVMAT3kePzA9LQ9/jmoQRUDDzHx+nf0=
Subject key identifier: 9A:78:37:25:AC:F2:24:63:1F:D2:19:82:B5:97:F9:FC:94:6C:6F:AF
Authority key identifier: 1A:18:14:DA:88:CD:3A:7F:E5:35:3B:1B:5B:88:4D:CA:D1:24:78:96
Certificate issuer: /CN=A91B5FA7/serialNumber=1A1814DA88CD3A7FE5353B1B5B884DCAD1247896
Certificate serial: 94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhgU2ojNOn_lNTsbW4hNytEkeJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.mft
Manifest number: 94
Signing time: Tue 13 Oct 2026 08:10:06 +0000
Manifest this update: Tue 13 Oct 2026 08:10:06 +0000
Manifest next update: Tue 20 Oct 2026 08:10:06 +0000
Files and hashes: 1: GhgU2ojNOn_lNTsbW4hNytEkeJY.crl (hash: TxlpQKRSl1mkoSO4EuSRnX/OWmuJav+R2ANGYDW0KM0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.crl
rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhgU2ojNOn_lNTsbW4hNytEkeJY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 08:10:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148 (0x94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5FA7, serialNumber=1A1814DA88CD3A7FE5353B1B5B884DCAD1247896
Validity
Not Before: Oct 13 08:10:06 2026 GMT
Not After : Oct 20 08:10:06 2026 GMT
Subject: CN=6acde75e-6635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:65:56:d4:6d:95:a5:81:01:a9:de:44:b7:ca:
c5:96:9e:d1:2c:fe:e1:9e:26:a2:40:d1:90:dd:fa:
94:55:6d:b1:3e:f9:1d:43:ba:f4:84:d5:90:51:64:
f3:e2:fc:f2:18:50:b3:1d:78:e2:e7:a1:44:de:3e:
5f:27:a8:27:0b:f7:f0:4e:55:56:69:f0:d1:ff:5c:
02:e6:25:04:f1:4f:08:5c:64:0c:eb:7a:54:47:d0:
37:1f:4c:c9:5e:0a:53:14:0b:1f:a1:dc:3f:63:50:
01:46:bb:46:65:d0:20:da:4d:90:68:24:bd:96:6e:
db:aa:d0:44:0a:8d:93:76:91:93:02:64:f5:3c:42:
98:70:29:e0:e0:62:4e:2d:2b:75:78:6c:68:7b:a2:
31:97:1b:b3:96:b8:f7:1c:21:3a:19:f3:9f:67:7d:
62:d4:2e:76:ee:62:0b:d8:0b:97:1f:24:cd:b8:dd:
12:74:66:e6:ed:82:a5:f8:7e:33:9f:68:35:da:20:
6c:b9:c1:a5:21:de:59:b3:ad:71:58:3b:d2:78:fc:
cb:d1:58:91:bc:1e:de:23:70:83:d4:f9:fc:67:cb:
c4:d3:03:32:ad:ba:7d:bc:be:ce:13:d8:ea:bd:aa:
52:4d:3d:3f:97:1c:08:8f:9d:2c:80:84:d9:cf:36:
b9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:78:37:25:AC:F2:24:63:1F:D2:19:82:B5:97:F9:FC:94:6C:6F:AF
X509v3 Authority Key Identifier:
keyid:1A:18:14:DA:88:CD:3A:7F:E5:35:3B:1B:5B:88:4D:CA:D1:24:78:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhgU2ojNOn_lNTsbW4hNytEkeJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:07:46:44:3b:6c:67:90:59:9a:17:fa:15:21:82:af:60:bb:
2a:7c:32:07:6a:17:2a:29:dc:2f:e7:f1:c8:0c:93:a0:7c:7b:
22:ef:48:4a:07:2a:5f:db:8a:4d:46:a4:04:d8:aa:8b:bc:43:
e0:0c:7e:a0:75:e8:ef:5f:07:b6:1a:26:99:45:0c:5f:c2:f4:
19:f0:22:39:1d:ca:ec:94:f5:8f:6c:bc:31:7c:82:64:53:5e:
08:7f:a2:a6:7c:dd:36:db:f2:a8:cd:32:08:bd:db:f7:e7:40:
b8:4d:be:59:50:f1:aa:34:96:78:cf:28:ab:2d:53:a9:95:a5:
69:74:e3:53:3f:5d:a1:cd:2f:1b:36:09:d1:02:7f:80:65:8d:
ab:09:2f:68:a2:a1:b8:82:38:d7:57:ca:f0:5f:73:f3:18:95:
87:47:22:79:94:57:2c:2e:6e:6a:08:1e:07:d6:63:d5:27:93:
27:1f:ed:3c:fc:7e:16:50:07:b8:61:34:d5:c7:84:69:96:dc:
bc:45:11:8f:67:33:73:03:ba:d0:8c:17:97:c4:d1:be:e8:79:
34:2c:f7:52:18:c7:d7:f8:a9:d8:2b:6c:58:68:02:9b:45:d6:
ad:c3:a7:82:1f:b9:75:67:ed:f3:d8:da:34:94:a4:ad:d3:e6:
64:7c:84:0d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjVGQTcxMTAvBgNVBAUTKDFBMTgxNERBODhDRDNBN0ZFNTM1M0IxQjVCODg0RENB
RDEyNDc4OTYwHhcNMjYxMDEzMDgxMDA2WhcNMjYxMDIwMDgxMDA2WjAYMRYwFAYD
VQQDEw02YWNkZTc1ZS02NjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3WVW1G2VpYEBqd5Et8rFlp7RLP7hniaiQNGQ3fqUVW2xPvkdQ7r0hNWQUWTz
4vzyGFCzHXji56FE3j5fJ6gnC/fwTlVWafDR/1wC5iUE8U8IXGQM63pUR9A3H0zJ
XgpTFAsfodw/Y1ABRrtGZdAg2k2QaCS9lm7bqtBECo2TdpGTAmT1PEKYcCng4GJO
LSt1eGxoe6Ixlxuzlrj3HCE6GfOfZ31i1C527mIL2AuXHyTNuN0SdGbm7YKl+H4z
n2g12iBsucGlId5Zs61xWDvSePzL0ViRvB7eI3CD1Pn8Z8vE0wMyrbp9vL7OE9jq
vapSTT0/lxwIj50sgITZzza5VwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJp4NyWs
8iRjH9IZgrWX+fyUbG+vMB8GA1UdIwQYMBaAFBoYFNqIzTp/5TU7G1uITcrRJHiW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUZBNy83RDAzMDdFNEVD
MTkxMUYwOEFFRkZDQjgzQjZGNTZCQy9HaGdVMm9qTk9uX2xOVHNiVzRoTnl0RWtl
SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0doZ1Uyb2pOT25fbE5Uc2JXNGhOeXRFa2VKWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NUZBNy83RDAzMDdFNEVDMTkxMUYwOEFFRkZDQjgzQjZGNTZCQy9HaGdVMm9qTk9u
X2xOVHNiVzRoTnl0RWtlSlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlwdGRDtsZ5BZmhf6FSGCr2C7KnwyB2oXKincL+fxyAyToHx7Iu9ISgcqX9uK
TUakBNiqi7xD4Ax+oHXo718HthommUUMX8L0GfAiOR3K7JT1j2y8MXyCZFNeCH+i
pnzdNtvyqM0yCL3b9+dAuE2+WVDxqjSWeM8oqy1TqZWlaXTjUz9doc0vGzYJ0QJ/
gGWNqwkvaKKhuII411fK8F9z8xiVh0cieZRXLC5uaggeB9Zj1SeTJx/tPPx+FlAH
uGE01ceEaZbcvEURj2czcwO60IwXl8TRvuh5NCz3UhjH1/ip2CtsWGgCm0XWrcOn
gh+5dWft89jaNJSkrdPmZHyEDQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 08:17:28 2026 by rpki-client