
$ rpki-client -vvf rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft
File: GO9DJ41GMx6arw_XcqcygNE6qlI.mft (raw, json)
Hash identifier: QjPGGA/84wpk2YeVq+z1scP3UIQ4jw41Uzr2DQuqcBU=
Subject key identifier: 6B:7F:B8:07:4F:6C:41:45:33:87:DB:1A:88:33:C6:40:42:82:35:D7
Authority key identifier: 18:EF:43:27:8D:46:33:1E:9A:AF:0F:D7:72:A7:32:80:D1:3A:AA:52
Certificate issuer: /CN=A91104D1/serialNumber=18EF43278D46331E9AAF0FD772A73280D13AAA52
Certificate serial: 116C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO9DJ41GMx6arw_XcqcygNE6qlI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft
Manifest number: 110F
Signing time: Tue 24 Mar 2026 17:13:21 +0000
Manifest this update: Tue 24 Mar 2026 17:13:20 +0000
Manifest next update: Tue 31 Mar 2026 17:13:20 +0000
Files and hashes: 1: GO9DJ41GMx6arw_XcqcygNE6qlI.crl (hash: VmF4d0Aaou8B624ybre5zs3tKx2TUGEqWC84z0CM4E4=)
2: 446826648F3511EE8864C25EC4F9AE02.roa (hash: k1v1J7kPlAt8mDgl/cl69ulxSWaapln7nwqxT+vVHC8=)
3: 381223E2E00711EE8E019E29C4F9AE02.roa (hash: itbqWUa/NKPPtYKdrkpcQWzti779l/FpRj9FQ1sUc8Y=)
4: 87C9E3FE3F6D11F0951BB23CC4F9AE02.roa (hash: Ro1WYvBGHNUPbIY7IvUqpCvewp4A9RwhtkxBRjwWeZc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.crl
rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO9DJ41GMx6arw_XcqcygNE6qlI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:13:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4460 (0x116c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91104D1, serialNumber=18EF43278D46331E9AAF0FD772A73280D13AAA52
Validity
Not Before: Mar 24 17:13:20 2026 GMT
Not After : Mar 31 17:13:20 2026 GMT
Subject: CN=69c2c631-3a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bb:80:00:b3:46:29:95:27:e6:eb:d9:60:f9:
2f:f2:55:1e:00:ee:5b:c7:0b:67:78:cf:92:1b:70:
8a:d8:98:15:04:0f:c2:39:0f:5c:fc:88:0a:b2:92:
62:5e:c8:3b:e9:0d:6a:e5:fc:ad:94:5e:c3:e0:fe:
35:29:38:dc:c3:5b:61:fd:af:3c:df:1f:cc:e3:f5:
e0:3b:8b:18:6b:a0:af:2e:c3:96:4e:94:3b:97:42:
6e:c7:3f:18:d5:7c:ec:c0:17:92:ff:25:c5:11:46:
66:c7:14:0b:62:35:4b:88:2a:f6:3d:7e:75:38:9d:
c6:09:38:83:4a:d8:1d:00:25:f7:e2:b0:6c:a0:41:
8d:93:13:07:f4:2d:22:ca:23:34:88:f3:9e:cf:e4:
be:43:b1:c4:b8:6c:c5:b1:e5:bc:3e:5a:94:9c:a2:
3a:e5:b8:3f:47:6b:9a:69:bc:f6:fa:bd:57:ba:cf:
b0:98:fd:ee:24:35:aa:06:91:ba:8c:35:05:d9:4e:
92:63:17:1b:a9:39:55:85:c8:e7:35:d5:07:fb:a2:
f9:44:cd:be:36:22:24:87:f4:24:90:f8:c4:36:3f:
8d:36:fc:b8:51:dc:84:27:aa:93:9e:84:da:33:d9:
10:79:44:5a:51:2c:4a:1c:b4:2f:5f:5f:1b:e1:b3:
00:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:7F:B8:07:4F:6C:41:45:33:87:DB:1A:88:33:C6:40:42:82:35:D7
X509v3 Authority Key Identifier:
keyid:18:EF:43:27:8D:46:33:1E:9A:AF:0F:D7:72:A7:32:80:D1:3A:AA:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO9DJ41GMx6arw_XcqcygNE6qlI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:45:93:75:91:70:74:a8:28:fc:f0:72:eb:b0:23:24:bc:d0:
76:93:7e:be:74:9c:48:f2:a6:00:7a:67:1c:b7:c6:1e:1e:05:
a6:fd:12:62:70:a6:21:a0:91:a2:f8:7e:b2:6c:fd:74:83:e9:
4b:30:4b:56:b0:a5:39:60:8d:3c:a6:b5:f9:63:25:cc:4b:1f:
7a:7d:12:12:90:d4:72:83:c0:9a:93:b2:6e:c8:dd:00:5c:bb:
ab:74:7b:9e:07:e1:da:5b:17:4e:ff:52:46:ff:4f:da:e6:26:
af:e0:8f:2e:77:93:26:dc:7b:e0:dc:21:bf:a2:16:a7:35:80:
a7:bf:17:a7:f4:f0:13:da:c5:33:31:34:77:aa:7c:17:6e:8a:
32:55:21:43:70:8d:7f:12:5b:bb:33:4a:02:79:6b:ba:9c:22:
9c:c2:4f:16:df:d3:be:af:3a:d1:34:c2:d1:1d:40:7c:31:4c:
87:82:2b:18:64:64:f1:8a:83:8c:93:06:35:40:43:f4:65:56:
c2:a7:56:6f:38:72:f3:36:0b:5b:05:eb:ed:f6:03:54:e2:7d:
05:6e:c1:75:ef:3b:e4:f2:0d:55:af:2c:ea:68:48:2c:5b:0b:
1c:6a:82:c5:1e:c4:f9:ec:6f:41:16:ff:fb:f8:ac:fd:94:86:
03:bd:0c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:50:18 2026 by rpki-client