
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.mft
File: goqGO92fRnXqGDzaoQT1SyN3Lkk.mft (raw, json)
Hash identifier: Qvw9d0WRR6l/ley/QM7bARJZ9T3hjCT4E737ZI/ayjE=
Subject key identifier: B3:0F:DB:20:BB:73:92:44:6F:09:84:C2:D9:42:34:62:9E:38:F7:D3
Authority key identifier: 82:8A:86:3B:DD:9F:46:75:EA:18:3C:DA:A1:04:F5:4B:23:77:2E:49
Certificate issuer: /CN=A913D4B2/serialNumber=828A863BDD9F4675EA183CDAA104F54B23772E49
Certificate serial: 071E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goqGO92fRnXqGDzaoQT1SyN3Lkk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.mft
Manifest number: 0716
Signing time: Tue 24 Mar 2026 21:35:21 +0000
Manifest this update: Tue 24 Mar 2026 21:35:21 +0000
Manifest next update: Tue 31 Mar 2026 21:35:21 +0000
Files and hashes: 1: goqGO92fRnXqGDzaoQT1SyN3Lkk.crl (hash: k0l6pQV7rhRPPhZZ0SV3iHMrtl5MMNHNlDWuV40lsoA=)
2: C148AF5C9B4811EBB3FAE847C4F9AE02.roa (hash: QlMYMXdbZkn7ke0r4X84xbnzwCz4PshXdETVngfE7DM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.crl
rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goqGO92fRnXqGDzaoQT1SyN3Lkk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:35:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1822 (0x71e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D4B2, serialNumber=828A863BDD9F4675EA183CDAA104F54B23772E49
Validity
Not Before: Mar 24 21:35:21 2026 GMT
Not After : Mar 31 21:35:21 2026 GMT
Subject: CN=69c30399-67d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c4:6a:e5:81:ba:b2:20:8c:70:7d:4d:f2:99:
4e:b2:78:fe:62:51:2a:9f:c7:74:d7:58:9b:c4:fb:
3a:50:8e:5a:b6:46:fd:85:a0:02:59:56:57:d1:15:
cc:20:fd:57:78:f9:db:59:52:7b:35:62:8e:73:c1:
77:59:e3:c7:27:9b:7f:54:99:83:62:fa:58:c0:6e:
99:1a:b5:fa:e7:33:c1:23:97:f8:a2:40:20:4b:54:
2e:01:f3:3d:08:28:a7:26:a6:4a:4e:be:20:2c:d0:
85:8f:bb:0f:a2:f0:e5:74:cd:f5:4e:97:e8:13:fa:
57:ed:b0:f0:5d:99:ad:da:c9:26:99:9e:c9:38:92:
53:b2:ac:ab:cd:59:3c:c5:9d:92:bf:9b:b7:12:c7:
c7:a4:c7:69:bb:a7:f3:d1:77:cb:20:70:bd:42:3e:
95:42:fc:6c:9c:91:ac:47:25:d1:03:bd:a9:89:5c:
7b:0a:58:b8:6d:12:13:fa:05:9c:c3:06:ce:4e:95:
9a:c8:e6:1d:67:59:38:f3:9b:ae:0f:86:09:ed:e4:
7e:64:16:dd:b6:a6:69:b4:18:2d:84:dc:9d:3a:3e:
3e:14:61:ea:64:5e:f8:23:db:28:12:c2:af:27:47:
83:f0:2b:24:ac:bf:f4:d8:1e:9d:65:57:b5:9b:69:
b7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:0F:DB:20:BB:73:92:44:6F:09:84:C2:D9:42:34:62:9E:38:F7:D3
X509v3 Authority Key Identifier:
keyid:82:8A:86:3B:DD:9F:46:75:EA:18:3C:DA:A1:04:F5:4B:23:77:2E:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goqGO92fRnXqGDzaoQT1SyN3Lkk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:13:42:61:ae:ab:66:26:24:3d:e1:f9:01:31:45:87:22:e7:
6e:a2:53:d4:d5:11:0d:75:9c:58:85:3c:98:36:1f:d8:17:85:
84:41:db:ca:eb:5d:66:49:c4:77:eb:ce:5a:53:4c:7a:cc:eb:
72:6e:be:65:2d:a1:12:9a:08:10:25:8b:64:03:08:f3:8b:b7:
79:4a:e6:99:53:97:73:a6:de:4f:c9:50:f3:35:8a:f2:1f:3b:
df:32:58:97:12:8d:36:d8:8a:b3:4d:55:7b:0b:7a:c1:81:7e:
a6:21:7f:25:cc:26:bf:15:02:25:59:f1:cc:d5:9b:d9:fd:c0:
b0:3c:0b:72:66:79:2d:c4:b9:83:1a:30:01:ad:e6:1e:18:a6:
0e:6f:df:e9:a5:04:bc:d2:5d:18:e4:27:91:9e:45:69:2e:ab:
8d:53:9e:fc:06:63:4b:26:9f:a5:70:00:c0:84:eb:ad:5d:8f:
6a:d7:04:74:d5:20:c5:ee:2f:1b:f4:2c:cb:f4:6a:b1:6d:7e:
c0:39:cb:f5:35:e4:9b:11:a1:b9:f5:65:5d:e3:7e:2d:1b:d2:
4d:53:68:a7:98:69:55:54:57:c4:a5:cb:05:23:e0:e7:c2:e2:
5b:54:5b:a5:1e:b1:71:20:c3:f4:6e:0d:11:ac:39:b1:8f:db:
4f:4c:ed:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:08:13 2026 by rpki-client