
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft
File: goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft (raw, json)
Hash identifier: LFyBg6zGApt71K8+8Gc/mWeRFNeJnaUoQN+FlOhfLwg=
Subject key identifier: 5D:8C:96:B0:6D:8A:6D:B4:A6:11:6A:0B:E9:1F:66:AE:A1:DE:FC:AC
Authority key identifier: 82:81:8D:D2:23:9D:E8:33:5D:22:AD:CE:3D:F1:90:A3:10:B7:00:24
Certificate issuer: /CN=A914C99C/serialNumber=82818DD2239DE8335D22ADCE3DF190A310B70024
Certificate serial: 0653
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft
Manifest number: 0649
Signing time: Tue 12 May 2026 22:47:24 +0000
Manifest this update: Tue 12 May 2026 22:47:24 +0000
Manifest next update: Tue 19 May 2026 22:47:24 +0000
Files and hashes: 1: goGN0iOd6DNdIq3OPfGQoxC3ACQ.crl (hash: EeQvvJopu0JLrkb88PKHjRWIP6CcY0lf52c6I4Q9PIc=)
2: 2BE5310AF27E11F082456479676F56BC.roa (hash: A74oNh1ceC9qOKcui3vBhsxESPini5a/hTsdz/DLy4Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.crl
rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 22:47:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1619 (0x653)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C99C, serialNumber=82818DD2239DE8335D22ADCE3DF190A310B70024
Validity
Not Before: May 12 22:47:24 2026 GMT
Not After : May 19 22:47:24 2026 GMT
Subject: CN=6a03adfc-49b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1b:fa:5e:0a:37:a5:29:b9:1f:05:87:9d:4b:
37:5e:cf:af:8d:4f:a4:6d:27:8b:25:e2:1b:d3:92:
75:3e:f1:a3:40:ba:ca:02:64:91:f1:64:13:b6:13:
31:66:8e:52:08:09:7b:06:3d:09:8d:43:2b:4e:aa:
79:8d:db:c0:d8:6b:81:aa:2f:b4:56:ef:37:ba:31:
69:e3:29:40:05:84:b1:18:2b:b3:90:4e:75:3f:e4:
be:9a:81:4e:7d:e0:36:cc:26:c3:b8:56:99:00:64:
a5:8a:45:1c:6b:f7:b6:eb:14:7c:a1:0f:47:7b:ff:
7d:bd:bb:31:1d:e1:a4:b4:ea:05:e7:d1:9d:73:05:
29:e1:3e:ff:cd:a9:0d:98:fe:10:44:3f:75:34:32:
41:a4:a9:be:b8:bd:2f:e8:4f:e0:f6:ca:16:bb:f4:
6e:c9:0c:e9:e3:5c:fe:ce:79:2b:bc:11:4f:22:e5:
c0:fe:3e:0a:d7:18:07:c2:47:47:f4:10:28:41:ed:
64:6c:ba:c1:58:5d:3d:4a:06:bf:6d:d6:b2:62:c1:
ef:0f:c6:3f:0a:e5:7c:7c:28:76:19:66:30:b5:fa:
bd:6d:98:cf:20:cb:71:cf:06:f5:5b:ef:79:a1:6f:
40:24:16:0b:40:b5:0a:52:20:07:65:b2:d4:20:f1:
d9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:8C:96:B0:6D:8A:6D:B4:A6:11:6A:0B:E9:1F:66:AE:A1:DE:FC:AC
X509v3 Authority Key Identifier:
keyid:82:81:8D:D2:23:9D:E8:33:5D:22:AD:CE:3D:F1:90:A3:10:B7:00:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:f0:c7:e8:6a:5f:33:16:c0:1e:00:1c:bb:d1:72:41:05:ed:
db:6c:b8:75:51:7f:45:ad:3b:e7:46:f9:60:77:b2:07:c6:a6:
9d:56:0e:b0:1a:55:37:0c:2e:82:9e:8d:31:1c:35:65:ab:c9:
95:eb:cc:1b:47:52:2f:8d:67:38:d4:17:1a:4e:48:7a:f6:b9:
d9:a6:30:7d:23:11:a0:7b:49:1a:e9:e4:90:5d:14:d4:c7:68:
1c:da:39:f2:90:e2:7a:61:86:91:91:c3:5e:00:ac:50:52:d8:
f8:68:23:9b:e1:f8:8f:80:77:e5:f3:42:b3:e7:5b:d1:ee:bb:
c5:8f:4b:5c:4a:09:3e:98:2c:69:e7:d2:b1:f3:32:53:9f:85:
37:f4:d2:e0:cf:62:1a:08:9f:47:8c:ac:5b:fc:46:44:0a:ad:
05:28:15:a9:de:21:b7:b3:4a:a1:73:79:d6:dc:0b:73:d6:92:
27:7a:ce:99:34:f3:09:11:c2:c1:74:c4:79:25:1f:e9:c0:f0:
ad:e0:53:6d:cf:bc:ed:09:fb:0a:c5:8d:32:ad:47:a7:6d:9a:
ed:49:d3:5e:86:e7:20:8c:67:49:2e:7b:06:e3:9c:e5:c7:ca:
13:f4:a5:52:41:db:af:fe:88:f5:08:55:03:f3:82:70:ef:bf:
8a:aa:21:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:04:28 2026 by rpki-client