
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft
File: goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft (raw, json)
Hash identifier: cUlfowAuXH1gDi8dPG2QjK451t8nZFPscjrda7vSgiI=
Subject key identifier: 60:23:75:88:FF:64:EE:8F:4A:9D:33:A7:29:62:A3:D3:77:BE:04:AC
Authority key identifier: 82:81:8D:D2:23:9D:E8:33:5D:22:AD:CE:3D:F1:90:A3:10:B7:00:24
Certificate issuer: /CN=A914C99C/serialNumber=82818DD2239DE8335D22ADCE3DF190A310B70024
Certificate serial: 063B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft
Manifest number: 0631
Signing time: Thu 26 Mar 2026 22:36:11 +0000
Manifest this update: Thu 26 Mar 2026 22:36:10 +0000
Manifest next update: Thu 02 Apr 2026 22:36:10 +0000
Files and hashes: 1: goGN0iOd6DNdIq3OPfGQoxC3ACQ.crl (hash: NngC+HvZeHqiZ0aK3WBWKOqEK7L8FRZ2uF5yxflK068=)
2: 2BE5310AF27E11F082456479676F56BC.roa (hash: A74oNh1ceC9qOKcui3vBhsxESPini5a/hTsdz/DLy4Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.crl
rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 22:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1595 (0x63b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C99C, serialNumber=82818DD2239DE8335D22ADCE3DF190A310B70024
Validity
Not Before: Mar 26 22:36:10 2026 GMT
Not After : Apr 2 22:36:10 2026 GMT
Subject: CN=69c5b4db-ad0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b2:6e:d1:cf:65:29:e4:ea:d9:0d:67:2d:bc:
f8:d1:c9:40:4b:4b:69:16:40:ea:1f:1c:ad:5e:1e:
63:0a:d5:c7:76:cb:0e:3e:87:4f:64:e1:a0:9f:02:
c0:02:1f:91:4d:19:f8:cd:18:1a:bd:28:c0:d6:b6:
89:f5:6b:b4:eb:58:23:de:13:24:68:e0:9c:22:28:
d0:26:32:c5:f4:d5:90:e1:31:85:53:22:69:2e:ca:
88:e1:8e:25:01:02:4a:87:ed:8d:87:1d:99:9d:13:
e8:e9:7e:31:4f:62:a0:0b:3c:cf:93:91:eb:3d:c7:
e3:44:b6:9b:3d:18:b7:1b:9b:52:84:43:80:d0:8e:
7b:8e:74:0c:56:2c:74:85:ad:86:3a:d4:3f:2b:58:
f9:1b:84:3a:3d:bd:42:df:f1:5a:cb:fb:6e:ff:40:
a6:76:84:84:8a:ea:22:20:08:c9:df:94:3b:be:41:
51:03:9c:4d:c5:e5:15:87:36:7a:ad:a2:76:b9:30:
a7:f8:51:4c:4f:d2:54:0b:bb:2f:eb:98:ff:fb:36:
a6:c3:27:0f:e1:b1:ba:66:19:34:1b:9e:55:42:e1:
1a:ec:9b:00:48:35:2e:bd:e4:0b:99:18:cb:b3:85:
d8:3a:39:75:f7:7b:64:0d:49:3c:3d:d4:d8:d6:45:
c7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:23:75:88:FF:64:EE:8F:4A:9D:33:A7:29:62:A3:D3:77:BE:04:AC
X509v3 Authority Key Identifier:
keyid:82:81:8D:D2:23:9D:E8:33:5D:22:AD:CE:3D:F1:90:A3:10:B7:00:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:95:ee:51:52:5b:e0:75:7f:f4:91:b5:e8:7f:21:b4:c0:e2:
9d:19:05:8d:e0:d4:32:e5:b6:f9:9a:54:df:e8:36:df:df:19:
45:32:09:6d:e4:f5:4d:d0:18:3b:17:57:d3:cb:54:fc:db:f2:
57:93:c2:76:39:90:21:51:61:7a:bb:a4:c0:d6:28:cd:a6:3b:
f4:3a:09:f8:6e:04:e2:fb:83:01:32:59:de:51:8a:04:99:2b:
de:a5:bf:86:50:88:0b:b0:3b:9a:f8:4d:51:f8:37:5e:e2:4e:
4a:19:27:cf:48:ac:b0:c6:0d:bd:ee:e5:84:ad:5b:86:f6:97:
0f:1c:14:02:45:ad:b3:d8:36:5e:53:e8:61:09:c3:38:64:33:
1a:7e:78:70:82:bf:57:d5:9f:a0:de:bb:67:f2:0d:e7:f2:d2:
3e:90:d8:94:93:20:da:7a:45:c4:59:39:a4:1a:70:70:5f:0d:
22:1f:5d:da:c1:ab:24:65:56:3f:f2:90:8b:ea:d0:36:8c:bc:
94:a7:3e:23:79:9c:54:f7:db:54:54:b9:3b:28:c0:a4:f8:74:
d6:62:c2:a6:91:4c:fa:8b:ec:09:b9:4f:fc:87:40:ef:d9:28:
c2:03:31:b2:74:bf:59:40:f6:1f:9a:cd:c9:02:22:1a:8a:5c:
d7:fd:dc:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:42:35 2026 by rpki-client