
$ rpki-client -vvf rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.mft
File: goh6uR0rD2rb_HCyRhnxh7GlPVk.mft (raw, json)
Hash identifier: fuboztZq+s9KXV3JtdwFvmvh/KqRSSnBcfLB8OGmqKs=
Subject key identifier: 4F:52:5B:CF:31:A0:EB:C4:51:81:D3:89:32:0C:1F:2A:19:2F:3C:42
Authority key identifier: 82:88:7A:B9:1D:2B:0F:6A:DB:FC:70:B2:46:19:F1:87:B1:A5:3D:59
Certificate issuer: /CN=A9159032/serialNumber=82887AB91D2B0F6ADBFC70B24619F187B1A53D59
Certificate serial: 1B04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goh6uR0rD2rb_HCyRhnxh7GlPVk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.mft
Manifest number: 1AF0
Signing time: Wed 22 Jul 2026 16:23:03 +0000
Manifest this update: Wed 22 Jul 2026 16:23:02 +0000
Manifest next update: Wed 29 Jul 2026 16:23:02 +0000
Files and hashes: 1: goh6uR0rD2rb_HCyRhnxh7GlPVk.crl (hash: /9lrSyGv13dGrMitbFxqKwWtuHp5P8TAGRIel8/INSY=)
2: 8AFD7D885DCE11EEA74FC07DC4F9AE02.roa (hash: 9z91DZp5gGn5objaZcmJRC9eXIJ9vkXiEByHhLrLrmk=)
3: 326E1852D80B11EC874C9083C4F9AE02.roa (hash: 5qtsq7ia4AOMsTly8sF4e2lBQ7HF32ao+hzi58so/BA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.crl
rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goh6uR0rD2rb_HCyRhnxh7GlPVk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:23:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6916 (0x1b04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9159032, serialNumber=82887AB91D2B0F6ADBFC70B24619F187B1A53D59
Validity
Not Before: Jul 22 16:23:02 2026 GMT
Not After : Jul 29 16:23:02 2026 GMT
Subject: CN=6a60ee67-e478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:3c:29:71:fa:56:bf:ff:1d:c9:35:c5:2a:f5:
09:67:5b:91:2e:cf:8a:ff:41:02:e8:5a:9d:e3:f7:
70:5b:c5:55:f0:df:be:0e:07:73:fe:58:5e:30:33:
55:93:c4:d3:a8:4c:e6:5c:a6:86:be:ce:ad:a6:86:
1c:42:34:8d:c0:d7:44:6b:1c:30:29:61:b9:ce:fa:
12:50:7a:2f:71:71:d3:aa:8f:38:82:5c:cf:26:5b:
91:02:77:1a:83:e1:96:c8:a7:dd:e7:31:89:ab:1c:
15:b9:68:45:22:b0:65:db:c9:f2:f5:8c:a0:6b:dd:
a3:03:8f:ae:d7:18:5e:e1:c1:66:d2:05:02:53:32:
c8:a7:bb:8d:12:94:9d:3a:f7:ac:f9:58:67:cc:f2:
ef:77:f1:7e:42:f7:14:a6:1f:c6:85:00:31:fb:10:
f2:d7:32:73:f2:97:07:8d:d3:77:0d:a2:a9:07:9b:
73:1c:13:8b:b5:49:c4:fa:19:a0:e2:8b:6b:18:dc:
c7:8d:cb:ef:fd:5c:94:70:48:68:dd:2d:90:b6:f5:
56:66:44:6c:57:ef:54:ec:27:db:39:e7:db:a7:89:
19:d0:18:2c:17:66:88:f7:05:24:d4:8b:ce:bc:f6:
15:f8:d1:69:08:ae:03:7e:ad:69:b9:46:98:bb:82:
05:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:52:5B:CF:31:A0:EB:C4:51:81:D3:89:32:0C:1F:2A:19:2F:3C:42
X509v3 Authority Key Identifier:
keyid:82:88:7A:B9:1D:2B:0F:6A:DB:FC:70:B2:46:19:F1:87:B1:A5:3D:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goh6uR0rD2rb_HCyRhnxh7GlPVk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:07:0e:9b:ca:dc:11:71:06:ec:d4:91:05:aa:54:48:b7:84:
9b:df:c4:09:da:1a:3b:d7:05:b0:ef:0d:1e:ff:87:95:58:27:
18:c2:1e:4d:6e:60:7f:20:08:04:e8:e4:a8:34:5a:2b:1a:47:
bd:e1:44:2c:aa:87:78:04:3a:93:68:69:f6:60:54:a7:00:85:
5f:4b:48:55:a0:ec:b4:31:34:a5:c6:eb:22:93:45:0b:87:a1:
e6:4c:59:09:cf:99:9e:c9:cc:4d:e0:0b:cd:da:00:7a:d2:b7:
3a:65:4f:c2:10:b6:c8:c7:e9:74:16:52:b9:2f:05:ab:99:f3:
32:f0:f4:cf:48:f8:77:4f:9c:81:9d:d4:81:6b:db:c9:36:a3:
14:df:90:87:9d:03:7f:1d:c9:fa:0b:3e:1d:6a:7f:b2:47:65:
75:be:04:84:dc:9c:cf:1c:d6:dc:1f:5c:a4:bb:3c:d8:8b:49:
7d:1c:1f:b8:76:d4:8e:a2:87:e9:37:f4:6c:2a:b8:86:2b:64:
d4:a7:97:18:37:e5:03:7f:94:bf:51:1f:d4:a6:25:2d:9a:c2:
af:e9:d5:9b:c7:d4:26:48:88:5b:84:b9:9b:b9:e4:cf:a7:21:
05:03:92:68:72:54:54:f1:b9:7f:2d:af:32:51:d6:92:13:1b:
0b:96:0a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:25:51 2026 by rpki-client