
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft
File: rGOF7VY-H9amaz5LUQ3MaTDNSww.mft (raw, json)
Hash identifier: E7HrDFqfS5WDSTxcMltWENE4WpC1F/6T+bUbGevVcM8=
Subject key identifier: F0:F3:85:18:4F:0A:26:D4:A6:39:4D:43:E2:47:0B:41:A1:04:05:67
Authority key identifier: AC:63:85:ED:56:3E:1F:D6:A6:6B:3E:4B:51:0D:CC:69:30:CD:4B:0C
Certificate issuer: /CN=A9160D0A/serialNumber=AC6385ED563E1FD6A66B3E4B510DCC6930CD4B0C
Certificate serial: 029E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft
Manifest number: 027C
Signing time: Thu 23 Jul 2026 03:14:07 +0000
Manifest this update: Thu 23 Jul 2026 03:14:07 +0000
Manifest next update: Thu 30 Jul 2026 03:14:07 +0000
Files and hashes: 1: rGOF7VY-H9amaz5LUQ3MaTDNSww.crl (hash: rbGGE6Fo2kNVHnxd5He/Y6Xh5tQfhk3+0MI6U+FEsJM=)
2: 42EC5F02D2B711EDAF6DC017C4F9AE02.roa (hash: pkC+D8p7TNYzPBnocLkHTaXfdgtNXvj2i4jRd1Gl3NY=)
3: D1EAA18CD2BC11ED9E7A9A1BC4F9AE02.roa (hash: s27t8mzFE7pAO+YQ8b7HEZWkopZAKcG8DRX9E1bRajo=)
4: 096A1DB6D2BA11ED8E06CC13C4F9AE02.roa (hash: xjJh+3SCJ/mrp3JYArjRvZVJMzUf7HfzNFOkj330dzY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.crl
rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 670 (0x29e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160D0A, serialNumber=AC6385ED563E1FD6A66B3E4B510DCC6930CD4B0C
Validity
Not Before: Jul 23 03:14:07 2026 GMT
Not After : Jul 30 03:14:07 2026 GMT
Subject: CN=6a6186ff-af77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3d:f5:49:e3:96:87:c6:65:46:2d:2b:af:72:
57:b7:59:1a:a2:37:86:7e:0d:5e:11:83:bf:59:9d:
00:6e:53:6b:c6:47:57:10:18:e3:4f:10:ea:a6:d9:
7a:55:a2:0d:26:f0:2e:a2:1b:c6:68:b3:ac:43:39:
ee:b5:84:d3:48:9a:7c:e5:bc:22:98:36:3f:da:d2:
d2:63:f2:26:55:0a:82:fd:aa:6f:d8:e4:76:d0:b7:
ab:18:8a:a2:fa:63:51:3b:e2:a8:0b:2e:81:6c:0a:
e6:68:7f:a3:26:fc:f5:b4:a4:12:98:5d:b0:b8:8a:
6a:ca:f7:dc:9b:51:64:6c:bd:d5:a9:60:77:cc:3e:
7c:72:bf:27:a7:20:25:b6:36:c6:65:ea:3e:a1:4b:
72:24:dd:45:5e:61:5f:9d:b5:ee:d9:19:d5:14:6a:
b4:bf:16:d0:5f:08:d7:a7:2d:05:46:d0:2c:72:53:
46:28:63:74:ea:68:cd:07:97:61:2d:68:6c:80:a8:
2f:23:42:f9:b9:b4:ef:05:a3:8f:0f:96:ee:fb:c2:
82:08:9d:df:1f:58:9b:73:b1:e5:a3:7c:19:32:a6:
be:9d:b2:ae:8f:6d:27:37:80:8e:61:5d:ab:cb:0b:
21:83:8e:9a:8a:3e:22:a1:2c:6f:c9:f5:fe:ff:9e:
21:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F3:85:18:4F:0A:26:D4:A6:39:4D:43:E2:47:0B:41:A1:04:05:67
X509v3 Authority Key Identifier:
keyid:AC:63:85:ED:56:3E:1F:D6:A6:6B:3E:4B:51:0D:CC:69:30:CD:4B:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:66:14:9e:d5:ae:27:27:c5:f4:95:d5:d1:98:09:97:c5:c3:
68:9a:9c:36:87:58:df:7b:56:58:fc:d7:24:a0:cf:49:83:05:
0c:9b:e2:29:29:8d:bd:ae:0e:1c:60:55:3b:21:95:81:a0:49:
5a:98:c8:df:81:b2:70:9d:60:d4:7d:3c:ac:54:bb:ea:0d:c6:
ee:68:f3:a1:12:5c:bc:56:6c:d8:11:20:0c:56:b2:67:d4:8f:
76:b9:12:16:d4:f9:b2:8c:2a:d7:80:42:94:ba:9f:fc:b2:4c:
5d:ca:ad:f9:7c:56:9e:79:12:48:24:ec:db:cf:a1:f0:62:1d:
f4:e2:5a:83:85:17:29:c0:52:47:77:b3:5c:a1:d3:7c:c2:50:
4c:6f:ae:31:16:c4:51:e1:31:03:0a:40:63:73:79:9c:31:b4:
ee:06:38:0f:54:1a:61:e9:78:5b:ce:29:be:eb:a0:b8:83:a9:
45:8c:3a:e2:59:53:c4:b3:5f:68:ce:7b:f0:ef:e3:85:ed:6b:
c3:1d:b0:d9:fb:11:ef:2f:d2:da:0a:89:0e:d8:60:7d:66:8d:
35:e5:08:d6:3a:31:33:57:cd:f2:0d:76:a6:ed:00:3d:25:b3:
e7:f6:04:2a:23:1a:09:28:dc:b8:4f:82:4e:5b:4d:23:0e:4f:
05:93:22:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:41:02 2026 by rpki-client