
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft
File: rGOF7VY-H9amaz5LUQ3MaTDNSww.mft (raw, json)
Hash identifier: 92k+7yzpnalwLKpHvA7FiSpWlLuGfyrck4/dvVU5kAs=
Subject key identifier: EA:FA:E4:27:E4:54:DD:EB:D4:21:87:E3:CC:16:98:66:52:D2:7E:52
Authority key identifier: AC:63:85:ED:56:3E:1F:D6:A6:6B:3E:4B:51:0D:CC:69:30:CD:4B:0C
Certificate issuer: /CN=A9160D0A/serialNumber=AC6385ED563E1FD6A66B3E4B510DCC6930CD4B0C
Certificate serial: 027B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft
Manifest number: 0259
Signing time: Wed 13 May 2026 02:28:42 +0000
Manifest this update: Wed 13 May 2026 02:28:41 +0000
Manifest next update: Wed 20 May 2026 02:28:41 +0000
Files and hashes: 1: rGOF7VY-H9amaz5LUQ3MaTDNSww.crl (hash: xWwETem+taMqkhz52xTqmh0z9wYktjm8JxTjnHWu1wc=)
2: 096A1DB6D2BA11ED8E06CC13C4F9AE02.roa (hash: xjJh+3SCJ/mrp3JYArjRvZVJMzUf7HfzNFOkj330dzY=)
3: D1EAA18CD2BC11ED9E7A9A1BC4F9AE02.roa (hash: s27t8mzFE7pAO+YQ8b7HEZWkopZAKcG8DRX9E1bRajo=)
4: 42EC5F02D2B711EDAF6DC017C4F9AE02.roa (hash: pkC+D8p7TNYzPBnocLkHTaXfdgtNXvj2i4jRd1Gl3NY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.crl
rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:28:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 635 (0x27b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160D0A, serialNumber=AC6385ED563E1FD6A66B3E4B510DCC6930CD4B0C
Validity
Not Before: May 13 02:28:41 2026 GMT
Not After : May 20 02:28:41 2026 GMT
Subject: CN=6a03e1da-720a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:06:d7:d0:c9:cb:8b:45:0b:42:ea:46:2b:50:
92:99:a8:c8:4e:39:63:6b:97:f1:91:19:75:3a:1c:
3e:3b:6e:d2:0d:9e:7a:85:0a:ae:af:7c:7d:c3:2e:
ae:b1:2d:75:01:b9:ed:62:04:ce:26:b6:a5:b5:24:
8f:25:80:75:31:85:99:b1:46:fc:13:e3:e6:6e:99:
2c:b7:68:f8:f9:21:4b:f9:3c:0f:0b:2a:76:52:8b:
98:81:4c:ee:ac:91:dc:ec:38:00:3a:96:57:f6:d8:
cf:69:e1:57:90:4e:f6:1b:f5:28:b3:a7:ac:90:15:
86:52:2a:f2:14:b0:3c:06:ca:ad:52:91:9b:17:bb:
1f:88:19:67:93:ca:ce:22:fd:dc:da:4c:04:fe:5f:
fa:d8:c3:61:57:0d:20:8d:fc:a3:b1:d2:fe:32:70:
b5:66:4e:0f:d2:1a:3a:49:8a:a0:96:3d:1b:3c:66:
7b:a8:cd:94:ad:8b:71:77:23:0e:eb:d8:26:27:89:
47:0a:03:72:f0:94:12:75:7e:c6:99:60:07:1b:7f:
c1:ee:07:d0:3b:4f:2a:66:19:3b:3f:83:38:a8:16:
85:e3:68:f1:d5:93:d9:a9:83:f6:fd:bd:51:e8:2d:
91:11:c3:a6:44:b3:db:bb:89:f0:38:cd:4a:ab:4e:
82:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:FA:E4:27:E4:54:DD:EB:D4:21:87:E3:CC:16:98:66:52:D2:7E:52
X509v3 Authority Key Identifier:
keyid:AC:63:85:ED:56:3E:1F:D6:A6:6B:3E:4B:51:0D:CC:69:30:CD:4B:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:32:24:74:01:c1:fe:c8:b6:81:28:aa:d7:a1:1e:28:cc:b9:
8f:09:f8:06:ed:17:b3:61:06:5f:49:7a:3c:1f:42:6b:19:06:
c3:f4:52:71:79:a9:91:ab:5d:a5:82:d4:17:92:b0:5b:7a:73:
34:cf:df:41:2c:80:52:c7:21:4b:bc:cc:f5:8a:ba:ea:81:1a:
89:9b:85:0f:54:0e:e0:79:69:b0:f4:40:ec:96:6b:cf:ab:87:
3b:4d:43:f6:29:50:62:b6:a7:98:8c:1e:e1:87:40:43:1f:58:
10:b5:cc:6e:c3:11:ed:80:a3:46:fb:17:20:75:de:7b:79:ad:
dc:bf:08:4b:b7:54:d3:ca:c0:04:1c:28:09:6a:7a:6d:52:08:
c1:b3:8e:78:a1:6f:20:a8:00:b9:42:fb:9c:df:c0:41:a0:79:
5c:a1:eb:07:03:e0:7b:32:f1:03:57:5a:d1:44:e9:da:df:01:
47:2e:65:02:c5:0d:8f:45:ce:d8:bc:27:41:a9:93:01:bc:4d:
46:6d:e5:3c:04:e9:99:35:12:09:d1:a2:16:da:54:f5:14:c1:
7a:1f:f2:cf:3d:60:88:6a:34:de:0e:71:2d:e0:8e:07:0a:cf:
a0:d0:25:f9:51:ae:c3:8d:5c:74:f7:60:2b:ad:59:2a:be:a8:
f4:69:40:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:38:46 2026 by rpki-client