
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft
File: GOH3Mu-lPDlzoazSLBNopeHyylI.mft (raw, json)
Hash identifier: KGVgZu9rXLnchnFA5cAdBz4heBzWM4wGKU8Z2md95Fs=
Subject key identifier: D4:29:4F:2E:49:7E:46:7E:7C:11:56:47:91:4C:44:41:46:F9:05:26
Authority key identifier: 18:E1:F7:32:EF:A5:3C:39:73:A1:AC:D2:2C:13:68:A5:E1:F2:CA:52
Certificate issuer: /CN=A918F00E/serialNumber=18E1F732EFA53C3973A1ACD22C1368A5E1F2CA52
Certificate serial: 025E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft
Manifest number: 024B
Signing time: Wed 25 Mar 2026 01:47:29 +0000
Manifest this update: Wed 25 Mar 2026 01:47:28 +0000
Manifest next update: Wed 01 Apr 2026 01:47:28 +0000
Files and hashes: 1: GOH3Mu-lPDlzoazSLBNopeHyylI.crl (hash: ITB+wteDbQ8b3LwxJOOzIZ3DRlKeMB5DIEzuksZrc0k=)
2: 09106CCCAD3E11ED8B645C39C4F9AE02.roa (hash: N3nsvmOWllg7YY9UOijNOBu82tIVELALhxtWtgqubMg=)
3: 098D6EACAD3E11ED8B645C39C4F9AE02.roa (hash: HIn0QMk9UdWThQFOmwI9rAJWgTR42ZOA8KgI9w+YxaU=)
4: AA73EF167DEB11EEB9699A24C4F9AE02.roa (hash: GCoUxXSsVbAe0WY7DuUx66j+ly/pwEQTvzaDkQp3iFo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.crl
rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:47:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 606 (0x25e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F00E, serialNumber=18E1F732EFA53C3973A1ACD22C1368A5E1F2CA52
Validity
Not Before: Mar 25 01:47:28 2026 GMT
Not After : Apr 1 01:47:28 2026 GMT
Subject: CN=69c33eb1-da6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ce:41:16:30:42:49:e6:1f:e5:bb:6d:64:ca:
2c:89:63:b5:38:55:be:ee:75:7e:63:bb:f0:1c:e9:
54:ea:6b:0a:30:93:fc:64:e5:84:f3:3f:54:d3:7e:
2f:c0:ba:55:8d:18:b3:08:f9:4e:8e:73:8b:4a:b9:
23:61:b3:00:91:a7:57:3a:7f:70:1c:1f:ce:c2:67:
41:fe:75:87:09:bc:10:52:52:e4:70:dc:de:6d:fb:
10:f2:e3:f1:57:e2:44:65:8d:79:36:d2:d2:9c:b0:
a9:52:3f:92:36:64:f3:40:05:f2:80:7c:c3:a2:53:
4c:fe:50:66:ca:b0:93:53:ca:b6:70:de:1d:ab:78:
1b:24:5d:8f:92:46:9b:ae:e7:10:63:d5:cb:ed:e7:
4f:07:40:f2:72:cd:b6:e1:72:f5:4e:3b:ed:3b:48:
d6:46:08:24:ec:79:51:05:61:ea:81:08:7b:5b:6c:
93:8a:0f:99:03:32:70:af:88:ff:de:48:10:22:a3:
76:0d:ce:1a:68:e5:ca:ad:dc:32:ae:36:89:36:b0:
cb:58:c7:82:5a:d2:fa:ef:4c:28:b7:2e:28:f6:7d:
3b:c7:e3:75:10:05:7f:81:a9:22:fc:9a:dd:3e:a5:
8d:46:df:20:f8:2f:f5:0e:a1:aa:8c:0f:08:db:27:
c6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:29:4F:2E:49:7E:46:7E:7C:11:56:47:91:4C:44:41:46:F9:05:26
X509v3 Authority Key Identifier:
keyid:18:E1:F7:32:EF:A5:3C:39:73:A1:AC:D2:2C:13:68:A5:E1:F2:CA:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:26:b4:22:3f:e5:4a:4b:3a:a4:89:81:c3:ba:54:2c:d8:b6:
75:91:d3:ef:69:24:f1:52:d5:9b:ce:4d:e9:77:77:6f:49:89:
ed:b9:42:f4:d7:f5:f4:77:41:1c:37:1f:35:38:b5:c4:3a:92:
9a:5b:c4:2b:1f:e7:39:56:d8:fb:ab:d9:c6:07:54:c9:18:e4:
70:cc:0c:d2:21:cf:1c:92:a9:dc:d9:bc:a5:cb:2c:35:bb:70:
95:85:f7:a8:17:62:17:fe:30:aa:4e:c6:32:7c:ec:f3:af:c3:
47:a8:4f:2b:ec:02:f3:54:1e:f9:5b:03:80:ac:8e:cf:b5:ce:
39:8a:c1:30:62:3a:f0:1f:bc:27:c7:1c:74:a5:f0:07:35:86:
2c:3f:98:28:28:33:ad:ee:52:06:3e:dc:5b:ec:86:9d:db:ba:
6c:1b:ae:48:39:75:e3:4e:ac:a5:cd:45:53:cc:de:2c:21:39:
58:c4:60:5e:38:aa:9b:64:eb:98:e8:1d:07:0f:4b:4d:c2:bf:
d6:3d:f5:77:c9:a1:1b:f4:2d:38:87:35:df:1a:9c:b5:40:22:
17:6b:8e:ba:c2:8a:c2:59:24:2e:31:1a:a6:30:e4:0a:a5:f9:
e4:d4:55:4e:64:c9:d1:63:77:ac:f4:f3:ed:6f:84:c4:30:44:
ad:69:e7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:07:51 2026 by rpki-client