
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.mft
File: GoOKdo1b8PVMYaptorRQOBveZ8c.mft (raw, json)
Hash identifier: CzTqL6JT5see9rcAUmZGcLmUUZ16csMBY7fD9BrHsbg=
Subject key identifier: B3:A5:35:A0:69:09:E3:F9:C8:48:36:F4:DF:48:D0:8C:92:32:31:CF
Authority key identifier: 1A:83:8A:76:8D:5B:F0:F5:4C:61:AA:6D:A2:B4:50:38:1B:DE:67:C7
Certificate issuer: /CN=A918FFA8/serialNumber=1A838A768D5BF0F54C61AA6DA2B450381BDE67C7
Certificate serial: 3587
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoOKdo1b8PVMYaptorRQOBveZ8c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.mft
Manifest number: 3584
Signing time: Thu 24 Sep 2026 14:35:02 +0000
Manifest this update: Thu 24 Sep 2026 14:35:01 +0000
Manifest next update: Thu 01 Oct 2026 14:35:01 +0000
Files and hashes: 1: GoOKdo1b8PVMYaptorRQOBveZ8c.crl (hash: FPJVtZ8dZ2noO3yQr/6Nc5QPQiDKCMnVUEDpDWaXTnI=)
2: 2021C6F6795E11F0B07E6E6BC4F9AE02.roa (hash: TqlpecplvSdLV29TPM7WN07wNwjZ8MAc88miHR0h6qc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.crl
rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoOKdo1b8PVMYaptorRQOBveZ8c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 14:35:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13703 (0x3587)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FFA8, serialNumber=1A838A768D5BF0F54C61AA6DA2B450381BDE67C7
Validity
Not Before: Sep 24 14:35:01 2026 GMT
Not After : Oct 1 14:35:01 2026 GMT
Subject: CN=6ab53516-cfb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d4:b5:27:24:ed:17:a0:ef:d8:a4:91:04:fe:
51:6a:79:d8:53:84:0f:19:9e:08:74:de:06:e1:a3:
25:f3:d2:8d:09:88:80:ad:f7:24:ff:6e:2e:7f:36:
2f:82:24:d3:ab:71:82:96:5d:f3:4e:28:e7:51:45:
97:85:68:21:59:25:a0:48:c7:ed:05:79:75:1b:81:
c6:7f:a4:74:45:7b:dc:10:be:98:70:5c:85:6a:92:
e6:44:57:f9:5a:d4:0a:1a:67:62:62:4b:6b:cc:65:
c6:03:32:1c:5e:ea:8b:40:f0:df:05:dd:6c:49:27:
e4:d3:3c:b6:b7:52:44:81:6f:e3:92:90:94:76:11:
3c:f2:05:66:cf:80:c9:75:47:87:96:bd:85:a1:8c:
56:81:84:c6:ff:cb:82:dc:d1:07:ea:96:f8:4e:62:
4d:9c:fe:66:ff:66:e0:ff:cf:ba:4a:5f:df:83:37:
3d:8b:4d:a7:9b:21:16:07:41:e7:df:f3:a1:51:4e:
98:bf:4f:d0:0f:92:50:b8:1b:11:77:b9:0d:7a:f1:
4c:3d:4c:eb:3d:d5:51:cc:f1:97:01:8b:3b:8d:0a:
69:2e:30:67:88:69:93:f1:81:ea:43:7f:30:63:85:
b5:b2:76:0c:f7:88:1c:ac:89:fe:d7:d5:ca:51:b4:
ef:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A5:35:A0:69:09:E3:F9:C8:48:36:F4:DF:48:D0:8C:92:32:31:CF
X509v3 Authority Key Identifier:
keyid:1A:83:8A:76:8D:5B:F0:F5:4C:61:AA:6D:A2:B4:50:38:1B:DE:67:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoOKdo1b8PVMYaptorRQOBveZ8c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:2d:6f:3c:f2:d7:0c:80:9d:c6:f8:c4:ee:cb:2d:6e:f7:8f:
46:5a:98:7e:c6:f5:79:e1:4a:b8:69:11:45:e2:97:bc:9f:11:
a7:7f:8c:52:a3:b8:70:9c:ed:cb:94:48:da:f6:a4:04:d3:53:
c7:23:0c:79:f2:53:9f:47:ae:16:ed:d9:14:5b:5f:5f:fe:11:
45:51:66:88:a6:e4:74:c8:69:bd:69:2e:39:44:15:89:27:bd:
8e:4f:19:4d:fc:1f:50:5c:f0:f0:45:f0:7c:37:44:de:8d:5a:
56:de:7e:99:81:f6:49:67:b4:43:f8:44:d2:79:ca:16:c4:aa:
31:d0:36:21:43:5f:b1:0b:93:ab:e3:44:b0:32:1c:fa:24:4d:
02:8d:32:b2:6f:ab:17:00:cb:08:03:64:de:cf:6f:bd:0d:39:
38:53:c1:c6:e0:a9:9c:e8:43:b9:f5:72:18:b5:0f:de:8e:49:
0d:11:89:ce:5d:80:b1:cb:57:17:19:da:43:99:fa:c5:ad:a0:
88:29:f0:a3:d9:64:81:ad:b4:c5:3c:7c:eb:13:3f:73:e8:43:
e8:fe:b8:0d:56:6f:c8:fc:0e:48:85:26:79:4f:95:76:d3:4b:
a7:0c:63:0f:82:24:61:76:e0:53:80:7d:c5:95:24:39:46:85:
bd:89:5a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:50:35 2026 by rpki-client