
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.mft
File: GoOKdo1b8PVMYaptorRQOBveZ8c.mft (raw, json)
Hash identifier: vx49qvvb87YSAJj/QcNNUYYS43iNZgG54cNDHlSt26A=
Subject key identifier: FA:80:76:85:33:97:12:F2:67:03:8E:99:A4:FC:B0:D0:30:4B:11:4C
Authority key identifier: 1A:83:8A:76:8D:5B:F0:F5:4C:61:AA:6D:A2:B4:50:38:1B:DE:67:C7
Certificate issuer: /CN=A918FFA8/serialNumber=1A838A768D5BF0F54C61AA6DA2B450381BDE67C7
Certificate serial: 3566
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoOKdo1b8PVMYaptorRQOBveZ8c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.mft
Manifest number: 3563
Signing time: Wed 22 Jul 2026 14:36:55 +0000
Manifest this update: Wed 22 Jul 2026 14:36:55 +0000
Manifest next update: Wed 29 Jul 2026 14:36:55 +0000
Files and hashes: 1: GoOKdo1b8PVMYaptorRQOBveZ8c.crl (hash: QI5Aoo6WjUG1l8G9NAYGPZuEi4LoyF2fNASNrf3NbmE=)
2: 2021C6F6795E11F0B07E6E6BC4F9AE02.roa (hash: TqlpecplvSdLV29TPM7WN07wNwjZ8MAc88miHR0h6qc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.crl
rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoOKdo1b8PVMYaptorRQOBveZ8c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 14:36:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13670 (0x3566)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FFA8, serialNumber=1A838A768D5BF0F54C61AA6DA2B450381BDE67C7
Validity
Not Before: Jul 22 14:36:55 2026 GMT
Not After : Jul 29 14:36:55 2026 GMT
Subject: CN=6a60d587-d9f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ef:d2:66:eb:1c:69:25:9e:1c:15:ec:34:fe:
bc:e8:cf:e0:99:f3:3a:67:3b:cf:b9:62:43:65:98:
ae:a3:49:b1:c1:b5:5a:56:77:f7:c8:4a:31:f9:50:
4f:3c:16:5b:a4:72:3f:ec:d0:ba:fd:11:ae:ae:09:
cd:dd:89:f3:46:9f:b2:f9:ca:a3:93:c0:69:28:f9:
27:5a:e2:79:01:6e:72:5b:12:fa:7e:37:35:30:d6:
52:ac:ac:65:85:60:c5:a2:e5:fc:b7:fe:ed:ae:e7:
07:7e:bf:ca:94:ad:26:6b:2d:25:73:60:93:ac:18:
9a:1f:8b:e7:b6:3d:4b:3c:01:51:58:62:61:64:1c:
97:8b:4d:b3:a8:45:96:e9:11:63:36:66:fe:50:11:
27:c1:1d:58:16:30:b6:d3:da:90:19:8b:5d:b2:b5:
c4:52:e1:96:9c:04:b0:a8:69:54:e0:31:7e:1f:72:
a5:54:19:1c:be:8b:8f:e8:bc:53:57:15:db:5f:a1:
44:37:8b:47:ac:b1:54:25:82:71:e4:ef:31:37:4a:
8d:58:6e:2f:5f:f8:86:58:a5:d5:40:db:95:79:b1:
3e:1c:10:58:85:9d:6b:d7:56:21:17:e2:16:72:b5:
27:3e:7b:86:6d:fc:52:33:d9:92:e8:bc:18:c4:0e:
3a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:80:76:85:33:97:12:F2:67:03:8E:99:A4:FC:B0:D0:30:4B:11:4C
X509v3 Authority Key Identifier:
keyid:1A:83:8A:76:8D:5B:F0:F5:4C:61:AA:6D:A2:B4:50:38:1B:DE:67:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoOKdo1b8PVMYaptorRQOBveZ8c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:c9:b4:a5:32:a6:5c:a8:3b:13:7d:da:22:b6:cf:59:cc:ce:
be:dd:c5:06:63:83:f1:35:9b:2c:2e:54:1a:6f:c5:ad:6f:1a:
e6:d8:db:e0:f0:0c:fc:d8:fb:15:1e:c0:7c:df:a4:e4:56:c4:
d0:b3:8a:a9:66:83:92:da:ab:05:57:05:b1:52:74:31:b3:ac:
5d:4c:42:dd:47:52:b1:ef:84:8c:a9:ac:e4:6c:14:f6:80:fc:
01:bd:11:40:7d:f5:0e:0c:4f:b9:9e:6f:d7:e8:cc:ad:31:c9:
ae:91:24:94:bd:b2:b1:37:13:66:0f:06:df:37:dc:3b:ea:e0:
d1:88:4e:85:a3:16:a2:59:a4:b0:9f:04:25:3d:56:2c:85:75:
6e:06:a4:11:1e:7a:69:f5:66:8b:3d:c0:d0:62:cf:75:f4:52:
c9:9a:2a:9b:f2:4d:e3:80:41:d4:67:1e:8d:a4:6b:8b:3b:44:
b3:f0:51:ec:23:fa:cd:f6:25:b0:40:77:31:0a:77:61:08:0f:
74:46:bd:28:89:4f:ba:26:f7:e0:c3:e3:93:c3:88:21:5f:b1:
62:e9:e0:e5:2f:38:20:71:59:16:4e:11:50:f4:1f:62:88:1e:
0d:9a:99:7c:72:ee:64:22:4e:58:67:d4:46:f2:2b:d1:30:aa:
9a:f5:4c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:47:47 2026 by rpki-client