
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft
File: 8goyYNssxWGzO2TeFLAR8poeJBQ.mft (raw, json)
Hash identifier: xp5T1Yj893dyM8gD2gSwUIwplkLE/tKX371SOji0HDg=
Subject key identifier: 8D:1A:D0:C5:26:D4:D1:EF:77:42:E8:D4:24:99:D4:A9:C4:AB:BA:00
Authority key identifier: F2:0A:32:60:DB:2C:C5:61:B3:3B:64:DE:14:B0:11:F2:9A:1E:24:14
Certificate issuer: /CN=A91BD9B7/serialNumber=F20A3260DB2CC561B33B64DE14B011F29A1E2414
Certificate serial: 0636
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8goyYNssxWGzO2TeFLAR8poeJBQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft
Manifest number: 062D
Signing time: Tue 22 Sep 2026 22:26:40 +0000
Manifest this update: Tue 22 Sep 2026 22:26:40 +0000
Manifest next update: Tue 29 Sep 2026 22:26:40 +0000
Files and hashes: 1: 8goyYNssxWGzO2TeFLAR8poeJBQ.crl (hash: WzBceEVh4+2T/1psVdkI7sqYpIELZw/OV1BQqx+wc2I=)
2: 713C4814F9DC11EBA9C81A44C4F9AE02.roa (hash: lkhGPvHLt5B4SMlhrUjjiqTdeEOWM5w+xJQVTXf+Zdo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.crl
rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8goyYNssxWGzO2TeFLAR8poeJBQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 22:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1590 (0x636)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BD9B7, serialNumber=F20A3260DB2CC561B33B64DE14B011F29A1E2414
Validity
Not Before: Sep 22 22:26:40 2026 GMT
Not After : Sep 29 22:26:40 2026 GMT
Subject: CN=6ab300a0-c532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d0:0d:0b:c5:95:b3:a0:c7:c2:ca:a3:fc:00:
01:98:b8:a1:15:aa:51:55:7a:2c:ee:bd:13:f6:b0:
7d:b5:43:f9:df:48:34:be:0f:cb:9a:fe:9d:2f:53:
57:71:4d:f4:40:db:19:6c:c4:59:8a:10:d7:63:c1:
f3:bd:c4:4c:20:1e:71:55:b5:8f:f5:a6:64:08:c6:
d3:9e:66:94:60:a1:d9:de:a6:74:c4:99:e0:f3:4c:
b2:4f:89:b0:e6:b3:b8:99:3f:9a:b9:50:da:e6:da:
78:4d:04:9e:4a:60:5d:4f:3c:47:c9:2d:e2:f5:33:
64:d6:b1:2e:61:2b:c2:91:ae:66:e3:4f:06:70:8a:
90:f6:91:df:b6:b0:fb:25:9e:af:42:1e:ef:f6:fb:
29:a6:81:7a:ad:f5:93:07:4d:27:69:1c:74:2d:9c:
69:f9:94:8e:5f:fc:a3:18:19:c8:8d:7a:f5:32:05:
6b:ba:24:8a:9f:7d:3e:82:f2:73:90:1e:8a:2c:1f:
c0:76:db:74:13:6b:c8:ae:aa:48:e6:a1:34:6e:c4:
bc:71:30:0c:7c:fe:2a:3b:82:c5:8b:7c:a4:b4:7b:
c0:42:b9:5a:a4:5a:0b:df:8a:1b:3e:d8:3e:c2:8d:
7a:d8:bd:35:57:ea:04:f7:ef:4e:85:31:cc:02:39:
e2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:1A:D0:C5:26:D4:D1:EF:77:42:E8:D4:24:99:D4:A9:C4:AB:BA:00
X509v3 Authority Key Identifier:
keyid:F2:0A:32:60:DB:2C:C5:61:B3:3B:64:DE:14:B0:11:F2:9A:1E:24:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8goyYNssxWGzO2TeFLAR8poeJBQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:98:e2:7e:d0:16:22:fc:45:ba:dc:f0:95:17:0d:bf:8e:60:
8c:79:12:10:7e:f0:9d:54:ef:6a:de:46:81:dd:5d:3a:83:78:
60:f9:5e:66:e0:24:67:07:c2:43:63:9d:bb:aa:ec:69:4f:4f:
80:57:4f:c0:78:6f:6e:eb:80:6c:bb:a3:35:2e:cb:87:91:a6:
04:3b:32:2c:dd:a1:96:93:58:cd:7f:8f:6c:4a:cb:8a:64:d1:
dd:98:84:6a:02:b8:43:af:f0:52:0c:b7:80:b8:b6:a7:78:f3:
26:b5:97:db:eb:2a:e6:b6:eb:fa:df:1c:aa:79:73:56:ac:40:
19:57:0f:ba:ba:78:17:c2:79:8a:d8:6f:00:77:44:3c:08:3a:
cb:77:d8:6d:ad:4d:41:df:e0:23:53:7e:b3:1a:64:a3:22:24:
65:4b:43:53:58:11:59:92:3f:0e:7e:f5:36:4f:3e:8e:5d:6c:
4d:a5:08:6a:ca:bf:fc:ba:d5:f5:6f:eb:5f:07:70:75:18:54:
6c:cf:43:f4:57:3e:9d:d9:74:66:e6:e7:03:d8:b2:9e:dd:6e:
42:51:3b:e9:c7:0d:ac:21:b4:f4:18:22:b2:75:3f:d2:49:6d:
ba:66:56:22:9e:99:6e:e0:fe:24:02:a4:a3:40:2d:30:92:9f:
16:4a:3a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:57:29 2026 by rpki-client