
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft
File: GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft (raw, json)
Hash identifier: RYUjOZ5tmiLjJlEqJsfxn5CvgcGaBCQnKq28uRLMi3A=
Subject key identifier: BE:03:9F:4C:5C:0D:79:54:D5:4E:8E:10:7F:73:9E:90:42:75:D8:1A
Authority key identifier: 1A:82:D1:C6:88:8A:B7:30:99:F8:E5:9A:EB:28:8C:0D:48:BB:29:2B
Certificate issuer: /CN=A91C5D32/serialNumber=1A82D1C6888AB73099F8E59AEB288C0D48BB292B
Certificate serial: 040E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft
Manifest number: 0407
Signing time: Thu 23 Jul 2026 01:16:28 +0000
Manifest this update: Thu 23 Jul 2026 01:16:28 +0000
Manifest next update: Thu 30 Jul 2026 01:16:28 +0000
Files and hashes: 1: GoLRxoiKtzCZ-OWa6yiMDUi7KSs.crl (hash: kavQkXLYz+izFrF7T82etUzY2CPYPWdS+Hl5U13tPQA=)
2: 9F2711861C8C11ED903AF819C4F9AE02.roa (hash: AwUinlhQoZr0cr/LeO9LbpyYPRye/aoN+g7yo3vyhJM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.crl
rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:16:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1038 (0x40e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5D32, serialNumber=1A82D1C6888AB73099F8E59AEB288C0D48BB292B
Validity
Not Before: Jul 23 01:16:28 2026 GMT
Not After : Jul 30 01:16:28 2026 GMT
Subject: CN=6a616b6c-b6e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f1:19:7e:a1:64:9e:56:62:69:30:76:94:86:
43:c3:4b:03:3c:c9:f8:b4:7f:22:4d:34:2f:de:a2:
83:cf:bc:9a:03:74:bc:88:36:56:4c:39:bb:5d:45:
3f:da:96:ca:0f:da:30:61:83:30:c4:b7:ad:82:c1:
f2:b2:2a:18:9c:4b:31:5d:c2:25:99:70:67:09:96:
ab:85:2d:d2:94:c0:07:4d:fd:ec:f2:e3:3c:6e:f9:
2d:3b:9d:61:34:fa:d5:c9:64:97:4d:13:d9:d5:c0:
6a:02:4c:f2:e0:fe:34:44:d8:6b:b7:3b:84:35:32:
0e:84:05:12:de:82:77:2b:a7:76:d0:6e:09:02:47:
8a:ee:04:1a:65:9d:c3:58:66:5c:fd:82:c0:71:2f:
df:56:a9:36:1f:87:a9:b8:c0:48:f5:cd:b4:48:1e:
2d:cf:d7:61:ba:ee:f5:82:47:06:88:f8:cb:d4:63:
17:b7:e9:78:df:3a:08:e1:03:28:ab:5b:75:68:41:
d9:92:fa:17:a6:8a:52:83:89:29:78:8a:0a:fb:d1:
c4:b3:29:c4:77:5a:09:2b:24:d1:26:be:f7:2c:90:
90:c3:7a:70:fe:fa:fc:32:19:9e:16:86:a5:29:8f:
a7:81:c6:91:0e:98:35:4d:91:f3:fd:20:e1:ef:09:
86:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:03:9F:4C:5C:0D:79:54:D5:4E:8E:10:7F:73:9E:90:42:75:D8:1A
X509v3 Authority Key Identifier:
keyid:1A:82:D1:C6:88:8A:B7:30:99:F8:E5:9A:EB:28:8C:0D:48:BB:29:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:75:93:66:df:79:72:bf:2c:9e:e4:ed:82:fe:24:c1:cd:45:
c6:48:9d:00:94:de:21:96:19:79:d6:9a:f1:8e:a6:b1:1f:af:
03:60:d3:6b:65:92:1d:f3:60:55:ad:6d:4a:ca:90:be:af:ae:
49:eb:70:8c:c3:8c:13:1e:11:09:59:da:1b:7a:06:d8:86:66:
ee:3c:be:10:37:09:e7:0e:cf:4b:c1:56:ce:90:08:44:f9:1f:
42:79:2b:9c:fd:a6:f6:42:ca:c6:82:23:3a:e1:b0:61:2d:06:
7f:de:5c:03:2a:7e:b5:83:f1:37:83:7c:e5:9a:9b:86:54:d3:
b3:8a:40:15:b1:24:ae:7e:03:bc:29:e3:1a:7a:1d:52:1b:c3:
4f:46:08:77:14:fd:fd:34:8e:12:22:fe:ed:58:a1:5f:17:9b:
16:de:a2:be:90:64:b5:14:70:bc:ec:00:ce:1d:f8:ca:15:2a:
6f:64:e1:d4:cb:57:ac:75:5b:1b:a7:ce:51:99:d9:b5:7f:b5:
68:67:1f:0b:43:fe:e7:20:50:34:99:57:15:e2:80:32:66:a2:
fd:13:f1:17:33:3f:13:cc:20:8b:24:67:b0:01:a5:5b:a6:5d:
34:11:98:74:bf:9d:7d:ce:79:10:0f:bb:b8:b0:c3:9f:1a:7f:
0e:84:ea:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:08:22 2026 by rpki-client