
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft
File: GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft (raw, json)
Hash identifier: 2EMCV0WWC7NQoKdGfBLjkgdf4ZNq0Vv5xdlswvaBDiI=
Subject key identifier: 8B:16:6D:17:0F:BC:01:CF:62:C6:5E:6A:90:0D:E4:3E:9A:21:52:BB
Authority key identifier: 1A:82:D1:C6:88:8A:B7:30:99:F8:E5:9A:EB:28:8C:0D:48:BB:29:2B
Certificate issuer: /CN=A91C5D32/serialNumber=1A82D1C6888AB73099F8E59AEB288C0D48BB292B
Certificate serial: 03D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft
Manifest number: 03CA
Signing time: Wed 25 Mar 2026 00:33:57 +0000
Manifest this update: Wed 25 Mar 2026 00:33:57 +0000
Manifest next update: Wed 01 Apr 2026 00:33:57 +0000
Files and hashes: 1: GoLRxoiKtzCZ-OWa6yiMDUi7KSs.crl (hash: NNqZJKIGZh0aEQZWFWvCekri+9+kZelPnjlIEs9TBC8=)
2: 9F2711861C8C11ED903AF819C4F9AE02.roa (hash: AwUinlhQoZr0cr/LeO9LbpyYPRye/aoN+g7yo3vyhJM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.crl
rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:33:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 977 (0x3d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5D32, serialNumber=1A82D1C6888AB73099F8E59AEB288C0D48BB292B
Validity
Not Before: Mar 25 00:33:57 2026 GMT
Not After : Apr 1 00:33:57 2026 GMT
Subject: CN=69c32d75-9292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:ae:0c:c5:8a:ba:51:e6:83:01:87:89:61:e2:
ea:09:e0:ed:df:d7:c6:61:d4:2b:f1:8a:27:d6:8c:
94:d0:0b:24:64:94:6e:ea:d3:88:11:80:99:99:f5:
14:6f:9f:8e:d3:ee:96:c1:2a:4d:04:92:50:4b:53:
73:e5:f5:2d:51:99:09:b2:9c:5a:9e:4b:05:07:6c:
9f:52:19:09:29:67:40:70:9c:24:f0:5f:66:c7:41:
62:0e:3f:37:8a:ed:51:f1:31:b7:59:2c:8d:89:3e:
bb:0a:09:3f:b3:70:17:8c:4e:75:10:ab:61:d1:28:
2c:ca:eb:85:36:1d:fb:a5:81:44:a9:03:f1:35:03:
6a:7c:d2:f4:6c:c7:e2:98:30:e8:ae:55:c3:cf:54:
75:94:91:83:7b:16:2d:75:4a:f5:cb:48:51:ef:41:
b2:4e:4c:50:19:55:54:98:8d:a4:78:1c:38:42:4d:
47:1a:64:a2:f9:b9:21:35:f5:53:02:71:f5:97:94:
41:f4:be:70:41:08:37:95:6a:7b:d3:d4:33:d7:51:
87:f1:28:4b:de:8f:0e:b0:93:af:23:9d:38:39:6f:
03:fd:95:78:9b:70:c1:db:1b:9f:19:d6:80:9c:5b:
dc:c4:66:4d:38:8d:3c:dc:04:f4:b9:55:1d:fd:a2:
1a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:16:6D:17:0F:BC:01:CF:62:C6:5E:6A:90:0D:E4:3E:9A:21:52:BB
X509v3 Authority Key Identifier:
keyid:1A:82:D1:C6:88:8A:B7:30:99:F8:E5:9A:EB:28:8C:0D:48:BB:29:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:84:02:48:36:18:70:1b:c0:95:e8:5e:34:d4:d5:47:f4:68:
b4:18:68:25:5e:17:4f:dc:42:e1:9c:57:b3:a4:51:6b:78:bc:
0e:12:67:bb:6e:f4:9c:82:c4:b3:62:32:40:7c:56:e6:60:39:
48:15:43:2f:9d:e1:1c:8d:dd:99:b8:12:c5:8e:3b:9c:e4:b3:
90:56:6e:b8:d3:46:55:41:2e:a1:cf:be:3f:a8:cc:e5:3c:a2:
58:76:69:71:b1:97:b5:e7:a7:90:c7:e3:54:97:da:66:f5:23:
c2:71:ce:aa:3b:bb:0f:b5:1d:1b:8f:b5:43:09:ca:b0:23:74:
db:49:80:79:ba:f7:6d:fc:0f:f8:93:64:89:b4:43:04:a5:13:
9b:f9:fb:de:63:92:91:01:d9:b7:b0:6f:68:6c:ad:c8:71:7e:
84:f7:12:e8:63:04:b6:9c:5d:da:58:54:4d:f1:a1:ab:0b:09:
f6:91:0b:ec:80:21:db:0d:88:f9:1c:af:99:c4:bf:ea:f5:c5:
08:59:ac:6b:22:85:14:9e:e4:e9:50:4d:b4:23:45:30:0d:6c:
21:59:8b:e0:f5:ff:5e:f5:74:4b:44:bf:03:fb:cf:0f:59:19:
9f:7c:4b:b1:d5:f3:2b:21:59:6b:64:27:2a:12:ee:5c:a1:ab:
5d:15:99:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:26:25 2026 by rpki-client