
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft
File: fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft (raw, json)
Hash identifier: 3ZAZ6Q3NFJajRO4rGcJ+ttJTaJr1noBL2Y8TuFTnI+0=
Subject key identifier: B3:2D:2A:56:16:CD:95:30:81:33:02:AF:32:AF:95:FD:18:6A:CB:43
Authority key identifier: 7C:63:B2:83:D9:B8:A0:6E:EA:D0:62:1B:82:3E:D0:F4:E6:99:DD:F4
Certificate issuer: /CN=A91E2AE5/serialNumber=7C63B283D9B8A06EEAD0621B823ED0F4E699DDF4
Certificate serial: 156B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft
Manifest number: 1559
Signing time: Tue 24 Mar 2026 15:29:10 +0000
Manifest this update: Tue 24 Mar 2026 15:29:10 +0000
Manifest next update: Tue 31 Mar 2026 15:29:10 +0000
Files and hashes: 1: fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl (hash: TMYYKOpoA9FFymJuYeZAaaBi/VpcQo4cr3AXuwdYiKU=)
2: C163B1881A4711EDA547FE24C4F9AE02.roa (hash: hQYRG8ncZ6CHxCWYK1hLhmfKl621jQSkzGCZnvGLqeQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl
rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 15:29:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5483 (0x156b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2AE5, serialNumber=7C63B283D9B8A06EEAD0621B823ED0F4E699DDF4
Validity
Not Before: Mar 24 15:29:10 2026 GMT
Not After : Mar 31 15:29:10 2026 GMT
Subject: CN=69c2adc6-264e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:29:11:57:4d:45:26:a0:d4:0d:dd:36:6d:78:
4f:27:6c:ee:c4:9d:b8:4d:57:5b:31:28:a6:9b:1d:
e2:30:ac:6e:32:75:86:6e:d9:27:6e:8f:4c:30:8e:
b5:2e:fa:28:ff:04:55:f6:b3:26:db:9b:9e:65:d2:
81:a3:84:2c:ba:b4:b4:a9:d8:20:41:3b:4e:df:d4:
ff:0c:b2:aa:6d:37:07:81:e6:c0:0f:2a:b4:bc:08:
3f:d7:0f:64:39:4a:06:57:12:31:fb:4b:c5:c5:5b:
8f:60:0a:93:eb:21:33:8a:ff:58:29:63:f2:dc:06:
32:45:6d:c5:31:73:6a:e8:8d:78:01:d4:6b:76:ce:
9d:da:80:84:26:38:02:54:fe:a4:c0:71:9f:08:ce:
fc:b3:71:6b:60:2d:90:2c:b3:e9:c4:2f:69:a8:79:
b6:e4:48:6f:23:cf:64:07:9d:38:ea:c1:8d:50:9b:
82:52:1b:1a:ea:96:d4:2a:77:80:cb:39:aa:ff:2b:
fd:fd:b0:01:ae:ee:7c:15:ef:de:60:14:3b:67:39:
ec:c4:75:0b:17:23:c6:32:4a:85:09:43:18:3b:04:
ac:b6:26:7c:95:ba:76:93:91:98:bd:a9:fd:31:66:
d5:d0:5b:ab:cd:98:83:d8:fa:f0:9c:b0:a6:e3:f1:
d8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:2D:2A:56:16:CD:95:30:81:33:02:AF:32:AF:95:FD:18:6A:CB:43
X509v3 Authority Key Identifier:
keyid:7C:63:B2:83:D9:B8:A0:6E:EA:D0:62:1B:82:3E:D0:F4:E6:99:DD:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:b8:13:8b:5b:76:ff:29:3a:e4:9d:bb:f6:6c:10:05:0b:2d:
df:d7:9a:12:37:0b:3c:96:f6:61:11:72:7d:31:8b:bb:fd:bd:
f0:78:23:91:e1:4b:3b:07:c5:50:25:f3:56:81:4c:dd:55:80:
4a:51:c5:1e:f4:59:00:85:52:2e:f5:b1:73:a3:20:17:5c:36:
16:96:d5:b5:79:5f:39:d9:d5:62:10:c9:c8:e0:ae:4d:3f:49:
de:97:bc:6a:35:22:6a:69:89:1f:c1:c9:f4:fd:9c:c5:47:47:
cd:9d:ea:d4:97:90:a7:cf:78:69:3f:2e:a7:1d:44:c9:bf:1b:
87:41:07:8e:e6:a4:08:3b:e6:92:df:33:47:a0:33:be:f0:b1:
87:c3:84:e8:fd:7e:73:6d:2c:82:3c:92:56:4c:5d:51:9a:bd:
32:30:59:52:34:04:b9:18:a7:57:13:63:c5:17:df:e7:30:98:
37:78:e2:76:1b:f7:7c:f0:de:70:6c:f3:55:84:7c:20:a9:fd:
21:37:e3:d3:e6:3b:8a:13:1b:a4:6e:f7:55:f7:a3:b9:ac:3b:
b5:a4:92:b5:e5:4a:d8:77:b1:ba:54:32:a0:6a:59:23:e5:57:
f1:3a:b1:e9:1b:07:45:c0:60:c6:c4:91:2c:3f:ee:29:93:78:
72:2e:67:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:43:55 2026 by rpki-client