
$ rpki-client -vvf rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft
File: GO9DJ41GMx6arw_XcqcygNE6qlI.mft (raw, json)
Hash identifier: suujdh3MqCEC3wLHFh16ILjn4+pXI7zRP6EsQfVrhQQ=
Subject key identifier: D2:61:24:23:AA:05:43:B9:B2:DB:7C:02:B9:A5:9E:3E:8F:8C:92:19
Authority key identifier: 18:EF:43:27:8D:46:33:1E:9A:AF:0F:D7:72:A7:32:80:D1:3A:AA:52
Certificate issuer: /CN=A91104D1/serialNumber=18EF43278D46331E9AAF0FD772A73280D13AAA52
Certificate serial: 11AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO9DJ41GMx6arw_XcqcygNE6qlI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft
Manifest number: 1151
Signing time: Tue 28 Jul 2026 17:23:45 +0000
Manifest this update: Tue 28 Jul 2026 17:23:45 +0000
Manifest next update: Tue 04 Aug 2026 17:23:45 +0000
Files and hashes: 1: GO9DJ41GMx6arw_XcqcygNE6qlI.crl (hash: VXK5fzxAaunVCMI1Fy7ovLbofBCPDSB4IARYlYYn5XU=)
2: 381223E2E00711EE8E019E29C4F9AE02.roa (hash: itbqWUa/NKPPtYKdrkpcQWzti779l/FpRj9FQ1sUc8Y=)
3: 446826648F3511EE8864C25EC4F9AE02.roa (hash: ny4GhVXrmI+9wyEmhfWqKmydIRJbc32z+Z+I8AKHWUk=)
4: 87C9E3FE3F6D11F0951BB23CC4F9AE02.roa (hash: Ro1WYvBGHNUPbIY7IvUqpCvewp4A9RwhtkxBRjwWeZc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.crl
rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO9DJ41GMx6arw_XcqcygNE6qlI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:23:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4527 (0x11af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91104D1, serialNumber=18EF43278D46331E9AAF0FD772A73280D13AAA52
Validity
Not Before: Jul 28 17:23:45 2026 GMT
Not After : Aug 4 17:23:45 2026 GMT
Subject: CN=6a68e5a1-19e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e3:80:7d:dc:51:f1:0f:cd:01:06:6a:9f:12:
2f:b3:4f:8a:f9:69:a7:e6:fb:c8:48:a3:98:ea:fa:
66:46:da:ee:50:4f:ee:9b:3b:58:ae:6f:a5:b4:e8:
cb:7d:c1:98:45:4a:24:f0:93:9d:10:82:43:d2:6f:
9c:62:28:03:50:0d:26:b6:6e:6c:0e:2b:e2:64:a0:
f4:5c:fa:b5:b8:e7:06:30:35:ee:35:f6:2e:76:e0:
4f:35:24:e2:b3:00:19:5f:c3:02:0e:ed:b4:04:81:
52:2e:c0:91:bd:93:15:40:63:0c:db:e2:e2:d1:db:
ae:0b:20:ce:aa:f9:0a:79:d3:2d:d6:d2:09:fe:8a:
1f:d9:38:35:f2:ce:23:23:86:92:65:a6:54:71:e4:
fe:20:7f:6e:a5:21:37:57:2e:17:85:b9:01:0c:81:
c2:1f:2f:a1:79:f2:38:0a:1c:6a:89:54:55:4c:04:
fb:26:a8:61:33:70:33:16:a2:04:dd:bd:8b:a4:45:
03:20:a7:bc:1e:0a:d4:94:e0:07:b9:d3:58:eb:19:
d2:8a:27:cb:81:52:75:f9:13:f3:ca:df:9b:94:a4:
50:5e:bc:3d:48:22:b5:bd:16:f2:5a:27:89:d3:2f:
7e:cf:36:72:30:2b:22:80:99:9a:d1:32:7f:4c:8e:
6b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:61:24:23:AA:05:43:B9:B2:DB:7C:02:B9:A5:9E:3E:8F:8C:92:19
X509v3 Authority Key Identifier:
keyid:18:EF:43:27:8D:46:33:1E:9A:AF:0F:D7:72:A7:32:80:D1:3A:AA:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO9DJ41GMx6arw_XcqcygNE6qlI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:fb:23:9b:b8:1d:c5:5d:d9:15:bc:6a:74:62:8a:da:18:40:
3e:5a:79:09:06:dd:3c:1d:40:39:32:d7:78:d6:f8:41:61:36:
e7:a6:74:53:7d:b3:4d:d4:c9:8a:49:36:83:6c:11:c8:29:90:
d9:1a:26:24:32:6c:37:dc:4c:b8:27:c0:9e:69:0c:63:fe:e2:
d0:e9:0f:39:00:8f:50:7e:db:b4:6c:fe:65:98:f1:d0:5b:56:
55:e4:40:69:a6:a1:17:13:f7:2d:97:da:c9:e8:a4:92:1c:32:
ac:d0:c1:42:d0:2a:f3:08:5c:8d:df:a8:08:8b:c8:2a:0a:e4:
55:db:4e:5b:21:33:40:0d:5b:99:ad:a1:c7:d8:50:21:c8:1e:
d9:b6:46:6e:e6:29:39:1d:56:79:93:dc:03:9a:bd:5a:89:b0:
b2:90:21:f0:fe:92:4e:ed:7c:b2:9f:82:59:59:aa:11:0b:7d:
90:c4:76:5d:33:3f:35:ff:64:1d:0d:1b:01:c5:55:d6:51:89:
a4:19:96:e0:d1:e4:bf:a8:b3:ca:f3:06:9c:94:dd:64:a8:77:
37:43:2d:11:4e:d3:33:f0:0b:18:9d:bc:b8:a2:b1:78:41:dd:
d7:22:fc:fa:1f:ea:27:c1:61:ec:1e:89:ad:50:f4:93:46:20:
ac:af:45:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:18:33 2026 by rpki-client