
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft
File: rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft (raw, json)
Hash identifier: 138mdbYOC9tAfretkX95BHngSaqZH2C+RBDKiZstHak=
Subject key identifier: 56:94:DB:52:11:ED:38:91:79:73:41:42:18:EA:F8:C8:D6:76:18:7C
Authority key identifier: AC:6A:05:C1:9D:E3:77:FA:FE:AD:A8:87:0C:90:E4:3D:DD:E8:2D:32
Certificate issuer: /CN=A9141BAE/serialNumber=AC6A05C19DE377FAFEADA8870C90E43DDDE82D32
Certificate serial: DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoFwZ3jd_r-raiHDJDkPd3oLTI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft
Manifest number: D4
Signing time: Mon 21 Sep 2026 06:44:32 +0000
Manifest this update: Mon 21 Sep 2026 06:44:31 +0000
Manifest next update: Mon 28 Sep 2026 06:44:31 +0000
Files and hashes: 1: rGoFwZ3jd_r-raiHDJDkPd3oLTI.crl (hash: Sz9EOjy4j8sRug9NY1+/bAVJ5yFdIZfBvWTsfEtv/6U=)
2: 8B4699469F0711F180E670C05811F970.roa (hash: fSS3HK51kJcHMxHuKIEWHa0gabU83pmDmR6pQGk0spQ=)
3: 802EA36AE88B11F09D8DF0484F6F56BC.roa (hash: CjISRCjOn0m+5030aubSSBLk5SCQO1cBM9gnCnW5SlI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.crl
rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoFwZ3jd_r-raiHDJDkPd3oLTI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:44:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 221 (0xdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141BAE, serialNumber=AC6A05C19DE377FAFEADA8870C90E43DDDE82D32
Validity
Not Before: Sep 21 06:44:31 2026 GMT
Not After : Sep 28 06:44:31 2026 GMT
Subject: CN=6ab0d250-fe9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:02:cf:7c:06:38:2c:96:3d:7e:79:eb:a4:48:
57:5a:dc:3e:e9:f7:a8:52:71:41:58:17:1b:4b:53:
ae:b0:06:1c:69:88:e2:9e:09:0b:1f:b3:e9:8f:a2:
b3:3f:1b:a2:35:4e:ac:40:4d:83:3f:93:ee:2e:8a:
b9:1a:c3:e9:db:5d:70:22:5d:5a:39:6b:bd:e7:f2:
7f:97:78:25:39:e7:79:e9:58:7d:34:39:3c:87:61:
4a:fc:ef:02:b0:21:cb:71:44:49:47:d0:bb:93:3b:
52:93:fc:2e:0e:a2:3f:fa:b0:67:78:ab:1a:ed:6d:
82:d3:66:98:a4:df:81:3f:0f:77:3a:db:a4:0e:ff:
2f:f2:81:30:40:bb:62:b9:65:d8:1e:77:13:69:93:
c8:3e:03:b9:c4:a8:2a:b7:ce:e5:02:87:95:36:9f:
15:7e:9e:5c:a8:87:8d:95:ee:c6:b7:1a:fc:19:33:
07:9d:02:4e:3b:40:2d:c1:98:90:68:5a:c8:39:f3:
39:ee:bc:6d:20:9d:bd:c9:ae:21:c4:4f:1a:5d:34:
e3:69:21:5b:19:bc:1d:a1:46:36:37:4d:f8:89:85:
76:f7:bf:92:77:5c:1f:c0:97:ab:60:4b:bb:6a:f0:
69:4e:57:8b:10:1e:f5:08:05:d3:65:f1:db:b4:a6:
c9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:94:DB:52:11:ED:38:91:79:73:41:42:18:EA:F8:C8:D6:76:18:7C
X509v3 Authority Key Identifier:
keyid:AC:6A:05:C1:9D:E3:77:FA:FE:AD:A8:87:0C:90:E4:3D:DD:E8:2D:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoFwZ3jd_r-raiHDJDkPd3oLTI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:20:6b:75:28:a7:f8:c5:19:89:80:81:04:60:e4:a3:2a:6a:
8b:61:82:d4:93:3b:31:01:14:44:2c:42:a0:a5:f6:58:6f:36:
a2:9c:5f:27:bb:1d:11:e4:ab:df:1e:89:15:1c:55:aa:e2:4a:
d8:1d:12:44:74:91:0d:0e:18:22:14:26:78:dd:5f:05:b9:c2:
cd:63:14:15:77:5c:72:ca:4a:f8:d1:72:67:ed:71:91:48:a9:
c2:d5:a7:61:36:01:fe:4b:67:ac:42:dc:9f:bd:75:ab:33:f6:
3b:52:cf:d6:45:af:72:ad:50:9d:98:64:90:1b:b6:f0:45:dc:
da:4f:18:6e:6b:e1:1f:02:67:41:6d:87:ec:c2:6c:64:b5:68:
6c:a0:d7:d8:8a:cb:0f:15:3c:c7:38:da:86:2e:1e:ca:37:15:
e4:20:57:26:51:6c:75:ec:9c:11:56:64:8b:44:37:9e:b5:ca:
d4:68:10:55:98:ad:bc:ae:83:02:90:6a:39:f1:8c:b7:11:6b:
ca:01:63:54:08:c6:44:fd:5f:fe:ab:1a:c9:20:50:ae:62:47:
23:91:90:13:55:48:f2:94:bb:7d:04:73:76:68:d9:1d:cf:ce:
a7:b0:67:84:5e:f2:8c:92:f7:dd:14:ba:b2:77:50:45:ff:22:
92:e9:0c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:32:13 2026 by rpki-client