
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft
File: rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft (raw, json)
Hash identifier: iMAvvXP2PveftiJh2FCw1YtbVagoVXSxl/FxXgKo4hQ=
Subject key identifier: 58:77:AF:A3:6F:E3:B8:AB:80:C8:E9:4A:7A:C9:61:4C:A2:8E:42:EE
Authority key identifier: AC:6A:05:C1:9D:E3:77:FA:FE:AD:A8:87:0C:90:E4:3D:DD:E8:2D:32
Certificate issuer: /CN=A9141BAE/serialNumber=AC6A05C19DE377FAFEADA8870C90E43DDDE82D32
Certificate serial: 8B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoFwZ3jd_r-raiHDJDkPd3oLTI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft
Manifest number: 83
Signing time: Sun 19 Apr 2026 07:18:31 +0000
Manifest this update: Sun 19 Apr 2026 07:18:30 +0000
Manifest next update: Sun 26 Apr 2026 07:18:30 +0000
Files and hashes: 1: rGoFwZ3jd_r-raiHDJDkPd3oLTI.crl (hash: 6Ku/aw6ufjNowpZzcAqa0Tgq9fluLPSGpzoF4n+/DJA=)
2: 802EA36AE88B11F09D8DF0484F6F56BC.roa (hash: CjISRCjOn0m+5030aubSSBLk5SCQO1cBM9gnCnW5SlI=)
3: B752BBF0EF0811F098A4972A416F56BC.roa (hash: rSx6SG/CH+Eqp7hGNaOrkPucM6ELj4c471xwycPS5Rc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.crl
rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoFwZ3jd_r-raiHDJDkPd3oLTI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139 (0x8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141BAE, serialNumber=AC6A05C19DE377FAFEADA8870C90E43DDDE82D32
Validity
Not Before: Apr 19 07:18:30 2026 GMT
Not After : Apr 26 07:18:30 2026 GMT
Subject: CN=69e481c7-310f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5d:f1:c2:b1:97:5b:1e:d1:a9:83:44:87:c9:
aa:7c:e5:c5:9a:dd:0a:0c:a2:03:ea:53:05:f3:66:
49:50:e6:ed:ba:4e:e0:96:1f:c6:a7:64:33:67:5b:
62:98:0e:b3:b5:19:52:63:d3:91:3a:f1:4c:d1:16:
a2:8f:0b:ac:41:ae:ea:de:cc:04:6f:1e:54:83:e7:
c3:99:3e:9d:20:1e:e5:bf:08:9a:fb:62:9d:65:44:
a1:5c:b9:b8:05:a4:5d:c4:f1:e2:e0:40:b2:66:59:
aa:46:44:d0:37:79:5f:82:61:eb:34:fe:6a:74:98:
e9:45:2d:cd:58:f9:95:2f:bf:51:86:b0:cc:8a:b6:
fd:f0:50:5c:a4:55:66:d5:3c:4e:17:7d:8d:85:a4:
bc:8b:05:57:bd:e1:67:50:cf:f5:ea:cb:3d:43:ce:
65:2a:4c:1e:2a:22:9e:db:72:41:b9:1d:f1:4b:b2:
f9:68:1d:ff:ae:a2:d8:aa:e4:67:6f:43:c3:f6:02:
39:1e:b5:01:8f:d6:66:31:7d:f4:0c:f2:ea:e0:3e:
5f:dd:94:fb:83:a5:f8:32:f2:22:90:e4:e0:39:60:
90:99:60:22:2a:4b:45:7c:73:3a:de:ea:d0:79:6e:
b2:b6:9d:b6:af:13:fc:ed:b6:59:eb:0e:65:07:7b:
85:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:77:AF:A3:6F:E3:B8:AB:80:C8:E9:4A:7A:C9:61:4C:A2:8E:42:EE
X509v3 Authority Key Identifier:
keyid:AC:6A:05:C1:9D:E3:77:FA:FE:AD:A8:87:0C:90:E4:3D:DD:E8:2D:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoFwZ3jd_r-raiHDJDkPd3oLTI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:5a:54:b9:cd:d1:78:ca:28:8f:44:37:eb:0a:0c:58:42:4d:
dd:34:6d:77:6d:2c:ea:83:c5:b5:bd:d5:f2:7f:73:2c:43:ab:
7b:fe:70:d1:d3:d6:1b:3b:de:e2:5f:4b:16:af:34:59:1d:59:
31:1e:0d:61:8a:b8:7e:aa:f8:b4:37:61:3d:f6:75:bd:06:3d:
58:cf:2e:91:57:39:a2:11:2a:fb:f3:3b:5d:50:74:64:d0:e5:
28:59:9c:3e:b0:bf:1c:54:b7:70:61:58:2e:a3:f7:e4:58:e8:
de:a2:48:51:c9:5a:9a:3b:71:c2:c8:aa:92:83:6d:3a:e6:dd:
a8:1e:de:f4:57:2c:d7:2b:8a:dd:37:a9:be:b1:3b:d9:b3:a6:
e2:00:02:94:5d:c8:d6:d4:aa:73:b5:32:9d:7a:d7:4a:6d:ab:
bf:14:54:7a:11:2a:93:cd:cc:be:f0:13:ac:6b:76:0a:85:a9:
1f:b1:b5:91:63:49:b6:a1:c9:20:25:3d:c0:21:84:c3:61:b9:
4b:dd:2e:a5:d0:0f:25:6c:3a:6d:87:3d:3d:d1:9a:42:e0:6a:
0d:e2:4f:42:15:ec:65:a0:8b:9e:02:d7:26:0f:af:ce:c8:d5:
8d:d4:ab:3c:bc:f4:d4:55:85:76:b5:ec:07:bb:55:1d:ae:d6:
87:79:9f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:45:39 2026 by rpki-client