
$ rpki-client -vvf rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.mft
File: rGoi8eThZQrPtSifXctdU5IPzzQ.mft (raw, json)
Hash identifier: ewRBNBG2sdn01bwkatPdscky5TuySjjVWLhhfRqMYp0=
Subject key identifier: 58:7D:B6:07:A3:1D:7A:6C:DA:51:9F:22:FB:DC:ED:3C:1D:E5:6D:EA
Authority key identifier: AC:6A:22:F1:E4:E1:65:0A:CF:B5:28:9F:5D:CB:5D:53:92:0F:CF:34
Certificate issuer: /CN=A91422D7/serialNumber=AC6A22F1E4E1650ACFB5289F5DCB5D53920FCF34
Certificate serial: 01DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoi8eThZQrPtSifXctdU5IPzzQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.mft
Manifest number: 057A
Signing time: Mon 27 Jul 2026 01:45:50 +0000
Manifest this update: Mon 27 Jul 2026 01:45:50 +0000
Manifest next update: Mon 03 Aug 2026 01:45:50 +0000
Files and hashes: 1: rGoi8eThZQrPtSifXctdU5IPzzQ.crl (hash: U15e42t+wbj61VndcdoODOa7PmyTidtwhiDSXSq3pHI=)
2: CE5F74E2BE5811EEA8C02E2AC4F9AE02.roa (hash: Z1lkPboS7Do5JVczgOK46BmhKy5Eyozp7p6CLVvAhpo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.crl
rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoi8eThZQrPtSifXctdU5IPzzQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 01:45:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 474 (0x1da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91422D7, serialNumber=AC6A22F1E4E1650ACFB5289F5DCB5D53920FCF34
Validity
Not Before: Jul 27 01:45:50 2026 GMT
Not After : Aug 3 01:45:50 2026 GMT
Subject: CN=6a66b84e-6a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:63:5d:00:c8:ce:97:ea:b5:b2:1d:b3:31:97:
8e:c7:d5:6b:2a:bf:3e:0a:78:3f:b6:94:b0:41:30:
f8:3b:c7:6c:0b:f8:bb:38:d0:47:b6:03:6c:a3:94:
30:18:07:ce:89:3b:78:a8:07:90:d4:38:d0:60:e5:
41:d9:bb:3f:da:6d:fa:f3:ca:8a:ef:37:50:16:9f:
d7:dd:46:2e:dc:33:34:83:6c:e2:a3:46:68:2c:fb:
ca:21:c5:11:85:02:ba:db:63:c1:88:41:2c:7d:50:
62:bb:18:55:65:5b:4d:fc:c8:dc:84:0f:a1:9b:15:
5a:b5:6e:84:78:61:b1:01:7c:b7:07:dc:c1:46:47:
08:e9:6e:70:bc:57:25:e1:75:63:50:93:af:84:2e:
08:68:d5:5b:ec:8b:c1:44:e9:7a:92:11:7b:9f:96:
5d:28:4d:fd:e2:1c:a2:40:db:ca:1a:13:ca:fb:b2:
29:54:9e:5b:00:08:e5:14:e4:29:8e:de:6c:8e:74:
a0:4d:57:0c:f0:f1:47:ad:83:a7:4f:1e:41:5b:67:
45:cb:c0:8d:ea:1c:4c:e2:17:e2:16:d2:99:c6:31:
1b:02:33:52:5b:9d:f9:6f:24:27:04:24:76:d7:c0:
e4:20:c2:e2:72:54:0e:13:a9:f1:0f:47:8e:87:f1:
24:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:7D:B6:07:A3:1D:7A:6C:DA:51:9F:22:FB:DC:ED:3C:1D:E5:6D:EA
X509v3 Authority Key Identifier:
keyid:AC:6A:22:F1:E4:E1:65:0A:CF:B5:28:9F:5D:CB:5D:53:92:0F:CF:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoi8eThZQrPtSifXctdU5IPzzQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:8f:cc:a0:5c:cf:f0:8f:31:3e:48:4a:2f:70:ad:03:97:65:
86:0d:dc:35:b8:a2:a6:be:97:21:7a:53:64:c5:2d:52:e5:30:
01:a2:d3:dc:65:9f:ff:3b:c2:db:4b:9a:02:a6:78:55:74:d9:
3f:8d:07:88:62:ec:25:d9:50:c1:99:51:6d:1a:59:4d:42:b4:
d0:5f:8b:fb:65:e4:f9:8f:76:ef:84:78:34:45:ec:9d:da:d7:
cc:05:f2:96:a0:c7:27:9c:1b:1b:f4:7e:21:69:a3:eb:28:6d:
aa:b0:2a:b2:d7:79:6a:f7:8a:ce:0a:84:18:5a:93:69:88:c8:
c2:9c:54:b4:1f:cb:cb:c7:21:67:03:6a:09:56:b2:52:9b:a7:
b7:e3:ae:9b:c9:cb:84:d0:d3:f2:1f:ac:b1:ea:82:e2:f5:a0:
38:39:a8:5e:72:e5:fe:5a:c3:ee:f3:1e:b6:fb:2f:0f:1f:4f:
3c:9c:34:0b:e1:67:21:f2:e7:0e:4d:60:5d:37:2a:0b:3a:b8:
b2:d7:12:db:5a:24:4a:a6:a0:fa:5b:1b:d9:63:c0:6e:8b:60:
5f:09:dc:aa:d9:99:d9:a3:7d:8c:9c:df:60:41:4f:d6:07:db:
e9:ab:cd:c0:67:f4:9b:44:46:5b:eb:98:91:67:28:a9:43:30:
7e:61:25:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:07:00 2026 by rpki-client