
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft
File: goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft (raw, json)
Hash identifier: hoG5lW6Omsj8aL31qVIQGPiduC0cvE2lr8RXkd5p8tY=
Subject key identifier: 47:28:1E:5F:1B:56:03:CF:25:2E:4C:E8:F6:98:A4:69:E8:57:97:C2
Authority key identifier: 82:81:8D:D2:23:9D:E8:33:5D:22:AD:CE:3D:F1:90:A3:10:B7:00:24
Certificate issuer: /CN=A914C99C/serialNumber=82818DD2239DE8335D22ADCE3DF190A310B70024
Certificate serial: 062E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft
Manifest number: 0624
Signing time: Mon 02 Mar 2026 00:21:26 +0000
Manifest this update: Mon 02 Mar 2026 00:21:25 +0000
Manifest next update: Mon 09 Mar 2026 00:21:25 +0000
Files and hashes: 1: goGN0iOd6DNdIq3OPfGQoxC3ACQ.crl (hash: UlSThlQTxNfB6n2z2PqiKYQ24hoMcbm2r8C6Kumb7mw=)
2: 2BE5310AF27E11F082456479676F56BC.roa (hash: A74oNh1ceC9qOKcui3vBhsxESPini5a/hTsdz/DLy4Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.crl
rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:21:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1582 (0x62e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C99C, serialNumber=82818DD2239DE8335D22ADCE3DF190A310B70024
Validity
Not Before: Mar 2 00:21:25 2026 GMT
Not After : Mar 9 00:21:25 2026 GMT
Subject: CN=69a4d806-895c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4a:97:d8:6d:fd:d2:6a:41:68:ed:50:b8:a0:
49:b0:3c:c8:7e:3a:f2:64:98:90:b5:31:4c:fd:e2:
08:e6:1a:75:89:0a:c3:9b:e7:1c:51:3e:b6:ed:d9:
25:53:b1:1c:e6:f4:26:cd:48:41:ae:15:80:50:3e:
7c:80:7d:46:f9:d0:cf:2b:cd:47:36:99:63:0d:3c:
95:c2:42:a6:45:dc:44:09:12:aa:02:21:3d:b7:0d:
b4:6c:93:51:31:26:c6:6b:29:95:28:b2:1e:10:e2:
3a:4f:4e:89:aa:1f:67:bf:f5:bc:f3:7d:54:9d:98:
07:7d:28:c5:a2:21:9a:16:ae:e4:ed:da:63:96:70:
5e:7e:e9:b7:e4:d3:2d:10:e5:9f:a2:73:94:9e:1b:
6b:32:06:59:cf:00:98:c8:f1:64:43:0d:7c:3c:b1:
f6:6e:a0:34:fe:1f:e1:47:f6:19:f5:e8:0b:de:fc:
1f:59:76:6e:eb:e2:de:e3:7f:09:55:fd:d0:ad:36:
0a:dc:a6:7d:2c:2f:6e:51:65:09:53:66:12:4f:be:
92:f1:96:c3:30:93:52:05:2d:17:7f:92:75:e2:d9:
0f:ae:62:ec:9b:de:45:47:fd:01:10:4d:b5:62:1e:
76:c6:f3:ca:a7:1b:80:a6:5d:5b:ce:02:71:d5:81:
0a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:28:1E:5F:1B:56:03:CF:25:2E:4C:E8:F6:98:A4:69:E8:57:97:C2
X509v3 Authority Key Identifier:
keyid:82:81:8D:D2:23:9D:E8:33:5D:22:AD:CE:3D:F1:90:A3:10:B7:00:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ad:56:46:62:f7:a4:a7:7c:5c:b2:8f:c9:f9:af:56:83:85:
98:93:16:bd:ee:73:68:bc:10:43:6c:2f:f7:5e:5c:2a:84:dd:
92:84:63:d0:ef:d9:17:a6:7d:50:ba:a8:7f:e7:29:ae:8a:3b:
38:95:93:f2:4f:6f:8d:8a:59:e7:dd:ad:cd:0a:72:fd:1a:50:
4d:ee:72:f6:aa:fc:c0:8f:43:91:40:ed:fd:83:5f:30:89:0f:
cc:07:5c:16:8c:da:47:96:85:67:fa:03:cf:05:f3:a3:e1:ef:
eb:d1:a8:2f:0b:ab:a7:ac:bd:ff:7a:09:17:c3:b2:5c:e5:32:
d1:c6:10:f8:1c:99:20:d6:d1:b4:c0:9b:36:53:85:31:9a:fd:
a2:7d:63:d1:cb:f5:54:b2:35:9b:6e:dd:29:1b:05:cc:3e:d4:
71:cc:16:3f:1e:b3:d8:62:ba:ae:5b:40:a1:15:4b:50:f5:f3:
f5:0e:9a:11:75:02:f2:4d:e5:0b:b0:e1:9c:16:a6:bf:ae:0d:
e7:f8:45:2f:5f:2c:e8:ba:84:1d:fd:56:cb:b2:60:e8:af:80:
bf:b9:55:3f:3d:e8:85:c2:85:6b:a1:a9:58:74:98:eb:6c:20:
b1:89:4e:ed:97:a7:71:16:72:2a:c4:88:70:d8:5d:5b:e1:2f:
2a:02:28:6d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEM5OUMxMTAvBgNVBAUTKDgyODE4REQyMjM5REU4MzM1RDIyQURDRTNERjE5MEEz
MTBCNzAwMjQwHhcNMjYwMzAyMDAyMTI1WhcNMjYwMzA5MDAyMTI1WjAYMRYwFAYD
VQQDEw02OWE0ZDgwNi04OTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlkqX2G390mpBaO1QuKBJsDzIfjryZJiQtTFM/eII5hp1iQrDm+ccUT627dkl
U7Ec5vQmzUhBrhWAUD58gH1G+dDPK81HNpljDTyVwkKmRdxECRKqAiE9tw20bJNR
MSbGaymVKLIeEOI6T06Jqh9nv/W8831UnZgHfSjFoiGaFq7k7dpjlnBefum35NMt
EOWfonOUnhtrMgZZzwCYyPFkQw18PLH2bqA0/h/hR/YZ9egL3vwfWXZu6+Le438J
Vf3QrTYK3KZ9LC9uUWUJU2YST76S8ZbDMJNSBS0Xf5J14tkPrmLsm95FR/0BEE21
Yh52xvPKpxuApl1bzgJx1YEKmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEcoHl8b
VgPPJS5M6PaYpGnoV5fCMB8GA1UdIwQYMBaAFIKBjdIjnegzXSKtzj3xkKMQtwAk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Qzk5Qy8yQTFBRTlFQ0Q1
NzIxMUVCQTYwRUQwNTdDNEY5QUUwMi9nb0dOMGlPZDZETmRJcTNPUGZHUW94QzNB
Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dvR04waU9kNkROZElxM09QZkdRb3hDM0FDUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
Qzk5Qy8yQTFBRTlFQ0Q1NzIxMUVCQTYwRUQwNTdDNEY5QUUwMi9nb0dOMGlPZDZE
TmRJcTNPUGZHUW94QzNBQ1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATK1WRmL3pKd8XLKPyfmvVoOFmJMWve5zaLwQQ2wv915cKoTdkoRj0O/ZF6Z9
ULqof+cproo7OJWT8k9vjYpZ592tzQpy/RpQTe5y9qr8wI9DkUDt/YNfMIkPzAdc
FozaR5aFZ/oDzwXzo+Hv69GoLwurp6y9/3oJF8OyXOUy0cYQ+ByZINbRtMCbNlOF
MZr9on1j0cv1VLI1m27dKRsFzD7UccwWPx6z2GK6rltAoRVLUPXz9Q6aEXUC8k3l
C7DhnBamv64N5/hFL18s6LqEHf1Wy7Jg6K+Av7lVPz3ohcKFa6GpWHSY62wgsYlO
7ZencRZyKsSIcNhdW+EvKgIobQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:14:38 2026 by rpki-client