
$ rpki-client -vvf rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.mft
File: goh6uR0rD2rb_HCyRhnxh7GlPVk.mft (raw, json)
Hash identifier: lTlBRZMBPVmXcrsyKAfLXy4unxqEuMumilr968CYjRU=
Subject key identifier: 2F:CC:8D:78:46:93:22:E4:D5:4B:0D:71:47:44:38:74:64:B0:66:84
Authority key identifier: 82:88:7A:B9:1D:2B:0F:6A:DB:FC:70:B2:46:19:F1:87:B1:A5:3D:59
Certificate issuer: /CN=A9159032/serialNumber=82887AB91D2B0F6ADBFC70B24619F187B1A53D59
Certificate serial: 1AD3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goh6uR0rD2rb_HCyRhnxh7GlPVk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.mft
Manifest number: 1ABF
Signing time: Thu 16 Apr 2026 16:15:42 +0000
Manifest this update: Thu 16 Apr 2026 16:15:42 +0000
Manifest next update: Thu 23 Apr 2026 16:15:42 +0000
Files and hashes: 1: goh6uR0rD2rb_HCyRhnxh7GlPVk.crl (hash: GW4KEQ72anHs/Ogc77ouiERvyue4ysToN6ibb5OggIk=)
2: 326E1852D80B11EC874C9083C4F9AE02.roa (hash: 5qtsq7ia4AOMsTly8sF4e2lBQ7HF32ao+hzi58so/BA=)
3: 8AFD7D885DCE11EEA74FC07DC4F9AE02.roa (hash: 9z91DZp5gGn5objaZcmJRC9eXIJ9vkXiEByHhLrLrmk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.crl
rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goh6uR0rD2rb_HCyRhnxh7GlPVk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:15:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6867 (0x1ad3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9159032, serialNumber=82887AB91D2B0F6ADBFC70B24619F187B1A53D59
Validity
Not Before: Apr 16 16:15:42 2026 GMT
Not After : Apr 23 16:15:42 2026 GMT
Subject: CN=69e10b2e-d925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:43:cf:80:8b:5a:d3:57:34:80:d2:ed:e2:cd:
9e:36:07:c9:a1:02:95:74:42:3a:4c:6f:e1:2b:a9:
bd:c4:c1:64:1f:e8:26:10:78:19:a5:16:34:5d:c8:
f7:ef:ed:89:fd:15:16:02:79:48:d3:07:11:2e:c3:
05:e0:ef:e6:60:43:51:93:84:37:41:5b:19:e0:d4:
b3:6e:2c:7f:f0:b4:ab:31:13:a0:00:54:b3:b4:48:
0c:4f:1b:ac:d2:21:df:79:fc:50:24:7e:c0:c8:ae:
c4:34:68:bc:74:02:d1:fb:16:f7:f6:69:54:8f:d0:
8b:0d:4b:9e:df:82:0a:37:de:80:d7:dd:d5:7b:5f:
e1:b9:b6:44:bf:ed:fd:86:11:0a:34:57:ae:db:69:
03:f9:73:07:6c:39:d7:e2:38:26:11:c7:90:27:aa:
20:c1:00:33:ec:a6:a3:c1:48:ab:10:1d:cc:b1:bb:
42:f7:45:46:9f:ec:19:d7:cd:b7:9c:f9:95:87:c1:
46:59:df:ca:fb:39:31:26:b4:d1:44:59:f2:24:5d:
03:b2:c7:24:5d:fb:61:da:13:26:5b:3d:bd:1f:7c:
ff:c8:83:58:8c:62:fc:a8:71:83:d0:42:a9:d7:70:
0b:d9:4f:be:0f:4b:01:5b:bc:8f:13:30:f8:b8:71:
05:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:CC:8D:78:46:93:22:E4:D5:4B:0D:71:47:44:38:74:64:B0:66:84
X509v3 Authority Key Identifier:
keyid:82:88:7A:B9:1D:2B:0F:6A:DB:FC:70:B2:46:19:F1:87:B1:A5:3D:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goh6uR0rD2rb_HCyRhnxh7GlPVk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:05:ae:d8:63:2c:55:d0:c8:d5:cd:a8:cd:9a:39:5f:9e:ff:
ff:4d:ad:52:4e:b0:f6:ce:1d:86:45:6f:ad:91:e2:3e:58:b7:
37:c3:d2:98:55:2c:ba:69:f6:07:5a:0a:76:57:a4:4c:ef:9f:
d2:8e:11:1a:9d:dd:9c:45:4d:de:8a:8a:e7:b0:3c:44:f1:25:
90:01:7b:76:2c:9e:75:67:b1:8a:f7:df:18:3f:54:ce:5a:69:
06:a6:31:d0:58:0f:d5:d2:d6:6a:1c:c5:a1:65:b8:38:8a:8f:
ca:93:41:25:31:dc:0d:72:8a:28:e6:ce:d9:53:28:4d:8b:a7:
47:b0:8a:ea:d5:32:d1:b4:0d:a4:46:4a:c5:ba:b2:4f:1f:a1:
51:23:38:91:2e:59:7a:bb:60:a7:8f:cb:a3:a5:0b:6b:6a:6b:
f6:1f:d8:b8:bd:e0:ad:ca:4b:56:23:31:f4:0a:c0:fa:6c:e6:
29:07:62:6e:44:23:3f:a7:c1:9e:a6:25:75:72:25:3b:f6:21:
82:e1:33:ef:07:48:49:6a:64:0f:e6:75:a3:1e:6a:ef:5c:d6:
7f:f0:81:54:5e:8c:ff:ab:ba:c1:63:b8:0f:54:c6:09:78:01:
0d:22:c5:b1:4e:8b:2b:70:f7:74:0f:5b:da:64:56:d2:1f:65:
9c:70:6f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:43:35 2026 by rpki-client