
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft
File: rGOF7VY-H9amaz5LUQ3MaTDNSww.mft (raw, json)
Hash identifier: E76BNh+vZAxvabwdM4L+3qBQNf+Etxv1uTTXJ3mDpvc=
Subject key identifier: F8:6F:3B:0C:DF:60:FB:1C:FB:76:E3:B2:7F:E2:6F:BA:F5:BB:80:0B
Authority key identifier: AC:63:85:ED:56:3E:1F:D6:A6:6B:3E:4B:51:0D:CC:69:30:CD:4B:0C
Certificate issuer: /CN=A9160D0A/serialNumber=AC6385ED563E1FD6A66B3E4B510DCC6930CD4B0C
Certificate serial: 026E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft
Manifest number: 024C
Signing time: Fri 17 Apr 2026 02:17:30 +0000
Manifest this update: Fri 17 Apr 2026 02:17:29 +0000
Manifest next update: Fri 24 Apr 2026 02:17:29 +0000
Files and hashes: 1: rGOF7VY-H9amaz5LUQ3MaTDNSww.crl (hash: TxLNJXd0bm5MZDA5enyGKTLiP0dHSfUwNCFrCIWVxHs=)
2: 42EC5F02D2B711EDAF6DC017C4F9AE02.roa (hash: pkC+D8p7TNYzPBnocLkHTaXfdgtNXvj2i4jRd1Gl3NY=)
3: 096A1DB6D2BA11ED8E06CC13C4F9AE02.roa (hash: xjJh+3SCJ/mrp3JYArjRvZVJMzUf7HfzNFOkj330dzY=)
4: D1EAA18CD2BC11ED9E7A9A1BC4F9AE02.roa (hash: s27t8mzFE7pAO+YQ8b7HEZWkopZAKcG8DRX9E1bRajo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.crl
rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:17:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 622 (0x26e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160D0A, serialNumber=AC6385ED563E1FD6A66B3E4B510DCC6930CD4B0C
Validity
Not Before: Apr 17 02:17:29 2026 GMT
Not After : Apr 24 02:17:29 2026 GMT
Subject: CN=69e1983a-1c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b2:9f:0f:0f:bc:e6:fd:2a:03:89:5d:29:ab:
c7:25:6e:bf:4c:98:c7:32:c3:fc:e3:a6:9c:12:a1:
e9:6e:a1:65:92:0b:9e:d8:63:9b:32:8a:52:d3:27:
69:27:77:c4:d9:a0:0d:ae:de:87:bf:8b:da:7a:8e:
67:e9:fe:3d:fe:1a:4d:d2:70:30:90:45:0e:dd:9c:
4b:53:13:aa:01:19:b3:e3:59:c4:f0:74:d8:12:83:
c6:76:72:8a:44:4a:25:90:21:cd:a0:4b:fa:21:b2:
66:4e:a5:02:f9:42:fb:41:ff:16:18:49:d5:2d:94:
0a:85:3b:52:7e:b3:92:15:d7:cb:e0:58:c4:63:5e:
05:42:b3:8a:45:5d:96:4f:68:11:47:3f:75:c9:82:
8a:c7:e6:31:34:fd:92:54:fe:74:01:92:a6:88:a0:
ee:b7:ab:ae:cc:d1:93:c9:24:ba:8d:10:f3:10:c8:
86:bf:4e:1a:84:54:2f:f8:7d:c7:41:60:d8:c6:d2:
fc:7b:73:a5:0f:05:be:ec:f0:eb:bf:bc:ee:7b:ba:
10:45:c5:a9:29:98:a3:a6:7d:3b:b0:a4:44:7d:2b:
db:27:af:10:c5:1f:50:a5:12:0f:43:06:18:d4:63:
45:0b:99:4c:b9:7a:ed:44:c9:75:7c:67:53:ea:2b:
c0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6F:3B:0C:DF:60:FB:1C:FB:76:E3:B2:7F:E2:6F:BA:F5:BB:80:0B
X509v3 Authority Key Identifier:
keyid:AC:63:85:ED:56:3E:1F:D6:A6:6B:3E:4B:51:0D:CC:69:30:CD:4B:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:66:1d:82:0a:b6:19:95:71:ab:3d:2e:51:5b:74:9f:a9:32:
e8:5a:3d:2f:ba:4f:66:27:30:ce:3f:28:6c:b7:50:50:08:e3:
51:18:5c:7b:2e:ef:bd:17:13:d1:a0:e4:48:89:b2:09:89:44:
69:48:05:43:bb:8e:de:f6:f6:43:02:32:4f:da:a6:44:78:77:
45:9c:35:4b:fe:a1:5e:87:8f:56:db:b3:16:fe:53:88:18:b9:
c0:13:f9:c8:75:f6:e3:99:21:e5:39:1f:21:19:c0:1d:95:7c:
31:1c:0b:e7:84:29:dc:e9:9a:04:ab:be:53:a0:a0:34:4e:09:
2e:5e:5e:70:00:0d:84:28:0c:87:fa:1c:63:af:b0:cb:a4:e1:
2c:32:c6:75:6b:f3:8e:d0:ce:41:cd:7b:86:a8:c1:53:b3:d6:
6c:35:27:2c:ec:4c:d7:6b:ed:22:87:73:01:90:e0:ea:00:61:
a9:80:19:ad:3d:5d:b0:7b:86:48:dd:bb:33:44:e2:99:cc:62:
a6:06:da:ce:2a:f7:d3:30:e1:1e:15:40:81:1f:3d:71:1b:d0:
e2:de:9c:17:e2:03:e7:c8:0e:89:c5:f4:8d:ca:60:3f:00:2f:
d7:af:31:b7:d6:bf:b9:f3:6c:b3:96:91:7e:23:6e:97:92:e3:
ec:d6:a0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:46:46 2026 by rpki-client