
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.mft
File: GoOKdo1b8PVMYaptorRQOBveZ8c.mft (raw, json)
Hash identifier: F9HO80s+VarltkKrESM56tl/OofcAGx2pBzaLxOUxn4=
Subject key identifier: 6C:C0:26:3F:05:D8:45:94:6D:7A:B2:33:C1:95:B3:0E:49:4A:D6:3A
Authority key identifier: 1A:83:8A:76:8D:5B:F0:F5:4C:61:AA:6D:A2:B4:50:38:1B:DE:67:C7
Certificate issuer: /CN=A918FFA8/serialNumber=1A838A768D5BF0F54C61AA6DA2B450381BDE67C7
Certificate serial: 3517
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoOKdo1b8PVMYaptorRQOBveZ8c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.mft
Manifest number: 3516
Signing time: Sat 28 Feb 2026 14:37:14 +0000
Manifest this update: Sat 28 Feb 2026 14:37:13 +0000
Manifest next update: Sat 07 Mar 2026 14:37:13 +0000
Files and hashes: 1: GoOKdo1b8PVMYaptorRQOBveZ8c.crl (hash: EG+82yHXwkvXBRIRresAwNB8UZaeqjBv5eg4lsQsOmw=)
2: 2021C6F6795E11F0B07E6E6BC4F9AE02.roa (hash: /tr9Ms57wuKfsw+OEtuIOe0iJR3426UBPMZCKa1pr2A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.crl
rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoOKdo1b8PVMYaptorRQOBveZ8c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 14:37:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13591 (0x3517)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FFA8, serialNumber=1A838A768D5BF0F54C61AA6DA2B450381BDE67C7
Validity
Not Before: Feb 28 14:37:13 2026 GMT
Not After : Mar 7 14:37:13 2026 GMT
Subject: CN=69a2fd9a-c12c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3b:a9:10:99:cf:2b:71:79:cd:2d:af:5b:b1:
5a:60:6f:16:63:ed:86:6c:d1:21:28:1c:42:06:af:
c6:35:e2:0f:ae:12:92:49:92:b8:3c:66:40:b8:d3:
bf:3a:e6:05:8b:16:b4:d8:be:8e:fc:c1:15:11:19:
52:76:9a:32:35:89:f1:b0:94:1a:d6:e3:de:17:f7:
40:37:39:f6:89:ae:b1:dc:f5:47:50:88:62:dd:cf:
05:62:3d:60:b9:bf:9f:44:e1:f8:84:31:ec:92:05:
d5:de:3f:c8:7c:06:71:c8:5e:08:3a:b4:75:2e:b2:
22:5e:97:7a:4d:5c:39:65:27:07:b0:49:c0:29:a7:
4d:8d:ec:8d:32:53:0f:32:e7:4a:c3:75:81:e2:0b:
0e:26:e0:18:7c:e8:51:c4:7a:0b:10:47:9f:09:b0:
74:28:64:ba:fa:09:c4:71:c0:9c:27:f0:1d:1b:bb:
9d:a2:a3:fb:30:21:bb:de:03:3a:49:b2:29:26:95:
a6:c5:08:18:75:a9:c5:92:a0:f6:07:2a:25:45:dd:
5b:bd:49:5b:df:a3:16:75:95:db:4c:44:83:0c:e9:
ed:d8:e6:46:8b:dc:75:50:e0:27:1a:2d:f2:fe:7c:
c6:a8:4b:99:f7:14:aa:e7:59:2b:d3:75:ce:b9:b0:
35:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C0:26:3F:05:D8:45:94:6D:7A:B2:33:C1:95:B3:0E:49:4A:D6:3A
X509v3 Authority Key Identifier:
keyid:1A:83:8A:76:8D:5B:F0:F5:4C:61:AA:6D:A2:B4:50:38:1B:DE:67:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoOKdo1b8PVMYaptorRQOBveZ8c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:be:b5:14:ff:13:1a:27:0a:53:f0:12:c6:12:c0:fa:9f:d1:
8e:26:d7:d0:98:fd:a7:a4:ec:43:68:b1:dc:0d:3e:66:29:a4:
50:1e:99:4e:cd:e5:4d:a8:93:0b:27:ca:20:d7:b1:69:a8:1b:
11:5c:be:b0:31:22:bb:88:f0:61:1e:1d:00:31:b3:52:3b:e9:
25:61:a9:9c:a4:01:cc:8c:60:7a:d4:f1:ad:ea:3a:40:22:4d:
7b:59:ef:31:0d:e8:21:62:42:e4:c7:43:52:84:4d:41:56:e1:
ed:f1:9b:2d:df:c1:bc:cd:cd:5c:d5:b4:fa:55:7d:82:91:ca:
4d:59:6a:88:58:20:4b:f8:73:39:77:fe:ff:8e:e8:b9:57:81:
4b:44:75:43:52:d6:0d:2b:f5:63:e3:81:48:bc:39:cf:79:64:
00:3e:88:8a:d9:bb:35:72:c4:3e:51:d7:7d:84:45:4e:6e:60:
ab:9d:cf:28:1a:6e:54:fa:1f:3a:79:b2:a2:66:dd:6a:89:60:
95:85:85:70:6b:20:d1:d1:b5:de:82:60:32:d5:8a:35:fa:0c:
ee:24:8b:f0:13:ad:fe:c4:d8:2e:11:00:ae:68:de:d1:68:84:
a2:3d:fc:a0:bf:93:ef:ed:6c:a9:8b:87:63:cf:37:3b:44:f4:
75:53:1a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:17:29 2026 by rpki-client