
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.mft
File: GoOKdo1b8PVMYaptorRQOBveZ8c.mft (raw, json)
Hash identifier: 97etJsP0rvzdcuwys/jONL5xCPhoQufmpTCp8XJj5jw=
Subject key identifier: C8:9F:45:12:C6:7A:57:CC:52:CA:48:32:4D:10:AF:E5:21:8D:EF:E3
Authority key identifier: 1A:83:8A:76:8D:5B:F0:F5:4C:61:AA:6D:A2:B4:50:38:1B:DE:67:C7
Certificate issuer: /CN=A918FFA8/serialNumber=1A838A768D5BF0F54C61AA6DA2B450381BDE67C7
Certificate serial: 3569
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoOKdo1b8PVMYaptorRQOBveZ8c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.mft
Manifest number: 3566
Signing time: Tue 28 Jul 2026 14:36:13 +0000
Manifest this update: Tue 28 Jul 2026 14:36:12 +0000
Manifest next update: Tue 04 Aug 2026 14:36:12 +0000
Files and hashes: 1: GoOKdo1b8PVMYaptorRQOBveZ8c.crl (hash: FDIWY2/LRf5Ez9oggOCBTgOx0tOzDk/IJ9Yp177144s=)
2: 2021C6F6795E11F0B07E6E6BC4F9AE02.roa (hash: TqlpecplvSdLV29TPM7WN07wNwjZ8MAc88miHR0h6qc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.crl
rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoOKdo1b8PVMYaptorRQOBveZ8c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 14:36:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13673 (0x3569)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FFA8, serialNumber=1A838A768D5BF0F54C61AA6DA2B450381BDE67C7
Validity
Not Before: Jul 28 14:36:12 2026 GMT
Not After : Aug 4 14:36:12 2026 GMT
Subject: CN=6a68be5d-7272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:db:c3:2e:4e:5e:0a:91:8e:95:90:02:ff:1a:
69:2c:b6:d9:fa:ad:79:9f:88:69:31:05:0a:33:ac:
65:46:04:8d:0f:6b:2c:c5:ef:a4:11:59:4c:8a:28:
cc:99:03:14:1f:bf:0c:2b:9e:b0:6c:1f:ef:1d:fe:
89:24:5b:b3:cf:e7:ce:b2:67:2b:e4:fb:33:58:f1:
cf:de:45:ba:d8:14:ab:cd:4d:88:d6:15:ed:e4:eb:
4a:fb:a8:63:f5:71:97:d8:a5:34:2e:47:d2:a4:7f:
6f:2a:13:df:19:e7:fc:87:8e:01:f8:27:d7:30:1b:
78:04:77:bf:cc:47:b0:8f:6c:eb:df:b0:9d:f3:92:
c5:00:05:5e:54:45:ec:5d:5b:4a:d9:9e:c7:26:30:
3c:40:27:dc:db:e1:9d:3f:af:cc:b6:c7:4a:4d:df:
93:be:c1:a9:a6:99:4a:81:9a:33:b1:26:58:ee:a0:
f4:31:78:df:a8:cc:49:fe:22:91:f8:09:8c:8b:e7:
c0:56:0b:47:0d:01:54:90:de:43:93:ac:ed:6c:62:
a3:a9:bf:a9:79:8c:67:ce:0b:1c:60:d8:fb:1d:60:
39:97:2f:5a:03:bd:ee:13:7f:ea:62:26:ae:0a:41:
e1:dd:71:ce:38:83:84:5c:db:f1:9b:ce:4e:2e:76:
50:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9F:45:12:C6:7A:57:CC:52:CA:48:32:4D:10:AF:E5:21:8D:EF:E3
X509v3 Authority Key Identifier:
keyid:1A:83:8A:76:8D:5B:F0:F5:4C:61:AA:6D:A2:B4:50:38:1B:DE:67:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoOKdo1b8PVMYaptorRQOBveZ8c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:df:3d:74:25:f0:79:9f:b8:60:0a:50:5c:e2:f1:98:84:2d:
dd:77:79:f0:a6:a4:87:10:3b:21:f6:49:25:ae:ba:c4:ab:b3:
b6:54:3e:12:2d:74:08:35:80:5b:a3:86:8f:92:3e:b4:21:eb:
44:99:7e:4e:a6:ba:10:1f:a1:af:6b:02:05:36:ef:91:ae:f7:
ce:08:72:b4:3e:bf:bd:8f:ec:6d:26:59:c7:5e:f3:eb:ae:97:
be:09:71:0d:75:f8:82:c0:2f:00:8b:e8:d2:17:8d:d7:14:51:
33:01:6f:ea:df:35:51:05:0e:01:d2:e3:43:b4:d4:4a:55:c5:
d1:6d:be:ce:f4:1c:21:40:8c:87:07:42:7e:7c:b3:a1:0b:9a:
02:dd:e4:d9:15:9e:f7:d0:81:79:31:f8:d7:4c:70:0b:71:5a:
a9:89:36:54:23:72:3d:8c:31:ca:51:ea:c2:61:c3:52:94:dd:
c1:d1:12:40:56:d3:42:95:55:33:a4:59:97:5e:15:91:bd:4c:
ac:17:ac:41:79:5f:3f:07:58:8a:12:6d:9d:07:03:95:36:b9:
df:0b:84:18:c4:93:8c:41:a3:37:d8:b2:2b:54:78:e5:58:20:
0a:93:6c:b9:b5:d5:fa:cb:75:b4:15:30:3c:49:a2:90:30:4a:
e8:30:91:f0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEZGQTgxMTAvBgNVBAUTKDFBODM4QTc2OEQ1QkYwRjU0QzYxQUE2REEyQjQ1MDM4
MUJERTY3QzcwHhcNMjYwNzI4MTQzNjEyWhcNMjYwODA0MTQzNjEyWjAYMRYwFAYD
VQQDEw02YTY4YmU1ZC03MjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAudvDLk5eCpGOlZAC/xppLLbZ+q15n4hpMQUKM6xlRgSND2ssxe+kEVlMiijM
mQMUH78MK56wbB/vHf6JJFuzz+fOsmcr5PszWPHP3kW62BSrzU2I1hXt5OtK+6hj
9XGX2KU0LkfSpH9vKhPfGef8h44B+CfXMBt4BHe/zEewj2zr37Cd85LFAAVeVEXs
XVtK2Z7HJjA8QCfc2+GdP6/MtsdKTd+TvsGppplKgZozsSZY7qD0MXjfqMxJ/iKR
+AmMi+fAVgtHDQFUkN5Dk6ztbGKjqb+peYxnzgscYNj7HWA5ly9aA73uE3/qYiau
CkHh3XHOOIOEXNvxm85OLnZQtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMifRRLG
elfMUspIMk0Qr+Uhje/jMB8GA1UdIwQYMBaAFBqDinaNW/D1TGGqbaK0UDgb3mfH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkZBOC85MjU1MzM2MjFE
OEIxMUUyOURGRDNERTYwOEIwMkNEMi9Hb09LZG8xYjhQVk1ZYXB0b3JSUU9CdmVa
OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dvT0tkbzFiOFBWTVlhcHRvclJRT0J2ZVo4Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RkZBOC85MjU1MzM2MjFEOEIxMUUyOURGRDNERTYwOEIwMkNEMi9Hb09LZG8xYjhQ
Vk1ZYXB0b3JSUU9CdmVaOGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAH989dCXweZ+4YApQXOLxmIQt3Xd58KakhxA7IfZJJa66xKuztlQ+Ei10CDWA
W6OGj5I+tCHrRJl+Tqa6EB+hr2sCBTbvka73zghytD6/vY/sbSZZx17z666Xvglx
DXX4gsAvAIvo0heN1xRRMwFv6t81UQUOAdLjQ7TUSlXF0W2+zvQcIUCMhwdCfnyz
oQuaAt3k2RWe99CBeTH410xwC3FaqYk2VCNyPYwxylHqwmHDUpTdwdESQFbTQpVV
M6RZl14Vkb1MrBesQXlfPwdYihJtnQcDlTa53wuEGMSTjEGjN9iyK1R45VggCpNs
ubXV+st1tBUwPEmikDBK6DCR8A==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:25:45 2026 by rpki-client