
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft
File: GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft (raw, json)
Hash identifier: +xUaENdAvEkWIK/nQ2md2xz4gch4jQ6VY905StWnaws=
Subject key identifier: 40:1E:60:24:27:43:03:2E:80:26:E4:93:4A:61:95:8F:7C:B5:01:75
Authority key identifier: 1A:82:D1:C6:88:8A:B7:30:99:F8:E5:9A:EB:28:8C:0D:48:BB:29:2B
Certificate issuer: /CN=A91C5D32/serialNumber=1A82D1C6888AB73099F8E59AEB288C0D48BB292B
Certificate serial: 0411
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft
Manifest number: 040A
Signing time: Wed 29 Jul 2026 01:07:41 +0000
Manifest this update: Wed 29 Jul 2026 01:07:40 +0000
Manifest next update: Wed 05 Aug 2026 01:07:40 +0000
Files and hashes: 1: GoLRxoiKtzCZ-OWa6yiMDUi7KSs.crl (hash: Bb4uxdlJ8OnCUNO6ylmhM4dVtV4WfhasBm9HVWGra0c=)
2: 9F2711861C8C11ED903AF819C4F9AE02.roa (hash: AwUinlhQoZr0cr/LeO9LbpyYPRye/aoN+g7yo3vyhJM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.crl
rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 01:07:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1041 (0x411)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5D32, serialNumber=1A82D1C6888AB73099F8E59AEB288C0D48BB292B
Validity
Not Before: Jul 29 01:07:40 2026 GMT
Not After : Aug 5 01:07:40 2026 GMT
Subject: CN=6a69525d-b62f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:31:63:cd:7a:50:21:6c:32:2e:b5:da:47:77:
9f:84:03:86:cf:11:f3:ba:b2:b3:47:af:01:26:43:
c7:a6:f7:8b:9c:a0:3e:90:6f:42:8c:f6:77:72:e5:
75:0a:29:32:87:ab:c2:b1:e4:78:fa:d9:a6:7b:e6:
22:93:12:52:c2:d8:6e:ab:3d:ca:df:e7:a4:4f:af:
6a:c0:ff:e2:9b:a2:8a:82:b5:54:f1:ec:ae:c6:bd:
61:17:84:0f:ce:f9:b0:4c:fb:fa:70:e2:03:f4:b8:
9c:e2:4c:b1:c7:67:33:b5:62:24:1e:2a:c6:c7:1c:
57:1a:7c:bf:d0:b3:49:06:64:78:ec:55:b0:44:53:
4e:ce:c7:d2:b0:39:17:1e:24:3f:c6:95:ee:a8:54:
93:6c:87:04:0f:91:2c:9e:33:9d:43:fa:58:45:1f:
f0:d1:1c:17:75:f6:88:1a:ce:7b:a2:04:27:4e:1f:
3a:a8:e1:d1:c3:88:81:e7:5a:67:bc:b8:23:74:31:
98:89:75:a7:47:85:f1:33:87:57:74:b4:ab:1d:12:
e4:e0:1f:b4:de:e7:f0:45:55:a2:d8:3e:54:a3:a4:
0d:8b:8a:0f:8a:4f:8a:89:a7:e2:d0:4f:8d:15:3f:
2a:29:11:79:0b:9f:9f:47:d8:5e:1d:c2:0b:94:9c:
ab:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1E:60:24:27:43:03:2E:80:26:E4:93:4A:61:95:8F:7C:B5:01:75
X509v3 Authority Key Identifier:
keyid:1A:82:D1:C6:88:8A:B7:30:99:F8:E5:9A:EB:28:8C:0D:48:BB:29:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:bd:0b:30:ba:33:19:9e:d5:5f:2f:18:7d:d6:b2:ab:b9:44:
11:1f:cd:52:1d:61:61:65:b4:80:81:10:a1:cd:8d:65:9f:f2:
fd:33:85:f2:43:57:8c:54:a5:1c:c8:f0:8a:96:1a:28:13:3c:
3f:6e:37:0c:7c:c8:86:8b:71:45:77:71:e8:42:aa:93:8d:95:
e6:35:c5:8c:76:b0:a9:f8:b3:36:b3:63:30:40:e4:8b:c6:51:
74:95:43:c0:04:db:0d:ed:27:77:b5:87:00:d7:34:a2:03:b8:
85:af:64:73:4f:b8:88:f7:8a:e1:e1:10:97:f0:74:b9:42:33:
8f:af:30:dd:ec:10:33:87:95:f8:cc:9d:c8:c9:8b:e5:70:b0:
47:cd:ea:25:0d:eb:92:5d:45:fe:2e:f5:36:51:1c:f5:3d:a4:
10:fd:22:c5:74:e2:2c:8b:91:e6:32:fd:71:17:bc:e9:77:2c:
48:96:59:37:62:cd:43:3f:70:d5:2d:0f:f6:2f:63:16:11:d4:
33:54:b2:5a:8d:21:f3:fe:74:2d:a0:c3:3c:a2:0d:c9:20:7b:
8c:b9:6b:cd:8d:67:b2:35:b8:1a:f6:5b:e4:31:06:b4:91:57:
8c:dc:be:d5:67:dc:85:be:23:1d:42:8c:48:09:d0:99:fa:f6:
e2:cf:61:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:44:14 2026 by rpki-client