
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft
File: GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft (raw, json)
Hash identifier: pQ7cuhCO/r1laFilnd9YKM+C/rP+I/4EFUvfRpCTf+Y=
Subject key identifier: 0C:D4:4A:11:76:36:21:C4:C1:B2:DD:C9:05:81:86:09:CC:3C:37:E4
Authority key identifier: 18:E9:29:7A:1F:1A:18:CB:87:9A:7E:12:4B:51:07:C4:40:57:3C:63
Certificate issuer: /CN=A91DF195/serialNumber=18E9297A1F1A18CB879A7E124B5107C440573C63
Certificate serial: 66
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GOkpeh8aGMuHmn4SS1EHxEBXPGM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft
Manifest number: 5D
Signing time: Mon 02 Mar 2026 00:28:55 +0000
Manifest this update: Mon 02 Mar 2026 00:28:54 +0000
Manifest next update: Mon 09 Mar 2026 00:28:54 +0000
Files and hashes: 1: GOkpeh8aGMuHmn4SS1EHxEBXPGM.crl (hash: uZhYKtgH5LQZoekSc8licQiboAOGUYHSsrwrG4KP/f0=)
2: EDD3FAACDB0A11F0AAAD2E0882D3641D.roa (hash: LVil25DNmm0Bpb6PzKwGKWoAwCQGcCkt4YTKOpr3JSk=)
3: DCD091AA93D111F0B0A32B0BC4F9AE02.roa (hash: hLi0saBOf2tkBmk0PdINKMJEWSLB4vAdQ079CKBQEa0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.crl
rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GOkpeh8aGMuHmn4SS1EHxEBXPGM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:28:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102 (0x66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF195, serialNumber=18E9297A1F1A18CB879A7E124B5107C440573C63
Validity
Not Before: Mar 2 00:28:54 2026 GMT
Not After : Mar 9 00:28:54 2026 GMT
Subject: CN=69a4d9c6-4bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c0:17:7c:77:1a:44:16:fb:42:13:b1:07:d2:
99:af:02:2a:70:14:1f:2e:9b:5b:27:b1:38:d3:bc:
6f:00:75:a3:45:ff:b7:64:63:fc:e2:05:49:f7:4f:
cd:64:32:00:c6:6e:f1:01:85:48:9c:50:e2:e9:d9:
5e:c0:f0:42:40:c4:86:11:8d:9e:a2:f9:0c:74:2d:
2a:69:78:f6:00:16:67:a7:a0:99:ff:e9:48:27:9f:
fb:b3:95:53:e1:29:80:9d:56:ad:ea:f6:3f:24:fe:
7e:60:56:58:db:d5:26:42:86:10:cd:a1:1a:9c:a5:
a5:97:82:16:fe:30:d1:02:0e:a9:5e:b2:37:df:b3:
e0:03:61:2b:fb:69:15:6f:b3:85:74:6e:f2:55:7f:
81:e6:de:b9:3a:2a:d4:53:9a:12:e5:4d:40:91:89:
44:09:92:a1:7b:18:05:8c:4e:1a:08:c7:21:b8:42:
55:bd:53:8d:54:2d:1c:fa:7a:27:56:d4:3d:8b:1f:
52:5b:0c:1e:5e:5e:bb:34:1e:7a:ea:be:a7:bc:b5:
d2:55:56:5f:6b:bc:f3:1d:ea:2f:af:b0:07:18:80:
94:a7:4a:28:79:2b:f7:1a:45:e2:02:c4:1b:cd:59:
89:25:7d:d0:d1:6f:77:6a:3f:c2:9b:ae:cb:79:f8:
84:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D4:4A:11:76:36:21:C4:C1:B2:DD:C9:05:81:86:09:CC:3C:37:E4
X509v3 Authority Key Identifier:
keyid:18:E9:29:7A:1F:1A:18:CB:87:9A:7E:12:4B:51:07:C4:40:57:3C:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GOkpeh8aGMuHmn4SS1EHxEBXPGM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:b3:d7:38:2a:d5:b8:46:b3:46:21:db:ad:85:2a:31:a1:42:
69:06:78:51:e7:25:f4:79:73:c6:1e:c4:68:fa:89:d7:0a:54:
6d:0e:da:6e:0f:3e:d7:4e:d0:69:dd:dc:c2:33:9c:25:90:64:
09:a9:d0:d9:db:7d:60:dc:78:66:1f:87:d2:00:9c:4f:d5:4a:
27:90:b7:f2:4d:94:f6:37:56:a1:28:97:4d:f8:a0:1f:41:08:
84:59:a0:ab:e7:b2:bb:44:c3:02:05:fa:52:a4:e6:47:3d:12:
b0:6f:05:5a:f1:cd:ca:7a:28:b7:81:eb:41:b7:ed:6b:01:32:
ee:dd:23:7f:d7:cc:8c:b7:c0:d5:8d:d2:42:d9:2c:e2:04:c2:
02:6d:34:00:2c:70:19:94:a3:66:43:e8:71:bb:d4:10:7b:c7:
11:4f:40:10:be:ab:b3:06:94:0d:30:d6:32:d4:b7:7a:d9:89:
c5:37:ee:2b:82:82:ae:ce:e8:a3:3f:70:3f:09:b7:e4:64:05:
71:6b:8d:90:6d:d4:e5:07:30:f1:55:57:e4:d1:ae:fb:80:2d:
de:d5:05:40:10:6e:dd:8b:9c:8f:95:c0:78:ee:cf:3a:3f:4b:
6f:7a:b1:bf:2b:15:57:62:dd:26:27:15:16:3a:70:02:a3:18:
27:bd:bf:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:50:42 2026 by rpki-client