
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft
File: GO9DJ41GMx6arw_XcqcygNE6qlI.mft (raw, json)
Hash identifier: MEUm4x/faoMAcx3nYdoLcabd+/RgIu6xS5A7SPjkaTw=
Subject key identifier: 89:53:3B:FF:67:FD:61:9C:6B:B4:9F:54:23:C5:4E:CA:56:D5:22:5A
Authority key identifier: 18:EF:43:27:8D:46:33:1E:9A:AF:0F:D7:72:A7:32:80:D1:3A:AA:52
Certificate issuer: /CN=A91104D1/serialNumber=18EF43278D46331E9AAF0FD772A73280D13AAA52
Certificate serial: 11C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO9DJ41GMx6arw_XcqcygNE6qlI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft
Manifest number: 1165
Signing time: Fri 04 Sep 2026 17:14:37 +0000
Manifest this update: Fri 04 Sep 2026 17:14:36 +0000
Manifest next update: Fri 11 Sep 2026 17:14:36 +0000
Files and hashes: 1: GO9DJ41GMx6arw_XcqcygNE6qlI.crl (hash: 36/uWU99/VrE8lChFvhUF8XGjrk+vFhokr/n04rwU6I=)
2: 446826648F3511EE8864C25EC4F9AE02.roa (hash: ny4GhVXrmI+9wyEmhfWqKmydIRJbc32z+Z+I8AKHWUk=)
3: 381223E2E00711EE8E019E29C4F9AE02.roa (hash: itbqWUa/NKPPtYKdrkpcQWzti779l/FpRj9FQ1sUc8Y=)
4: 87C9E3FE3F6D11F0951BB23CC4F9AE02.roa (hash: Ro1WYvBGHNUPbIY7IvUqpCvewp4A9RwhtkxBRjwWeZc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.crl
rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO9DJ41GMx6arw_XcqcygNE6qlI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 17:14:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4547 (0x11c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91104D1, serialNumber=18EF43278D46331E9AAF0FD772A73280D13AAA52
Validity
Not Before: Sep 4 17:14:36 2026 GMT
Not After : Sep 11 17:14:36 2026 GMT
Subject: CN=6a9afc7c-84c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4d:57:28:96:dd:22:c5:f5:bd:3f:86:68:fa:
0e:bd:c2:06:15:76:d5:c2:9f:6e:ba:a1:76:f3:c9:
d4:33:89:ac:b1:47:16:ce:f8:14:a9:38:d8:2b:6c:
d5:e4:79:01:59:3f:48:27:e4:cd:96:76:06:76:15:
56:41:3e:c4:39:49:4b:c7:8a:c7:6a:d3:14:cb:db:
59:11:a9:b0:87:ae:83:38:21:fd:87:5c:48:29:91:
be:a6:12:c5:c9:5a:f8:ce:5f:f6:96:80:d0:2e:f9:
75:77:65:64:61:4d:af:61:6a:5a:dd:a5:30:3e:06:
77:dd:2b:41:4e:64:45:b5:9b:c0:e7:3c:8d:5c:d9:
31:af:ea:55:a1:ed:52:2f:ec:ff:7a:54:58:d9:8b:
d7:05:fd:21:86:ed:9b:ff:d9:ba:a9:1b:fa:ad:dd:
c1:dc:ad:a5:ba:53:c1:3c:45:9d:40:11:c1:22:22:
a6:e0:5b:68:2d:a1:db:9b:ca:24:51:ea:94:43:5f:
bd:7f:d8:da:93:34:1d:14:ef:82:85:c0:18:fa:4f:
bb:5e:6f:e1:14:c4:50:96:e4:1a:61:59:2f:11:98:
40:78:cb:e2:c2:ed:67:1a:c6:f0:c5:70:9f:e1:67:
08:61:3b:1c:15:61:35:cf:61:c9:f5:f6:d5:b6:84:
3b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:53:3B:FF:67:FD:61:9C:6B:B4:9F:54:23:C5:4E:CA:56:D5:22:5A
X509v3 Authority Key Identifier:
keyid:18:EF:43:27:8D:46:33:1E:9A:AF:0F:D7:72:A7:32:80:D1:3A:AA:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO9DJ41GMx6arw_XcqcygNE6qlI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:6c:1e:03:fc:32:b0:47:7c:18:d7:10:05:57:1b:e9:b3:8a:
1b:48:ef:5b:fa:71:36:5b:1b:b5:55:39:54:57:fc:d1:5d:4f:
0c:f7:9c:89:1f:98:71:61:8b:90:19:85:52:cb:af:8a:ee:68:
c7:81:cb:30:7c:7d:09:5c:1b:e6:e8:00:27:49:5e:9d:f4:0f:
34:32:71:fa:47:3c:e3:f5:8e:6d:3b:36:eb:9b:89:12:02:f4:
8e:96:70:a8:3a:26:2e:83:46:de:47:0e:4f:20:84:15:4e:16:
be:49:12:a2:55:4a:da:7a:e4:bc:18:30:d5:88:69:5c:69:b2:
1b:f8:89:5a:2b:b7:fe:e9:d4:13:18:2e:cc:4a:81:13:e0:99:
34:51:44:f5:9a:e5:78:a3:9a:4a:3a:a8:3f:8a:92:e8:87:e2:
b1:c7:ef:a9:ad:e4:5b:2d:21:5d:e8:79:08:ee:43:c0:b4:2f:
e7:e1:f6:bf:6b:62:15:8a:f7:5b:9a:52:81:db:6c:e1:5f:86:
15:0b:84:76:0d:80:df:12:ce:ce:5a:ff:92:a1:25:77:ef:76:
3b:47:c8:b8:76:fb:ba:a5:5f:f0:d6:2e:9d:3f:a2:e7:a9:48:
84:b1:61:11:27:7c:af:8c:62:eb:ff:b9:ad:b0:9a:50:43:18:
91:43:c6:ee
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTA0RDExMTAvBgNVBAUTKDE4RUY0MzI3OEQ0NjMzMUU5QUFGMEZENzcyQTczMjgw
RDEzQUFBNTIwHhcNMjYwOTA0MTcxNDM2WhcNMjYwOTExMTcxNDM2WjAYMRYwFAYD
VQQDEw02YTlhZmM3Yy04NGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtU1XKJbdIsX1vT+GaPoOvcIGFXbVwp9uuqF288nUM4mssUcWzvgUqTjYK2zV
5HkBWT9IJ+TNlnYGdhVWQT7EOUlLx4rHatMUy9tZEamwh66DOCH9h1xIKZG+phLF
yVr4zl/2loDQLvl1d2VkYU2vYWpa3aUwPgZ33StBTmRFtZvA5zyNXNkxr+pVoe1S
L+z/elRY2YvXBf0hhu2b/9m6qRv6rd3B3K2lulPBPEWdQBHBIiKm4FtoLaHbm8ok
UeqUQ1+9f9jakzQdFO+ChcAY+k+7Xm/hFMRQluQaYVkvEZhAeMviwu1nGsbwxXCf
4WcIYTscFWE1z2HJ9fbVtoQ7ewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIlTO/9n
/WGca7SfVCPFTspW1SJaMB8GA1UdIwQYMBaAFBjvQyeNRjMemq8P13KnMoDROqpS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDREMS9FRjA5NThFRTQ0
NUUxMUU5OTI5MjREODdDNEY5QUUwMi9HTzlESjQxR014NmFyd19YY3FjeWdORTZx
bEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dPOURKNDFHTXg2YXJ3X1hjcWN5Z05FNnFsSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MDREMS9FRjA5NThFRTQ0NUUxMUU5OTI5MjREODdDNEY5QUUwMi9HTzlESjQxR014
NmFyd19YY3FjeWdORTZxbEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWGweA/wysEd8GNcQBVcb6bOKG0jvW/pxNlsbtVU5VFf80V1PDPeciR+YcWGL
kBmFUsuviu5ox4HLMHx9CVwb5ugAJ0lenfQPNDJx+kc84/WObTs265uJEgL0jpZw
qDomLoNG3kcOTyCEFU4WvkkSolVK2nrkvBgw1YhpXGmyG/iJWiu3/unUExguzEqB
E+CZNFFE9ZrleKOaSjqoP4qS6Ifiscfvqa3kWy0hXeh5CO5DwLQv5+H2v2tiFYr3
W5pSgdts4V+GFQuEdg2A3xLOzlr/kqEld+92O0fIuHb7uqVf8NYunT+i56lIhLFh
ESd8r4xi6/+5rbCaUEMYkUPG7g==
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:36:12 2026 by rpki-client