
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.mft
File: GoOKdo1b8PVMYaptorRQOBveZ8c.mft (raw, json)
Hash identifier: DLIht1HsU1842St0mSCT0wGafOIr1awjnTObT55/h0U=
Subject key identifier: 84:2F:83:86:02:D0:7E:B6:A2:3F:2F:AA:67:DC:10:F6:03:6B:95:AE
Authority key identifier: 1A:83:8A:76:8D:5B:F0:F5:4C:61:AA:6D:A2:B4:50:38:1B:DE:67:C7
Certificate issuer: /CN=A918FFA8/serialNumber=1A838A768D5BF0F54C61AA6DA2B450381BDE67C7
Certificate serial: 3512
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoOKdo1b8PVMYaptorRQOBveZ8c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.mft
Manifest number: 3511
Signing time: Wed 18 Feb 2026 14:33:42 +0000
Manifest this update: Wed 18 Feb 2026 14:33:42 +0000
Manifest next update: Wed 25 Feb 2026 14:33:42 +0000
Files and hashes: 1: GoOKdo1b8PVMYaptorRQOBveZ8c.crl (hash: QOZHRK+arRVQcqB4tNLEtd1aQdiJki/MKO/8F+J1lCU=)
2: 2021C6F6795E11F0B07E6E6BC4F9AE02.roa (hash: /tr9Ms57wuKfsw+OEtuIOe0iJR3426UBPMZCKa1pr2A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.crl
rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoOKdo1b8PVMYaptorRQOBveZ8c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 14:33:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13586 (0x3512)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FFA8, serialNumber=1A838A768D5BF0F54C61AA6DA2B450381BDE67C7
Validity
Not Before: Feb 18 14:33:42 2026 GMT
Not After : Feb 25 14:33:42 2026 GMT
Subject: CN=6995cdc6-78e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c0:60:f2:03:6b:04:d6:49:43:f7:15:6d:34:
81:96:99:9c:80:9b:98:16:ab:c0:0e:66:da:e5:ea:
92:45:72:8f:ac:39:8a:dd:25:72:13:0b:df:60:6c:
05:e2:2b:8d:4a:25:6b:9c:ea:10:b1:d3:e1:55:ff:
3b:fd:40:04:ee:fd:61:4b:bd:4a:ee:97:01:57:f6:
80:ce:e2:89:36:9b:74:dc:11:1f:cc:60:11:18:4b:
25:77:12:b0:e0:b3:cc:5e:a4:70:a2:e4:04:6e:28:
02:e4:e8:eb:58:de:89:3a:2b:ee:9b:ee:50:c4:7b:
eb:a9:fe:a5:4a:7f:23:89:85:bb:24:38:00:83:d0:
a7:7f:cf:6b:88:4d:71:91:90:fd:29:ff:23:0b:69:
5f:ac:ab:3b:87:01:7b:dc:89:39:04:ac:e1:cc:17:
09:e9:c4:cb:3f:ce:5a:9a:51:30:cd:da:26:4c:f3:
c1:b6:0d:94:5a:2d:b7:f4:6b:7e:87:e8:92:bc:95:
ed:e4:5e:c2:9a:62:9e:d7:84:c9:80:1d:82:b9:80:
c5:82:eb:86:10:96:cc:8e:bd:1a:a0:a2:ce:4d:0f:
ef:3a:88:65:23:a0:6a:b1:d5:d9:63:15:0d:4e:57:
08:dc:d1:62:1d:e9:4b:93:0f:78:24:30:ad:b0:fe:
49:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:2F:83:86:02:D0:7E:B6:A2:3F:2F:AA:67:DC:10:F6:03:6B:95:AE
X509v3 Authority Key Identifier:
keyid:1A:83:8A:76:8D:5B:F0:F5:4C:61:AA:6D:A2:B4:50:38:1B:DE:67:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoOKdo1b8PVMYaptorRQOBveZ8c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:66:b6:c2:0c:f1:88:70:d8:5f:95:c1:7b:08:24:78:a3:7b:
94:e8:b8:ac:fb:e6:aa:79:07:5f:50:83:ba:f3:ca:e9:96:40:
5f:cc:94:ce:3d:32:7d:0f:d7:1e:50:f5:c8:fe:81:f1:c3:c3:
7e:06:d5:8e:45:d5:4c:8b:76:5f:fa:e4:9a:c4:25:69:e5:24:
1f:2a:2d:88:1d:5f:7b:f0:d9:c3:4a:d9:2d:e5:d1:67:89:6b:
64:e8:37:c0:90:a4:73:15:2a:77:0e:f0:a6:59:37:2f:2d:7f:
cb:fe:a4:b7:76:c9:1f:1e:fb:71:64:da:6a:b1:7b:fc:43:ce:
62:88:44:4e:0f:1e:0c:20:a7:3a:31:ef:bd:87:fd:6b:20:7c:
c3:d1:c4:19:b8:6f:26:9b:59:9c:1f:05:a4:12:b5:8c:bc:d0:
42:27:3f:34:3a:cd:2a:9f:79:25:4d:65:98:bb:18:80:c8:2f:
ad:42:b2:3d:b3:3d:29:1b:c3:65:77:e1:88:e2:2b:5e:5b:37:
67:2a:a1:44:c9:d6:8b:80:6c:da:95:7b:a3:62:7c:08:e2:67:
40:2f:ff:d1:1a:b3:0f:a2:27:c9:0c:59:25:73:e2:23:83:b1:
9f:ad:6e:19:7b:e3:9e:5a:a7:0e:85:41:19:6f:fe:a2:9d:3f:
d8:8a:c2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:50:27 2026 by rpki-client