
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft
File: rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft (raw, json)
Hash identifier: GlT0wnu8ywzAfqmINtTrHRn1l5+DjqKn4089M1J1F4Y=
Subject key identifier: BF:AC:38:CC:BA:56:C0:21:0A:B5:84:66:9D:5A:9C:3F:5B:C1:CC:07
Authority key identifier: AC:6A:05:C1:9D:E3:77:FA:FE:AD:A8:87:0C:90:E4:3D:DD:E8:2D:32
Certificate issuer: /CN=A9141BAE/serialNumber=AC6A05C19DE377FAFEADA8870C90E43DDDE82D32
Certificate serial: E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoFwZ3jd_r-raiHDJDkPd3oLTI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft
Manifest number: DA
Signing time: Sat 03 Oct 2026 07:23:42 +0000
Manifest this update: Sat 03 Oct 2026 07:23:41 +0000
Manifest next update: Sat 10 Oct 2026 07:23:41 +0000
Files and hashes: 1: rGoFwZ3jd_r-raiHDJDkPd3oLTI.crl (hash: B1ZPHohzFsPhGLcAp5zUI8DWNhq8Dw7KMhwWIs5N0Yc=)
2: 802EA36AE88B11F09D8DF0484F6F56BC.roa (hash: CjISRCjOn0m+5030aubSSBLk5SCQO1cBM9gnCnW5SlI=)
3: 8B4699469F0711F180E670C05811F970.roa (hash: fSS3HK51kJcHMxHuKIEWHa0gabU83pmDmR6pQGk0spQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.crl
rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoFwZ3jd_r-raiHDJDkPd3oLTI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 07:23:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 227 (0xe3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141BAE, serialNumber=AC6A05C19DE377FAFEADA8870C90E43DDDE82D32
Validity
Not Before: Oct 3 07:23:41 2026 GMT
Not After : Oct 10 07:23:41 2026 GMT
Subject: CN=6ac0ad7e-91eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ec:75:5e:6f:5c:0b:a0:85:79:ec:bb:ce:66:
27:17:a2:2c:e0:8a:e1:b5:da:e6:ae:fe:e0:85:ef:
4e:3c:06:f3:ab:b8:e5:72:cc:0a:e9:80:ec:06:04:
f3:cc:15:0a:f3:a6:f4:43:58:81:80:17:fe:ca:d1:
12:99:57:84:96:46:6e:9b:32:7d:8e:ac:e6:1b:36:
cd:65:f4:fc:3d:ce:77:68:67:f0:e3:91:c3:a4:05:
df:4a:39:56:9a:05:ef:e9:04:87:1a:54:65:3b:dd:
48:57:a0:66:fa:6d:eb:f3:b1:97:ad:94:5d:c2:bc:
d4:3f:66:2c:d2:38:50:d1:dc:cd:8c:86:91:73:96:
c7:71:f4:58:9b:c3:5f:bb:0f:5a:1d:bd:04:96:64:
9f:8b:52:4d:33:4b:a1:50:75:f1:b1:49:dd:bd:4c:
c9:29:39:35:f5:00:55:cc:01:00:b8:52:f6:f3:13:
b4:1f:24:63:7a:39:31:98:73:f1:e2:67:a1:08:4e:
0e:c3:07:5b:4d:6e:7d:df:6b:3d:fd:02:8a:a5:09:
32:50:7e:d1:50:27:9d:bd:c4:49:f9:1f:d6:fb:e4:
56:f4:6c:a9:87:74:ef:07:c2:10:84:40:f9:3c:f5:
52:21:7e:ff:42:6b:a4:12:f1:d9:d2:7d:8c:21:5a:
d4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:AC:38:CC:BA:56:C0:21:0A:B5:84:66:9D:5A:9C:3F:5B:C1:CC:07
X509v3 Authority Key Identifier:
keyid:AC:6A:05:C1:9D:E3:77:FA:FE:AD:A8:87:0C:90:E4:3D:DD:E8:2D:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoFwZ3jd_r-raiHDJDkPd3oLTI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:85:81:54:cc:d4:45:5d:d2:05:50:eb:92:ab:bd:50:9e:da:
30:a7:e4:d7:bf:70:95:cf:db:56:1a:0a:cb:d9:f8:cf:b7:8a:
da:48:1c:e1:59:cd:4e:19:72:e3:62:88:a9:c7:36:45:ac:63:
69:47:26:18:26:c6:a1:b7:c6:18:4a:56:f4:c0:c9:fb:62:fc:
24:e1:d5:4a:66:53:02:54:f1:47:c2:56:c9:f4:0b:c1:36:72:
d4:c6:f7:31:27:80:c6:65:a3:a6:70:1a:b9:16:ae:3e:b5:5e:
f4:a2:00:1f:11:cb:6f:8b:43:5c:33:85:0a:ac:b0:dc:55:b4:
4a:33:e5:33:36:93:b0:92:e1:a3:2e:5c:23:4f:0f:77:70:52:
25:20:69:55:4f:19:cd:4c:7d:2b:20:d5:c6:c5:ee:29:e9:16:
0f:91:c1:dd:1f:23:a7:da:17:93:22:f9:d4:1a:34:ce:5c:9e:
81:7d:1e:12:a5:be:75:b6:a1:95:9f:22:51:9c:7f:6d:dd:b3:
17:d3:82:d1:73:f4:af:51:68:33:f8:d8:06:05:1a:d0:5c:f0:
98:1d:b3:6a:f0:a9:65:4f:29:cf:ce:e8:7d:a4:cc:c1:3e:32:
a8:d4:a5:59:1d:90:e8:d2:9c:3e:1a:e4:13:0c:1f:40:8a:6e:
a0:16:13:53
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDFCQUUxMTAvBgNVBAUTKEFDNkEwNUMxOURFMzc3RkFGRUFEQTg4NzBDOTBFNDNE
RERFODJEMzIwHhcNMjYxMDAzMDcyMzQxWhcNMjYxMDEwMDcyMzQxWjAYMRYwFAYD
VQQDEw02YWMwYWQ3ZS05MWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr+x1Xm9cC6CFeey7zmYnF6Is4Irhtdrmrv7ghe9OPAbzq7jlcswK6YDsBgTz
zBUK86b0Q1iBgBf+ytESmVeElkZumzJ9jqzmGzbNZfT8Pc53aGfw45HDpAXfSjlW
mgXv6QSHGlRlO91IV6Bm+m3r87GXrZRdwrzUP2Ys0jhQ0dzNjIaRc5bHcfRYm8Nf
uw9aHb0ElmSfi1JNM0uhUHXxsUndvUzJKTk19QBVzAEAuFL28xO0HyRjejkxmHPx
4mehCE4OwwdbTW5932s9/QKKpQkyUH7RUCedvcRJ+R/W++RW9Gyph3TvB8IQhED5
PPVSIX7/QmukEvHZ0n2MIVrUDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL+sOMy6
VsAhCrWEZp1anD9bwcwHMB8GA1UdIwQYMBaAFKxqBcGd43f6/q2ohwyQ5D3d6C0y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUJBRS83MjAzNzlBMjgx
NDExMUYwODhEMDUxM0ZDNEY5QUUwMi9yR29Gd1ozamRfci1yYWlIREpEa1BkM29M
VEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JHb0Z3WjNqZF9yLXJhaUhESkRrUGQzb0xUSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MUJBRS83MjAzNzlBMjgxNDExMUYwODhEMDUxM0ZDNEY5QUUwMi9yR29Gd1ozamRf
ci1yYWlIREpEa1BkM29MVEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAa4WBVMzURV3SBVDrkqu9UJ7aMKfk179wlc/bVhoKy9n4z7eK2kgc4VnNThly
42KIqcc2RaxjaUcmGCbGobfGGEpW9MDJ+2L8JOHVSmZTAlTxR8JWyfQLwTZy1Mb3
MSeAxmWjpnAauRauPrVe9KIAHxHLb4tDXDOFCqyw3FW0SjPlMzaTsJLhoy5cI08P
d3BSJSBpVU8ZzUx9KyDVxsXuKekWD5HB3R8jp9oXkyL51Bo0zlyegX0eEqW+dbah
lZ8iUZx/bd2zF9OC0XP0r1FoM/jYBgUa0FzwmB2zavCpZU8pz87ofaTMwT4yqNSl
WR2Q6NKcPhrkEwwfQIpuoBYTUw==
-----END CERTIFICATE-----
Generated at Sun Oct 4 18:42:18 2026 by rpki-client