
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft
File: rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft (raw, json)
Hash identifier: /Vz4wBBngKANwW+26tXOFrxpeNSdYYausPRz6s6Vdak=
Subject key identifier: 3A:3E:C3:79:BC:11:77:DD:40:DE:DA:B0:D0:BD:07:99:EB:D0:13:53
Authority key identifier: AC:6A:05:C1:9D:E3:77:FA:FE:AD:A8:87:0C:90:E4:3D:DD:E8:2D:32
Certificate issuer: /CN=A9141BAE/serialNumber=AC6A05C19DE377FAFEADA8870C90E43DDDE82D32
Certificate serial: AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoFwZ3jd_r-raiHDJDkPd3oLTI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft
Manifest number: A3
Signing time: Tue 23 Jun 2026 07:34:09 +0000
Manifest this update: Tue 23 Jun 2026 07:34:08 +0000
Manifest next update: Tue 30 Jun 2026 07:34:08 +0000
Files and hashes: 1: rGoFwZ3jd_r-raiHDJDkPd3oLTI.crl (hash: R5gMMuV+j9nQKF6JRv813DixUlXvv2qw8jBVFxWk0B8=)
2: 802EA36AE88B11F09D8DF0484F6F56BC.roa (hash: CjISRCjOn0m+5030aubSSBLk5SCQO1cBM9gnCnW5SlI=)
3: B752BBF0EF0811F098A4972A416F56BC.roa (hash: rSx6SG/CH+Eqp7hGNaOrkPucM6ELj4c471xwycPS5Rc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.crl
rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoFwZ3jd_r-raiHDJDkPd3oLTI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 07:34:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171 (0xab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141BAE, serialNumber=AC6A05C19DE377FAFEADA8870C90E43DDDE82D32
Validity
Not Before: Jun 23 07:34:08 2026 GMT
Not After : Jun 30 07:34:08 2026 GMT
Subject: CN=6a3a36f1-7ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4b:fa:b0:99:93:84:f4:1b:af:9d:59:bb:44:
04:de:4f:86:25:02:61:af:b6:6f:d2:14:ff:5d:75:
e6:e6:1a:85:b8:ca:2e:29:85:18:f8:f1:11:0a:de:
18:c6:cc:f2:41:4e:a8:17:ce:fb:e4:00:20:2a:06:
81:da:bc:72:4b:98:53:45:d1:6b:1c:2a:7b:fc:a7:
95:5e:d0:63:ce:ad:7c:2c:94:43:ac:69:5e:88:e4:
b5:9f:35:21:86:e2:df:99:a9:3e:01:1b:74:70:4a:
4f:11:2e:ad:5a:8d:34:3e:c0:01:e8:69:45:2d:83:
2e:4a:4d:fb:9e:ee:85:7b:dc:79:e1:01:0e:c0:f5:
9c:72:53:95:7a:b5:14:6d:2f:2f:52:23:88:0d:26:
5e:82:48:7d:53:9d:54:5f:43:eb:75:32:bc:b8:89:
a1:bc:d7:bb:a9:57:be:81:72:df:34:8b:4a:2d:b4:
cb:dd:2f:fc:8a:75:8d:49:10:08:db:d1:73:fd:42:
22:01:81:8b:74:ac:2e:ab:a1:e5:60:08:be:80:e7:
77:4c:26:06:75:f0:39:e2:fb:0f:7a:27:1c:fc:89:
4c:a9:4f:19:f7:20:c0:93:7b:6d:25:61:a1:97:fb:
bf:c6:bc:83:db:58:8c:85:21:4c:77:08:4b:3f:3b:
0c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:3E:C3:79:BC:11:77:DD:40:DE:DA:B0:D0:BD:07:99:EB:D0:13:53
X509v3 Authority Key Identifier:
keyid:AC:6A:05:C1:9D:E3:77:FA:FE:AD:A8:87:0C:90:E4:3D:DD:E8:2D:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoFwZ3jd_r-raiHDJDkPd3oLTI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:0f:0c:56:47:fb:b5:ac:a6:b6:52:4a:77:d8:02:80:5a:a9:
3c:65:60:56:7b:9e:2a:36:63:07:35:86:d4:b6:da:35:a1:2d:
29:08:38:8e:c3:83:f7:ca:87:d3:a4:57:2d:56:92:eb:de:4d:
1f:7d:22:3f:f3:b7:76:c1:23:7f:f7:dd:52:aa:95:a0:45:c3:
a9:41:cf:2c:68:82:3a:f4:90:41:55:9f:6c:af:b5:70:58:4c:
12:96:e0:d7:b0:95:fd:11:04:e5:62:7b:48:1a:a1:80:01:c1:
3e:38:17:30:79:af:99:f0:ae:fd:f1:f1:38:15:7c:ff:b6:c6:
21:36:ea:c2:f3:f3:68:6f:76:49:ff:f7:49:9d:3c:e9:f4:97:
29:c4:7f:7d:89:73:46:4c:1f:54:8e:62:9e:a3:50:02:d9:6a:
78:8f:94:00:ba:a4:13:cc:cf:8d:5b:ee:12:78:07:e3:d9:33:
50:e6:ef:25:f0:08:10:d9:20:99:78:a2:74:04:6a:ad:e1:78:
8a:07:85:e5:c9:de:18:bd:5c:22:4a:11:5c:04:3c:b5:05:3f:
5f:0a:46:95:71:f4:24:a5:0c:a4:67:62:d1:1c:98:34:83:ff:
d6:2e:cb:db:96:0d:b4:11:c2:40:65:b5:dd:51:0c:ee:53:cc:
73:1e:fa:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 15:44:52 2026 by rpki-client