
$ rpki-client -vvf rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.mft
File: rGoi8eThZQrPtSifXctdU5IPzzQ.mft (raw, json)
Hash identifier: UVG1YkmPWsx4N4SArGihyWxktb8763E3/gWKb6d9O1w=
Subject key identifier: B5:8D:F6:AE:49:A6:A5:DF:9F:99:8A:5A:E0:C3:24:CE:63:11:DC:77
Authority key identifier: AC:6A:22:F1:E4:E1:65:0A:CF:B5:28:9F:5D:CB:5D:53:92:0F:CF:34
Certificate issuer: /CN=A91422D7/serialNumber=AC6A22F1E4E1650ACFB5289F5DCB5D53920FCF34
Certificate serial: 01E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoi8eThZQrPtSifXctdU5IPzzQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.mft
Manifest number: 0592
Signing time: Wed 19 Aug 2026 00:59:02 +0000
Manifest this update: Wed 19 Aug 2026 00:59:02 +0000
Manifest next update: Wed 26 Aug 2026 00:59:02 +0000
Files and hashes: 1: rGoi8eThZQrPtSifXctdU5IPzzQ.crl (hash: CRQdwEBGV3SAt84uDyHsmrN2NFZBzZTaiQSZJgAWZ6Y=)
2: CE5F74E2BE5811EEA8C02E2AC4F9AE02.roa (hash: Z1lkPboS7Do5JVczgOK46BmhKy5Eyozp7p6CLVvAhpo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.crl
rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoi8eThZQrPtSifXctdU5IPzzQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 00:59:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 486 (0x1e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91422D7, serialNumber=AC6A22F1E4E1650ACFB5289F5DCB5D53920FCF34
Validity
Not Before: Aug 19 00:59:02 2026 GMT
Not After : Aug 26 00:59:02 2026 GMT
Subject: CN=6a84ffd6-0f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:b6:bd:6d:10:6f:70:ff:9b:9b:53:34:31:d8:
fa:5a:0f:fe:37:0d:81:c3:65:33:13:28:45:4f:c2:
6b:f6:c4:86:dd:c7:66:33:c6:b5:ba:c9:53:02:08:
05:8a:69:56:59:94:65:00:78:48:ec:e0:1b:d2:6b:
42:d0:8d:92:65:c3:35:e6:f3:e1:1d:d4:a0:50:4c:
0c:22:d4:8b:5b:8b:6a:5e:f2:30:73:9f:55:aa:60:
84:a4:de:43:59:52:49:08:f8:2c:4c:0e:18:ce:a2:
52:be:ac:9f:43:12:77:13:0e:ce:79:65:a2:a6:dc:
61:cf:ff:6f:00:81:53:b7:4c:ab:19:87:61:74:36:
30:6c:3b:44:85:18:6e:e9:9d:8e:7b:88:9b:9c:4f:
40:b5:52:f9:9c:57:5a:40:38:58:db:f5:13:5c:4a:
53:d6:b2:ee:ea:9b:06:9f:01:4f:41:a2:a5:05:be:
a5:4d:df:ff:b3:f0:6f:93:ed:d0:85:a9:ad:27:2d:
30:7f:fd:6d:7a:ba:0e:c7:2e:11:7a:bf:5d:b8:11:
0e:f6:f2:98:2d:45:55:7d:ce:ef:2f:e0:b5:e4:4a:
9d:6e:8e:80:dc:fb:16:45:23:fe:20:cc:11:22:c5:
28:44:c7:81:50:fd:4b:12:88:5f:69:53:7c:85:3b:
8a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:8D:F6:AE:49:A6:A5:DF:9F:99:8A:5A:E0:C3:24:CE:63:11:DC:77
X509v3 Authority Key Identifier:
keyid:AC:6A:22:F1:E4:E1:65:0A:CF:B5:28:9F:5D:CB:5D:53:92:0F:CF:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoi8eThZQrPtSifXctdU5IPzzQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d1:32:27:ce:0d:f3:b5:1e:6a:3a:a2:02:01:15:4a:51:e7:4f:
1e:4d:53:0d:6f:60:bd:3b:0a:e7:08:c8:c3:ed:ff:f4:72:e3:
77:18:ca:7d:2e:58:6f:35:7a:4a:d3:43:4d:81:64:36:d5:69:
93:97:a9:a8:dd:9a:80:52:ad:98:b2:e7:a9:5f:3b:da:7b:4e:
b5:1d:af:f1:56:2f:32:e8:15:f2:a7:3c:6c:36:9b:c8:84:35:
bf:72:4d:d4:e1:6a:a3:53:04:da:cf:9e:b0:66:9f:e3:04:6e:
42:9e:ec:6a:16:c0:52:f4:b9:76:a0:ec:18:7c:4f:e2:5c:22:
78:f0:67:28:cf:61:0d:af:a4:41:98:94:7c:8b:48:d1:18:d8:
4a:45:c4:3d:18:b3:21:0d:50:b3:2b:32:d9:7f:9f:2e:8c:93:
02:ec:27:d5:67:81:cf:c1:d3:89:78:27:9e:bb:0a:b4:ec:40:
28:8f:4e:6c:48:f0:84:7f:1d:fb:0f:a4:85:bf:8f:2a:ae:60:
64:62:df:d3:39:e0:d3:6f:7c:93:46:6d:c6:e9:a3:9b:45:2d:
02:ab:87:ef:dc:ed:c0:ab:64:5f:8b:52:45:d3:35:bc:3a:87:
a4:5a:8b:28:83:20:18:63:95:a9:2d:a7:8c:12:2c:e7:9a:f7:
9b:d1:8f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:50:17 2026 by rpki-client