
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.mft
File: GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.mft (raw, json)
Hash identifier: 2A5N2T54v+Je2/R+VpVUiXB9rVgbXmQo2cApkQECnvU=
Subject key identifier: AF:A0:4D:F8:29:29:CF:4E:3A:D1:29:7C:F2:5B:D7:FD:6F:6D:AB:8B
Authority key identifier: 18:ED:AB:B2:82:0C:E2:5F:90:E8:63:5C:13:B7:F0:D4:5F:04:63:76
Certificate issuer: /CN=A9155810/serialNumber=18EDABB2820CE25F90E8635C13B7F0D45F046376
Certificate serial: 0129
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.mft
Manifest number: 0117
Signing time: Mon 01 Jun 2026 06:46:39 +0000
Manifest this update: Mon 01 Jun 2026 06:46:39 +0000
Manifest next update: Mon 08 Jun 2026 06:46:39 +0000
Files and hashes: 1: GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.crl (hash: jv6CZ85u3rjXm1WioU0eHtyBbHVGSwRvmz7cJeOa/rU=)
2: 1BC9B310C88E11EF8E789228C4F9AE02.roa (hash: 00t278toG5ltI5w8ERTGNX15x/yelt1qQ4SxeDS7/K8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.crl
rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 06:46:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 297 (0x129)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155810, serialNumber=18EDABB2820CE25F90E8635C13B7F0D45F046376
Validity
Not Before: Jun 1 06:46:39 2026 GMT
Not After : Jun 8 06:46:39 2026 GMT
Subject: CN=6a1d2acf-3dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2f:c5:fc:9f:b6:5d:ae:71:8c:ab:24:ff:a2:
ee:1d:16:28:c3:8e:6a:fe:bc:99:5b:9f:b8:e9:33:
ca:dc:b7:1f:bc:0e:46:4a:68:af:6c:26:47:14:6d:
12:a3:e0:79:f6:b8:60:7f:62:42:b4:a2:29:f5:fd:
c8:d2:a9:2b:7a:e3:9e:91:ca:7a:30:d6:71:7b:dd:
41:98:2e:32:8e:bc:23:e4:ca:2b:52:42:7c:d9:98:
c5:3d:d4:7d:45:69:2c:03:b8:6a:e9:5e:05:49:e1:
62:e9:56:aa:59:dd:4f:ee:62:32:b6:75:06:54:e0:
4f:5a:cb:f2:ff:1f:ca:83:d5:6d:d6:8f:77:e6:e9:
5e:eb:83:ad:a5:ab:44:8d:4f:d6:fa:0f:04:61:16:
ce:b3:c1:d3:3c:8d:ea:4b:bf:ac:1f:6c:9a:17:6c:
bb:df:cc:cb:3a:a1:35:59:6a:13:08:d3:89:62:10:
33:43:02:e9:d6:30:9a:0b:96:c0:c4:cd:14:87:89:
dd:35:8d:0a:99:16:f9:78:e7:b7:5c:38:94:e4:53:
3f:9a:b0:99:fc:f4:d4:c2:56:06:c1:5b:13:cc:e3:
3a:f9:00:e6:70:1d:c2:23:0d:de:18:c0:4a:47:d3:
35:f3:57:7a:6b:d7:55:f2:d3:d0:f6:dc:43:9c:75:
4c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A0:4D:F8:29:29:CF:4E:3A:D1:29:7C:F2:5B:D7:FD:6F:6D:AB:8B
X509v3 Authority Key Identifier:
keyid:18:ED:AB:B2:82:0C:E2:5F:90:E8:63:5C:13:B7:F0:D4:5F:04:63:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:a0:94:f1:cf:56:96:c0:a6:03:f5:86:d5:21:a5:74:ac:3b:
a0:86:0d:c8:b6:af:a4:25:5c:83:ef:ae:2f:98:cd:c8:73:4c:
33:73:e3:43:c6:4e:a9:a0:b7:e5:93:a7:dd:e4:e1:dd:08:cb:
4f:f6:94:08:05:9d:d7:d4:b2:b0:6c:b5:d5:43:8a:a6:86:cd:
82:1b:01:2c:27:fc:af:22:dd:b6:8e:1e:4c:d5:45:ad:b9:34:
63:52:dd:89:e2:02:9a:ed:7d:d9:51:7f:bc:a1:cd:d3:93:2a:
95:50:c8:5e:8e:e2:f6:26:f4:9f:67:f4:f8:01:53:0a:b7:10:
57:4a:32:11:46:fc:55:5d:2a:f1:fc:9d:88:87:7a:b4:ea:d0:
da:12:ed:c7:97:57:db:a9:25:b7:ab:d0:cb:78:45:42:28:99:
78:12:2f:c8:31:fa:75:fc:e4:9e:c7:de:dd:36:e5:0d:71:bc:
b8:18:5b:59:f5:9b:a8:92:e0:74:01:8a:24:85:d1:42:f7:af:
4a:9a:57:14:73:11:3b:64:12:e4:da:4b:be:af:d4:29:8e:dc:
e7:0f:74:9b:ff:18:dc:2d:e3:9a:e7:8c:52:1f:3f:27:65:b7:
d9:97:07:6e:59:c3:b0:31:c0:2f:9a:38:f0:b5:bf:b1:bd:c0:
ba:6f:16:9c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTU4MTAxMTAvBgNVBAUTKDE4RURBQkIyODIwQ0UyNUY5MEU4NjM1QzEzQjdGMEQ0
NUYwNDYzNzYwHhcNMjYwNjAxMDY0NjM5WhcNMjYwNjA4MDY0NjM5WjAYMRYwFAYD
VQQDEw02YTFkMmFjZi0zZGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvi/F/J+2Xa5xjKsk/6LuHRYow45q/ryZW5+46TPK3LcfvA5GSmivbCZHFG0S
o+B59rhgf2JCtKIp9f3I0qkreuOekcp6MNZxe91BmC4yjrwj5MorUkJ82ZjFPdR9
RWksA7hq6V4FSeFi6VaqWd1P7mIytnUGVOBPWsvy/x/Kg9Vt1o935ule64OtpatE
jU/W+g8EYRbOs8HTPI3qS7+sH2yaF2y738zLOqE1WWoTCNOJYhAzQwLp1jCaC5bA
xM0Uh4ndNY0KmRb5eOe3XDiU5FM/mrCZ/PTUwlYGwVsTzOM6+QDmcB3CIw3eGMBK
R9M181d6a9dV8tPQ9txDnHVMJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK+gTfgp
Kc9OOtEpfPJb1/1vbauLMB8GA1UdIwQYMBaAFBjtq7KCDOJfkOhjXBO38NRfBGN2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTgxMC83QkE4RDM5Q0M3
MDgxMUVGQTg5QjBDNUZDNEY5QUUwMi9HTzJyc29JTTRsLVE2R05jRTdmdzFGOEVZ
M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dPMnJzb0lNNGwtUTZHTmNFN2Z3MUY4RVkzWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NTgxMC83QkE4RDM5Q0M3MDgxMUVGQTg5QjBDNUZDNEY5QUUwMi9HTzJyc29JTTRs
LVE2R05jRTdmdzFGOEVZM1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlqCU8c9WlsCmA/WG1SGldKw7oIYNyLavpCVcg++uL5jNyHNMM3PjQ8ZOqaC3
5ZOn3eTh3QjLT/aUCAWd19SysGy11UOKpobNghsBLCf8ryLdto4eTNVFrbk0Y1Ld
ieICmu192VF/vKHN05MqlVDIXo7i9ib0n2f0+AFTCrcQV0oyEUb8VV0q8fydiId6
tOrQ2hLtx5dX26klt6vQy3hFQiiZeBIvyDH6dfzknsfe3TblDXG8uBhbWfWbqJLg
dAGKJIXRQvevSppXFHMRO2QS5NpLvq/UKY7c5w90m/8Y3C3jmueMUh8/J2W32ZcH
blnDsDHAL5o48LW/sb3Aum8WnA==
-----END CERTIFICATE-----
Generated at Tue Jun 2 22:19:35 2026 by rpki-client