
$ rpki-client -vvf rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.mft
File: goh6uR0rD2rb_HCyRhnxh7GlPVk.mft (raw, json)
Hash identifier: SEI9QJ+dAjO5YrIIENuHju0O7PXjZJ6u1KOajNqFWko=
Subject key identifier: F9:2A:C6:9C:B6:93:8C:E3:6E:4D:A9:FE:2B:DA:48:B1:FA:03:D5:A9
Authority key identifier: 82:88:7A:B9:1D:2B:0F:6A:DB:FC:70:B2:46:19:F1:87:B1:A5:3D:59
Certificate issuer: /CN=A9159032/serialNumber=82887AB91D2B0F6ADBFC70B24619F187B1A53D59
Certificate serial: 1B03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goh6uR0rD2rb_HCyRhnxh7GlPVk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.mft
Manifest number: 1AEF
Signing time: Mon 20 Jul 2026 16:24:10 +0000
Manifest this update: Mon 20 Jul 2026 16:24:10 +0000
Manifest next update: Mon 27 Jul 2026 16:24:10 +0000
Files and hashes: 1: goh6uR0rD2rb_HCyRhnxh7GlPVk.crl (hash: higycI+MekY2mtoMOeF2SpByg8C1pefNQWxiVWpv7Uo=)
2: 8AFD7D885DCE11EEA74FC07DC4F9AE02.roa (hash: 9z91DZp5gGn5objaZcmJRC9eXIJ9vkXiEByHhLrLrmk=)
3: 326E1852D80B11EC874C9083C4F9AE02.roa (hash: 5qtsq7ia4AOMsTly8sF4e2lBQ7HF32ao+hzi58so/BA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.crl
rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goh6uR0rD2rb_HCyRhnxh7GlPVk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 16:24:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6915 (0x1b03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9159032, serialNumber=82887AB91D2B0F6ADBFC70B24619F187B1A53D59
Validity
Not Before: Jul 20 16:24:10 2026 GMT
Not After : Jul 27 16:24:10 2026 GMT
Subject: CN=6a5e4baa-3cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:db:58:97:1c:1b:43:9f:0f:3a:b6:41:43:04:
aa:84:51:21:5f:70:8d:c4:dd:35:9d:fc:96:bc:fc:
d6:9e:59:36:ef:f3:7e:99:63:1e:fa:e5:1f:76:9b:
1b:a4:26:00:cb:32:0d:bb:17:41:7e:74:0d:a9:17:
cc:ff:92:d9:f5:f8:18:cf:ff:0c:c4:81:62:50:94:
4f:09:18:05:99:e4:3e:12:0e:0f:fb:5a:1d:6a:1f:
28:57:bc:13:1d:16:2b:e3:60:57:3e:6f:37:61:c8:
10:ad:04:e6:1e:12:da:7d:38:e5:55:fa:1a:1b:fc:
6d:4a:1f:07:c9:b7:7e:16:4d:53:a3:77:85:d0:16:
96:01:0f:15:f7:58:79:fa:69:01:de:f0:ba:73:9b:
d8:bb:11:1f:6c:a8:ad:cc:6d:87:91:74:8a:b8:3e:
a2:54:e8:34:a0:91:8f:a0:94:81:cd:6d:c9:a1:9e:
d0:d1:f7:37:ba:fe:e2:15:9b:c9:b1:29:99:ca:e5:
11:49:7b:c4:fa:6e:87:93:34:ea:d3:2c:8d:b3:dd:
e4:3b:47:84:f4:e0:52:90:ba:a1:3f:92:a9:bd:e6:
f6:41:db:f2:f3:7e:0d:d9:05:72:2d:b1:bf:37:a9:
15:08:88:8a:11:f2:a8:f7:ce:3d:26:3c:71:d9:55:
3d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:2A:C6:9C:B6:93:8C:E3:6E:4D:A9:FE:2B:DA:48:B1:FA:03:D5:A9
X509v3 Authority Key Identifier:
keyid:82:88:7A:B9:1D:2B:0F:6A:DB:FC:70:B2:46:19:F1:87:B1:A5:3D:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goh6uR0rD2rb_HCyRhnxh7GlPVk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:3c:a2:e4:e4:ac:65:9b:f4:59:b7:69:45:a9:7a:54:af:03:
07:c6:85:8a:a0:ca:6e:9e:dc:b7:98:fe:59:c0:b5:a0:81:c1:
36:f3:ff:19:d3:1f:34:1a:6e:5d:fb:5b:37:81:14:b4:9c:eb:
a9:cc:25:db:da:a6:12:88:ee:12:d7:c7:90:3c:de:f2:eb:3d:
a5:80:18:95:83:36:f4:44:62:99:ad:e1:93:8d:37:60:cf:2a:
c2:26:9c:a4:b8:1f:02:0f:b0:5c:f5:49:ef:6c:ce:03:4d:d3:
6e:23:31:43:1e:b2:3b:cc:46:82:93:23:fd:82:48:1e:3e:da:
16:ea:e1:8a:d5:48:ab:51:ca:1f:4c:53:a0:ef:94:98:c1:fc:
cf:06:58:cc:b6:30:51:79:df:30:7e:2a:2b:73:e2:e0:d0:b4:
86:13:70:cf:cb:a6:28:96:72:26:8d:14:0c:9b:47:2f:a8:14:
4e:99:a0:eb:7a:e2:b2:77:82:63:85:b2:61:c5:d4:c5:31:2d:
e0:b9:42:0f:58:70:bd:cb:16:8a:b5:b8:74:17:a3:f1:91:9e:
a7:5b:de:3d:83:b0:cd:44:69:b3:98:d7:fc:7a:47:12:51:f4:
e4:40:7d:02:15:3a:ad:2d:5c:16:a9:52:8d:e1:90:f9:e1:29:
85:22:85:26
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGwMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTkwMzIxMTAvBgNVBAUTKDgyODg3QUI5MUQyQjBGNkFEQkZDNzBCMjQ2MTlGMTg3
QjFBNTNENTkwHhcNMjYwNzIwMTYyNDEwWhcNMjYwNzI3MTYyNDEwWjAYMRYwFAYD
VQQDEw02YTVlNGJhYS0zY2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxNtYlxwbQ58POrZBQwSqhFEhX3CNxN01nfyWvPzWnlk27/N+mWMe+uUfdpsb
pCYAyzINuxdBfnQNqRfM/5LZ9fgYz/8MxIFiUJRPCRgFmeQ+Eg4P+1odah8oV7wT
HRYr42BXPm83YcgQrQTmHhLafTjlVfoaG/xtSh8Hybd+Fk1To3eF0BaWAQ8V91h5
+mkB3vC6c5vYuxEfbKitzG2HkXSKuD6iVOg0oJGPoJSBzW3JoZ7Q0fc3uv7iFZvJ
sSmZyuURSXvE+m6HkzTq0yyNs93kO0eE9OBSkLqhP5Kpveb2Qdvy834N2QVyLbG/
N6kVCIiKEfKo9849Jjxx2VU96QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPkqxpy2
k4zjbk2p/ivaSLH6A9WpMB8GA1UdIwQYMBaAFIKIerkdKw9q2/xwskYZ8YexpT1Z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTAzMi80NUZDRjVFMDRG
RUExMUU3OTcxMERFM0VDNEY5QUUwMi9nb2g2dVIwckQycmJfSEN5UmhueGg3R2xQ
VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dvaDZ1UjByRDJyYl9IQ3lSaG54aDdHbFBWay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
OTAzMi80NUZDRjVFMDRGRUExMUU3OTcxMERFM0VDNEY5QUUwMi9nb2g2dVIwckQy
cmJfSEN5UmhueGg3R2xQVmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEDyi5OSsZZv0WbdpRal6VK8DB8aFiqDKbp7ct5j+WcC1oIHBNvP/GdMfNBpu
XftbN4EUtJzrqcwl29qmEojuEtfHkDze8us9pYAYlYM29ERima3hk403YM8qwiac
pLgfAg+wXPVJ72zOA03TbiMxQx6yO8xGgpMj/YJIHj7aFurhitVIq1HKH0xToO+U
mMH8zwZYzLYwUXnfMH4qK3Pi4NC0hhNwz8umKJZyJo0UDJtHL6gUTpmg63risneC
Y4WyYcXUxTEt4LlCD1hwvcsWirW4dBej8ZGep1vePYOwzURps5jX/HpHElH05EB9
AhU6rS1cFqlSjeGQ+eEphSKFJg==
-----END CERTIFICATE-----
Generated at Tue Jul 21 17:27:43 2026 by rpki-client