
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft
File: rGOF7VY-H9amaz5LUQ3MaTDNSww.mft (raw, json)
Hash identifier: gJjA/Bkhne5zMpsl7zcFEf0ae7la+41l31N4fQYLodY=
Subject key identifier: 21:A2:58:1B:A0:12:0A:53:0C:A4:4B:78:EF:DD:74:1D:F4:B3:1F:FF
Authority key identifier: AC:63:85:ED:56:3E:1F:D6:A6:6B:3E:4B:51:0D:CC:69:30:CD:4B:0C
Certificate issuer: /CN=A9160D0A/serialNumber=AC6385ED563E1FD6A66B3E4B510DCC6930CD4B0C
Certificate serial: 0286
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft
Manifest number: 0264
Signing time: Fri 05 Jun 2026 02:26:33 +0000
Manifest this update: Fri 05 Jun 2026 02:26:33 +0000
Manifest next update: Fri 12 Jun 2026 02:26:33 +0000
Files and hashes: 1: rGOF7VY-H9amaz5LUQ3MaTDNSww.crl (hash: y4cBpiK/0XN6VEOCrMAakrIxLw1ggITWs4T5lYT8G68=)
2: 42EC5F02D2B711EDAF6DC017C4F9AE02.roa (hash: pkC+D8p7TNYzPBnocLkHTaXfdgtNXvj2i4jRd1Gl3NY=)
3: D1EAA18CD2BC11ED9E7A9A1BC4F9AE02.roa (hash: s27t8mzFE7pAO+YQ8b7HEZWkopZAKcG8DRX9E1bRajo=)
4: 096A1DB6D2BA11ED8E06CC13C4F9AE02.roa (hash: xjJh+3SCJ/mrp3JYArjRvZVJMzUf7HfzNFOkj330dzY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.crl
rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 02:26:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 646 (0x286)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160D0A, serialNumber=AC6385ED563E1FD6A66B3E4B510DCC6930CD4B0C
Validity
Not Before: Jun 5 02:26:33 2026 GMT
Not After : Jun 12 02:26:33 2026 GMT
Subject: CN=6a2233d9-b0cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:47:65:d0:ba:39:5b:4e:11:07:5c:31:54:cb:
87:4c:2e:f6:77:1d:8e:94:e1:56:cc:a6:71:39:48:
f0:38:22:8c:5a:3d:ec:a5:bc:e1:7d:75:b7:ff:0c:
64:da:eb:a7:d2:6f:6d:cd:fa:6c:f5:5c:91:14:6a:
2a:7e:8b:b8:46:8a:af:a0:00:67:8e:d1:17:80:33:
05:3e:8a:06:a0:2a:21:eb:1b:e0:b1:11:30:53:07:
ae:f3:af:2e:32:94:69:2b:32:17:8f:b5:72:8e:c1:
a0:2e:1f:d8:0a:6f:b1:75:18:30:80:82:9a:de:11:
8f:83:ff:81:2e:03:40:3c:a9:d1:0c:bd:78:27:30:
af:20:00:c9:2b:50:45:50:da:58:ba:d5:78:8e:1c:
15:0a:6b:bd:7d:6c:7e:7b:10:04:2b:29:5a:b2:96:
f8:37:dd:a0:e7:00:df:2a:54:c6:37:e2:3d:22:72:
36:6c:49:a8:e8:39:c0:44:2a:04:1d:90:c3:97:ba:
88:64:98:2f:2e:a3:7f:3b:22:64:4f:fe:ff:56:3c:
00:e0:67:aa:96:d7:07:36:6c:b7:75:01:ce:f6:77:
7b:07:e8:13:2a:77:bb:1d:af:39:02:18:e0:8c:49:
4b:4e:a8:62:42:8b:68:54:5f:f6:10:04:d4:ff:59:
4f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A2:58:1B:A0:12:0A:53:0C:A4:4B:78:EF:DD:74:1D:F4:B3:1F:FF
X509v3 Authority Key Identifier:
keyid:AC:63:85:ED:56:3E:1F:D6:A6:6B:3E:4B:51:0D:CC:69:30:CD:4B:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c7:18:82:c8:1e:8b:1f:8d:8a:15:51:91:ae:1d:80:bc:81:6c:
af:ae:12:0d:39:5d:b7:4f:43:6f:6a:f4:aa:3a:18:73:22:95:
fe:b0:68:db:4b:28:6d:59:94:ca:b5:e9:27:e6:05:38:65:5e:
22:b6:d5:ce:97:80:5e:c0:70:15:a2:c1:ce:7e:ff:8a:80:13:
da:01:bf:0a:f4:06:f0:18:58:28:2d:4d:d2:89:6f:38:ab:28:
14:81:85:96:2c:d8:78:1d:47:ef:90:df:da:98:3b:70:75:55:
8a:fb:4d:bd:42:ba:cf:1e:24:c9:a2:07:dd:c0:f2:2c:aa:23:
d0:db:c7:62:f9:de:38:b6:63:d5:16:9b:05:35:3c:49:d7:27:
0d:1d:ca:b6:c9:e0:fd:d2:13:67:f8:46:a5:82:bd:bc:35:9f:
57:fd:5a:16:35:88:b8:1a:e8:4a:7a:2e:43:47:7c:7f:6c:41:
63:c2:a3:c0:a6:28:5d:9b:7f:28:f9:36:84:90:95:7b:f3:55:
18:ee:c2:b3:70:64:bb:e2:69:86:66:92:23:15:4c:b1:29:92:
e8:5a:df:b9:10:4e:60:3b:71:85:66:51:50:b2:37:fe:91:40:
c8:8d:c4:8e:1f:41:d4:0b:f3:a2:da:6f:37:5f:8b:c2:e1:c2:
4b:94:70:7e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjBEMEExMTAvBgNVBAUTKEFDNjM4NUVENTYzRTFGRDZBNjZCM0U0QjUxMERDQzY5
MzBDRDRCMEMwHhcNMjYwNjA1MDIyNjMzWhcNMjYwNjEyMDIyNjMzWjAYMRYwFAYD
VQQDEw02YTIyMzNkOS1iMGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwkdl0Lo5W04RB1wxVMuHTC72dx2OlOFWzKZxOUjwOCKMWj3spbzhfXW3/wxk
2uun0m9tzfps9VyRFGoqfou4RoqvoABnjtEXgDMFPooGoCoh6xvgsREwUweu868u
MpRpKzIXj7VyjsGgLh/YCm+xdRgwgIKa3hGPg/+BLgNAPKnRDL14JzCvIADJK1BF
UNpYutV4jhwVCmu9fWx+exAEKylaspb4N92g5wDfKlTGN+I9InI2bEmo6DnARCoE
HZDDl7qIZJgvLqN/OyJkT/7/VjwA4GeqltcHNmy3dQHO9nd7B+gTKne7Ha85Ahjg
jElLTqhiQotoVF/2EATU/1lP3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCGiWBug
EgpTDKRLeO/ddB30sx//MB8GA1UdIwQYMBaAFKxjhe1WPh/Wpms+S1ENzGkwzUsM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEQwQS81NjRBMTM1RUQy
MjIxMUVEOUEyMDZDNDZDNEY5QUUwMi9yR09GN1ZZLUg5YW1hejVMVVEzTWFURE5T
d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JHT0Y3VlktSDlhbWF6NUxVUTNNYVRETlN3dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MEQwQS81NjRBMTM1RUQyMjIxMUVEOUEyMDZDNDZDNEY5QUUwMi9yR09GN1ZZLUg5
YW1hejVMVVEzTWFURE5Td3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAxxiCyB6LH42KFVGRrh2AvIFsr64SDTldt09Db2r0qjoYcyKV/rBo20sobVmU
yrXpJ+YFOGVeIrbVzpeAXsBwFaLBzn7/ioAT2gG/CvQG8BhYKC1N0olvOKsoFIGF
lizYeB1H75Df2pg7cHVVivtNvUK6zx4kyaIH3cDyLKoj0NvHYvneOLZj1RabBTU8
SdcnDR3Ktsng/dITZ/hGpYK9vDWfV/1aFjWIuBroSnouQ0d8f2xBY8KjwKYoXZt/
KPk2hJCVe/NVGO7Cs3Bku+JphmaSIxVMsSmS6FrfuRBOYDtxhWZRULI3/pFAyI3E
jh9B1AvzotpvN1+LwuHCS5Rwfg==
-----END CERTIFICATE-----
Generated at Sat Jun 6 07:02:41 2026 by rpki-client