
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.mft
File: GoOKdo1b8PVMYaptorRQOBveZ8c.mft (raw, json)
Hash identifier: fQJn8DCLWRrdv42liH3fIUyCw6Y3gnJhYoNqet0k7q8=
Subject key identifier: B0:9A:19:FA:03:75:AE:5C:25:15:70:79:91:5E:19:A9:5E:FD:26:0D
Authority key identifier: 1A:83:8A:76:8D:5B:F0:F5:4C:61:AA:6D:A2:B4:50:38:1B:DE:67:C7
Certificate issuer: /CN=A918FFA8/serialNumber=1A838A768D5BF0F54C61AA6DA2B450381BDE67C7
Certificate serial: 358B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoOKdo1b8PVMYaptorRQOBveZ8c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.mft
Manifest number: 3588
Signing time: Fri 02 Oct 2026 14:37:22 +0000
Manifest this update: Fri 02 Oct 2026 14:37:22 +0000
Manifest next update: Fri 09 Oct 2026 14:37:22 +0000
Files and hashes: 1: GoOKdo1b8PVMYaptorRQOBveZ8c.crl (hash: qReMVtlYIOiw/gRhDiqAM0MwIX6uLDmCIR5p0YQ7Dl8=)
2: 2021C6F6795E11F0B07E6E6BC4F9AE02.roa (hash: TqlpecplvSdLV29TPM7WN07wNwjZ8MAc88miHR0h6qc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.crl
rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoOKdo1b8PVMYaptorRQOBveZ8c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 14:37:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13707 (0x358b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FFA8, serialNumber=1A838A768D5BF0F54C61AA6DA2B450381BDE67C7
Validity
Not Before: Oct 2 14:37:22 2026 GMT
Not After : Oct 9 14:37:22 2026 GMT
Subject: CN=6abfc1a2-7d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:26:d4:e6:4c:3b:3d:ae:dc:a5:65:62:81:3e:
ac:bc:1b:97:66:87:cd:23:15:37:e3:00:6c:68:c9:
8e:b1:55:80:70:49:55:50:b6:71:30:54:0f:d9:7a:
42:54:be:54:a2:3d:46:ca:9b:f0:bc:37:3a:80:2d:
fe:c8:0b:45:6b:66:bc:d4:bb:11:79:fd:2c:81:bc:
52:f6:e1:38:a0:7c:c9:3e:4a:8e:df:f1:51:f3:dc:
22:d0:d3:b8:50:91:de:7d:9a:29:79:d6:5a:30:1d:
0e:09:0d:20:d9:9d:78:30:97:2a:54:9b:11:60:66:
2d:af:52:32:94:0c:f3:c3:a1:8e:f9:a0:13:08:a9:
af:f4:b4:e9:80:cf:bb:58:44:7e:6c:5a:07:82:94:
c9:0c:d4:f2:72:70:bd:5f:5c:04:69:1a:ea:e4:bc:
16:4f:81:f1:de:34:1f:a1:77:57:c6:07:8d:cc:b4:
18:d9:e7:ed:48:ef:68:0f:e0:a0:0c:86:e0:75:f5:
a9:52:ff:23:8b:f1:18:cc:b2:8e:cd:9f:83:53:a0:
54:40:32:d5:bf:77:71:64:4a:99:78:11:db:ae:ba:
a0:3a:39:6a:05:89:6a:aa:00:dd:de:f0:59:06:95:
a3:f0:b0:45:78:ff:e0:95:89:a0:69:ff:eb:ce:36:
d7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:9A:19:FA:03:75:AE:5C:25:15:70:79:91:5E:19:A9:5E:FD:26:0D
X509v3 Authority Key Identifier:
keyid:1A:83:8A:76:8D:5B:F0:F5:4C:61:AA:6D:A2:B4:50:38:1B:DE:67:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoOKdo1b8PVMYaptorRQOBveZ8c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:3d:cd:67:06:d3:8c:7d:52:9f:2c:27:cd:b5:ee:ce:ea:dd:
6f:b9:a3:c0:aa:71:bf:45:eb:c4:d3:80:d9:15:2a:de:17:4d:
f0:0e:81:6d:db:9c:a1:b3:c0:6d:99:7f:4b:9f:21:ae:4f:10:
cc:30:32:7f:26:19:a0:45:16:95:17:fa:6d:31:28:ce:b5:f8:
08:97:a8:02:9a:d6:d8:0e:b1:ab:2f:d0:79:63:6b:16:62:43:
c2:f9:d7:4a:9a:ac:44:5e:b0:32:4b:90:6f:62:66:79:32:4b:
ae:66:8c:09:c4:4f:13:de:bb:93:9a:ae:d4:31:b5:76:7c:d1:
c2:bf:cc:d8:95:fa:d6:67:12:8f:14:9d:bc:86:2a:96:a3:b7:
2f:62:2f:72:bf:e1:57:7c:7e:d9:d9:78:15:27:fe:f8:0c:db:
d3:dc:62:40:c3:c3:1e:fa:81:cf:d4:74:13:17:7f:c9:cb:80:
51:e6:4b:dc:4d:f3:b7:1c:a6:74:70:8b:9d:14:5f:1b:14:28:
fd:04:18:60:5a:f7:0c:6e:e8:75:c3:40:7e:62:2a:fa:e8:a5:
0e:40:df:18:b1:39:20:dd:bd:97:2b:c6:e8:4c:c4:35:49:ab:
83:11:42:70:49:d7:68:0b:41:2b:d4:9d:a1:c7:d0:8b:b0:fe:
e0:e0:21:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:15:57 2026 by rpki-client