
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft
File: GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft (raw, json)
Hash identifier: EWA0LT9e71mMJhwag4KOf4bQN89EbkA+UArpsSS30qA=
Subject key identifier: C8:9D:12:DD:24:27:F3:38:5F:98:F0:94:12:CB:BC:7D:5D:1F:12:CC
Authority key identifier: 18:E9:29:7A:1F:1A:18:CB:87:9A:7E:12:4B:51:07:C4:40:57:3C:63
Certificate issuer: /CN=A91DF195/serialNumber=18E9297A1F1A18CB879A7E124B5107C440573C63
Certificate serial: AF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GOkpeh8aGMuHmn4SS1EHxEBXPGM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft
Manifest number: A5
Signing time: Fri 17 Jul 2026 08:32:17 +0000
Manifest this update: Fri 17 Jul 2026 08:32:17 +0000
Manifest next update: Fri 24 Jul 2026 08:32:17 +0000
Files and hashes: 1: GOkpeh8aGMuHmn4SS1EHxEBXPGM.crl (hash: liF1yHHCSyRGGH/K8Vgd8qJxXM4TDr99obHMKWmf3Hw=)
2: DCD091AA93D111F0B0A32B0BC4F9AE02.roa (hash: hLi0saBOf2tkBmk0PdINKMJEWSLB4vAdQ079CKBQEa0=)
3: 55FD631C47C011F1B54DF0A9AE833773.roa (hash: OlpbqBifvJAJXFONTp1Hij7b0M5axKWFBNjZDQgzv/Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.crl
rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GOkpeh8aGMuHmn4SS1EHxEBXPGM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 08:32:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175 (0xaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF195, serialNumber=18E9297A1F1A18CB879A7E124B5107C440573C63
Validity
Not Before: Jul 17 08:32:17 2026 GMT
Not After : Jul 24 08:32:17 2026 GMT
Subject: CN=6a59e891-0b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:01:f7:27:c6:ad:cc:96:df:12:93:59:7a:62:
34:b9:62:9b:fa:bb:aa:fc:1a:b0:19:6e:a3:b7:f5:
5d:cc:0e:02:52:32:4d:98:c4:68:ff:6d:3e:af:e9:
2e:75:8e:6d:62:05:01:21:00:6a:fb:d5:a6:02:8e:
29:40:5a:6d:da:52:94:df:19:5b:ca:d5:c1:f8:a6:
2c:fe:9e:65:7f:10:22:54:71:1d:40:64:8e:f8:80:
94:33:1c:3d:2d:e4:3b:7c:f6:4c:6c:1b:f0:fd:7a:
d9:55:65:7b:1e:04:71:79:5e:ec:0d:d4:6a:bb:54:
ce:e4:b4:99:e0:1d:70:a6:11:81:ed:47:2c:2d:c5:
fc:fe:7b:32:8c:bd:a5:1c:97:5b:35:38:66:aa:91:
d5:85:5f:bc:fc:0f:fd:14:9b:80:23:61:8f:a1:27:
0c:2e:3f:d6:62:ed:c3:21:2a:4a:11:0c:8f:21:60:
b3:5c:79:b9:68:7e:ec:88:79:d6:ba:a6:b6:6a:a3:
5b:85:99:0f:6d:73:61:93:df:de:ae:31:ac:78:b3:
d5:e8:83:8a:d1:c3:2e:50:85:56:7a:7d:18:dd:58:
0d:57:2f:d2:2c:72:8b:bf:98:d8:c6:3b:07:d7:83:
80:13:b1:d1:b1:7d:4b:af:5c:97:68:84:88:b9:3c:
b5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9D:12:DD:24:27:F3:38:5F:98:F0:94:12:CB:BC:7D:5D:1F:12:CC
X509v3 Authority Key Identifier:
keyid:18:E9:29:7A:1F:1A:18:CB:87:9A:7E:12:4B:51:07:C4:40:57:3C:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GOkpeh8aGMuHmn4SS1EHxEBXPGM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:5f:2e:d9:b4:ff:56:ee:ce:a8:43:d6:4a:f4:34:ad:ad:12:
60:32:57:b5:3d:cc:ab:e3:94:7f:97:59:67:c1:bb:50:e2:0a:
db:33:28:44:91:a3:83:8e:e4:0d:bf:ef:70:3c:0e:29:fe:2e:
00:c6:a5:b3:32:d6:cb:63:b1:2c:d8:9c:b6:eb:37:49:ac:93:
9d:a1:96:e1:1a:33:df:f7:0e:f0:7c:68:06:b2:b1:88:37:21:
45:e4:fd:92:c9:86:8b:a6:4e:41:85:12:1a:cf:96:9f:98:8e:
98:b8:12:3d:97:9a:fc:6d:82:0b:de:5b:64:dc:4f:ce:29:3d:
2e:3a:7f:b6:0b:49:50:87:c5:ae:4f:10:5b:cf:d1:54:cb:14:
ad:c6:a5:59:b4:0b:93:47:f2:a8:71:be:05:e8:c2:90:10:5e:
0c:64:02:48:2f:8f:48:fa:9a:00:6b:4d:fc:03:3c:88:7c:ac:
2d:d8:7f:56:99:82:64:80:0f:5f:28:56:c8:62:a2:9e:81:d8:
eb:c6:7c:c4:ab:ec:6a:8a:88:4b:a2:59:5c:26:2e:28:f6:14:
17:a2:a1:ef:20:71:1d:2e:00:f8:de:0d:7d:b8:a0:4c:a9:69:
0d:98:4b:b9:4a:f0:44:42:81:73:21:9a:e8:c2:c5:73:68:6c:
a4:e4:8d:cd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REYxOTUxMTAvBgNVBAUTKDE4RTkyOTdBMUYxQTE4Q0I4NzlBN0UxMjRCNTEwN0M0
NDA1NzNDNjMwHhcNMjYwNzE3MDgzMjE3WhcNMjYwNzI0MDgzMjE3WjAYMRYwFAYD
VQQDEw02YTU5ZTg5MS0wYjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuQH3J8atzJbfEpNZemI0uWKb+ruq/BqwGW6jt/VdzA4CUjJNmMRo/20+r+ku
dY5tYgUBIQBq+9WmAo4pQFpt2lKU3xlbytXB+KYs/p5lfxAiVHEdQGSO+ICUMxw9
LeQ7fPZMbBvw/XrZVWV7HgRxeV7sDdRqu1TO5LSZ4B1wphGB7UcsLcX8/nsyjL2l
HJdbNThmqpHVhV+8/A/9FJuAI2GPoScMLj/WYu3DISpKEQyPIWCzXHm5aH7siHnW
uqa2aqNbhZkPbXNhk9/erjGseLPV6IOK0cMuUIVWen0Y3VgNVy/SLHKLv5jYxjsH
14OAE7HRsX1Lr1yXaISIuTy1twIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMidEt0k
J/M4X5jwlBLLvH1dHxLMMB8GA1UdIwQYMBaAFBjpKXofGhjLh5p+EktRB8RAVzxj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjE5NS82QjY2NjkwQTkz
OEExMUYwQkJENjIzODVDNEY5QUUwMi9HT2twZWg4YUdNdUhtbjRTUzFFSHhFQlhQ
R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0dPa3BlaDhhR011SG1uNFNTMUVIeEVCWFBHTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RjE5NS82QjY2NjkwQTkzOEExMUYwQkJENjIzODVDNEY5QUUwMi9HT2twZWg4YUdN
dUhtbjRTUzFFSHhFQlhQR00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHF8u2bT/Vu7OqEPWSvQ0ra0SYDJXtT3Mq+OUf5dZZ8G7UOIK2zMoRJGjg47k
Db/vcDwOKf4uAMalszLWy2OxLNictus3SayTnaGW4Roz3/cO8HxoBrKxiDchReT9
ksmGi6ZOQYUSGs+Wn5iOmLgSPZea/G2CC95bZNxPzik9Ljp/tgtJUIfFrk8QW8/R
VMsUrcalWbQLk0fyqHG+BejCkBBeDGQCSC+PSPqaAGtN/AM8iHysLdh/VpmCZIAP
XyhWyGKinoHY68Z8xKvsaoqIS6JZXCYuKPYUF6Kh7yBxHS4A+N4NfbigTKlpDZhL
uUrwREKBcyGa6MLFc2hspOSNzQ==
-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:45 2026 by rpki-client