
$ rpki-client -vvf rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft
File: gOPDrlGaTxg3WsakP1N6hf96KoI.mft (raw, json)
Hash identifier: Ls4zcNAl4frfBHV4Q69owsxvm7JKrTxvFSLtkUoY7Z4=
Subject key identifier: B2:3D:26:B8:8A:62:78:B0:42:0B:76:8C:6F:60:03:68:7D:B1:94:EF
Authority key identifier: 80:E3:C3:AE:51:9A:4F:18:37:5A:C6:A4:3F:53:7A:85:FF:7A:2A:82
Certificate issuer: /CN=A9177358/serialNumber=80E3C3AE519A4F18375AC6A43F537A85FF7A2A82
Certificate serial: 12FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft
Manifest number: 12E2
Signing time: Sat 18 Apr 2026 16:57:39 +0000
Manifest this update: Sat 18 Apr 2026 16:57:39 +0000
Manifest next update: Sat 25 Apr 2026 16:57:39 +0000
Files and hashes: 1: gOPDrlGaTxg3WsakP1N6hf96KoI.crl (hash: jMORg9bEmVLmqsXGt1ZFFcxT31mCQepagmiL1KmGxzQ=)
2: 54EA0F76D36B11EBADF6AD2CC4F9AE02.roa (hash: 67lyQNjbiYHBIBW9WpGHspfkkZM/Tc9EOPndYw2IyM0=)
3: FCE4373ECAA011F0BE834809C4F9AE02.roa (hash: tZukN75APhSScUoC/I4H/NT8GRXX5KYKrXgWcXFLnoo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.crl
rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 16:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4859 (0x12fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9177358, serialNumber=80E3C3AE519A4F18375AC6A43F537A85FF7A2A82
Validity
Not Before: Apr 18 16:57:39 2026 GMT
Not After : Apr 25 16:57:39 2026 GMT
Subject: CN=69e3b803-3759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d8:ae:f8:7e:f3:52:ec:e5:b8:ac:e2:bf:13:
b7:6b:a1:34:a3:70:3b:fc:a0:48:ec:7c:f0:95:4c:
2d:83:41:82:cb:8f:69:08:88:89:f0:db:6f:93:ed:
5d:b0:0c:c3:65:df:b9:c0:f1:1d:81:5d:fa:c7:a8:
a0:f6:07:4e:b5:b0:a2:83:3b:46:33:c9:00:9d:1a:
32:81:43:71:21:ae:88:32:41:1a:49:fb:93:66:d7:
34:b2:c6:91:7c:13:6c:14:90:81:51:b8:92:92:cf:
27:e4:90:f4:a2:ee:90:39:ce:c1:62:7d:a2:b7:a1:
34:c1:db:b0:36:0c:5a:37:d5:0f:c4:f0:8b:ac:4f:
a0:b6:ad:48:c2:da:7c:84:af:d0:e5:6f:21:aa:59:
86:e0:e4:a8:c5:c9:b8:43:53:e6:b4:20:b4:69:d7:
63:73:6f:d2:c2:c4:ce:41:fd:f0:4a:c9:6d:51:82:
b1:c6:1f:d6:5f:ca:85:62:e3:0d:55:a8:11:39:c0:
a5:29:58:68:e5:3a:be:8e:9f:7d:24:46:69:2a:a2:
ba:b0:d9:e6:6d:08:ac:6a:c4:4d:f5:84:0d:d0:0e:
dc:d1:6c:45:e2:fd:a8:84:97:2d:39:0e:1c:5a:b9:
ac:fd:bc:47:d1:54:55:49:d1:7e:80:e4:60:e1:23:
d3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:3D:26:B8:8A:62:78:B0:42:0B:76:8C:6F:60:03:68:7D:B1:94:EF
X509v3 Authority Key Identifier:
keyid:80:E3:C3:AE:51:9A:4F:18:37:5A:C6:A4:3F:53:7A:85:FF:7A:2A:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:04:cf:4c:a5:31:29:0b:d4:0c:5f:05:3e:10:6b:8d:07:01:
e1:8b:94:f6:12:72:74:9f:ff:5e:d7:ae:7e:67:8a:dc:39:6f:
ec:5d:10:68:26:56:e4:38:4c:e6:4f:aa:90:0c:10:5c:dc:de:
5d:c8:4e:18:fe:73:17:ec:f7:a8:5d:3b:ba:f2:17:fd:94:be:
13:0e:61:6b:96:3f:18:1a:61:a9:22:8f:9a:e5:f0:fb:fc:42:
77:ee:a9:c0:26:28:73:d0:e0:37:17:11:5a:64:1b:d3:3b:2b:
81:f9:c5:08:4f:60:4c:a5:ef:9d:b5:38:45:e3:34:06:39:61:
20:16:f1:28:9f:da:d6:d4:b9:ce:a8:09:39:9e:6c:a7:aa:b9:
8f:50:98:da:96:f2:3d:54:a0:68:ff:2b:a4:e2:76:82:49:86:
a3:0f:0e:75:f3:c9:5d:35:35:60:37:3f:12:3d:2a:75:8b:74:
a6:d8:f5:e9:f7:76:ee:c1:35:fa:bd:ab:92:8c:95:eb:e4:6f:
36:9f:15:6b:81:7e:3e:82:a3:45:04:13:5f:8f:b3:be:55:59:
f9:c8:64:d5:9c:37:7b:fe:97:67:02:c7:6e:2c:4d:96:4c:f6:
ba:15:ad:3c:ee:4e:57:8c:61:83:1f:90:08:cc:11:df:71:63:
2f:55:94:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:32:50 2026 by rpki-client