
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft
File: gOPDrlGaTxg3WsakP1N6hf96KoI.mft (raw, json)
Hash identifier: RbOOQ5zluGPNlD/ya5ic5p9CbYC7hvCfz5DL8reDxo8=
Subject key identifier: 9C:53:EA:22:EC:A7:45:E2:10:E6:D5:F6:0A:B6:3D:85:A8:12:98:EA
Authority key identifier: 80:E3:C3:AE:51:9A:4F:18:37:5A:C6:A4:3F:53:7A:85:FF:7A:2A:82
Certificate issuer: /CN=A9177358/serialNumber=80E3C3AE519A4F18375AC6A43F537A85FF7A2A82
Certificate serial: 1351
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft
Manifest number: 1335
Signing time: Tue 22 Sep 2026 16:55:57 +0000
Manifest this update: Tue 22 Sep 2026 16:55:57 +0000
Manifest next update: Tue 29 Sep 2026 16:55:57 +0000
Files and hashes: 1: gOPDrlGaTxg3WsakP1N6hf96KoI.crl (hash: Ztwf4Od3HpvTCyIHztNbQtAx2/NdXWWj8y4o5kjpQzk=)
2: 0E7E95E63C8B11F186364B569C833773.roa (hash: 5t+Odc3kzlHJOT49HQha5G542XKsnZRtShbX2b003G0=)
3: FCE4373ECAA011F0BE834809C4F9AE02.roa (hash: tZukN75APhSScUoC/I4H/NT8GRXX5KYKrXgWcXFLnoo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.crl
rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 16:55:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4945 (0x1351)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9177358, serialNumber=80E3C3AE519A4F18375AC6A43F537A85FF7A2A82
Validity
Not Before: Sep 22 16:55:57 2026 GMT
Not After : Sep 29 16:55:57 2026 GMT
Subject: CN=6ab2b31d-5464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:db:10:82:2f:14:f5:3c:d4:91:51:b3:7e:68:
69:7c:c3:ed:aa:1e:5b:7d:74:44:d8:e4:13:04:ec:
eb:36:b9:52:e9:5a:60:98:02:11:6a:78:dd:ca:ff:
5a:80:71:ac:4d:29:b4:5c:cf:96:4f:d3:8f:dd:b2:
fb:44:85:b1:83:21:ef:95:30:b7:dd:f6:91:ba:73:
1e:1c:08:87:3a:99:85:ef:ae:49:40:cb:69:e6:eb:
f4:d0:2c:84:e4:92:50:3b:ab:ef:29:0c:cc:68:20:
45:35:ed:ed:76:5c:c2:37:73:20:71:7f:60:23:c1:
b5:aa:a8:c6:90:75:23:67:f4:0a:70:5d:a6:6d:da:
c9:de:af:3d:fd:bb:9c:dc:3f:68:73:98:94:97:23:
23:4d:38:55:c4:06:4d:cc:c3:c4:05:86:93:39:21:
4a:19:4e:30:fe:38:dd:4a:c4:44:8d:8a:00:23:95:
ff:d2:2e:c1:dd:25:79:ba:94:c1:4c:32:e0:02:30:
a6:4e:a3:83:ce:d9:b7:3e:05:68:57:d6:e0:7f:4a:
7c:a5:cc:06:8c:c7:45:ac:cd:b5:c6:b4:e2:a2:22:
ea:be:b0:5f:ed:7c:2e:49:7b:da:01:54:e2:c2:53:
11:b5:f7:52:34:ec:21:9f:76:d2:b8:d7:00:c4:96:
0f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:53:EA:22:EC:A7:45:E2:10:E6:D5:F6:0A:B6:3D:85:A8:12:98:EA
X509v3 Authority Key Identifier:
keyid:80:E3:C3:AE:51:9A:4F:18:37:5A:C6:A4:3F:53:7A:85:FF:7A:2A:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:99:ec:6c:b2:02:2e:fb:41:d2:9a:a3:9e:6c:7d:13:19:e8:
0b:13:ca:9a:04:3d:94:bf:51:ad:2b:32:66:96:fb:8e:67:68:
16:ab:d3:74:1f:8c:2c:2b:37:59:4d:34:f1:cf:f2:13:f8:60:
2d:74:cc:06:c2:b8:5f:c0:57:92:75:02:4c:68:85:2d:17:8f:
d0:e8:f8:b1:5b:f7:b2:1f:37:c5:98:49:e8:2d:2b:c7:6f:63:
d7:f3:56:29:68:87:d9:1e:4d:b8:79:43:a8:8a:53:ee:c7:1a:
53:9e:21:11:ed:11:81:bd:90:fa:33:bb:ed:cb:a6:d5:00:96:
19:d0:5e:f5:15:dd:fc:6d:f2:ef:87:9c:4f:67:53:83:4e:95:
12:35:52:ae:d3:50:2c:a4:81:04:71:c3:f5:fd:0c:c4:4e:85:
7d:2f:03:83:a2:bb:79:17:61:07:27:dd:89:bf:f9:b6:f4:4b:
52:13:23:ef:d8:f2:97:5f:87:28:57:91:75:be:74:92:c2:fc:
fb:4f:1e:7c:f6:e1:3d:d0:b8:8a:ea:78:b4:90:74:59:89:82:
ef:76:02:72:00:68:2e:ac:45:43:e9:0a:80:8f:10:44:88:d0:
5e:58:35:f2:fb:0d:cb:70:9f:77:8b:f0:91:f3:5f:6d:19:cf:
30:fe:1f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:22:39 2026 by rpki-client