
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft
File: gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft (raw, json)
Hash identifier: HTZfT53ovJ7qC1AhoPw1kbmxL81owdUXUSqI1UhHZb8=
Subject key identifier: BC:EB:FE:2E:B2:45:FA:2B:F9:31:7C:47:DB:35:FC:99:D8:0E:03:21
Authority key identifier: 80:E0:AB:18:9F:CD:70:1E:EE:42:C9:2B:93:C1:5B:6F:74:24:82:6A
Certificate issuer: /CN=A9143A67/serialNumber=80E0AB189FCD701EEE42C92B93C15B6F7424826A
Certificate serial: 0357
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft
Manifest number: 0351
Signing time: Thu 23 Jul 2026 01:54:16 +0000
Manifest this update: Thu 23 Jul 2026 01:54:16 +0000
Manifest next update: Thu 30 Jul 2026 01:54:16 +0000
Files and hashes: 1: gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.crl (hash: Swmp5MWSrREaT6QY/flAUr1SvIk5frOaGRG8db5Ihz4=)
2: DE7835E0162A11F1B1AE06BC373D8C67.roa (hash: Jp5WJKUubellDV7cpOEF0ELwISK86JVxqNhDR8XDEUc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.crl
rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:54:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 855 (0x357)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143A67, serialNumber=80E0AB189FCD701EEE42C92B93C15B6F7424826A
Validity
Not Before: Jul 23 01:54:16 2026 GMT
Not After : Jul 30 01:54:16 2026 GMT
Subject: CN=6a617448-c7b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4d:32:6f:97:cb:1e:ea:92:e3:b5:95:88:0b:
90:3f:fd:65:91:55:d9:03:c0:e3:85:d8:32:0b:f6:
cc:4e:2f:6f:99:6e:df:0e:b6:db:92:f1:d8:01:5c:
a1:c5:55:9d:25:3f:18:d8:cf:5b:9f:17:45:38:67:
18:db:62:e9:46:29:33:94:e8:ca:72:94:78:d8:26:
de:6e:d4:e9:ea:bf:a7:66:a2:0a:29:fc:2b:dd:14:
e7:66:47:aa:5f:69:f5:bf:b0:55:4d:cf:c4:90:ab:
fd:93:79:40:c6:8e:98:e7:7c:5a:30:64:b3:d0:5e:
fa:ae:fd:77:ef:c3:cc:35:7b:2a:c1:58:cb:cf:99:
39:a8:36:e0:2a:19:8e:64:59:16:64:55:20:3f:79:
c1:2e:63:1a:7b:78:9a:11:ec:0c:8f:9d:83:3d:44:
62:6c:c2:db:d3:db:d5:35:58:e7:4d:15:61:b9:47:
24:ca:21:86:7e:ff:ac:46:75:ea:2e:47:33:6e:8d:
1a:59:15:64:5f:3c:2e:87:84:e0:77:4e:f1:ed:b7:
f6:75:77:f8:a6:48:ff:8a:70:52:02:84:73:7b:61:
4c:dd:a2:d5:f1:b4:ab:3e:0a:1b:32:a4:29:e1:e5:
0b:cd:e8:5b:76:39:8d:5d:b2:2d:13:2c:b1:8f:9f:
cd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:EB:FE:2E:B2:45:FA:2B:F9:31:7C:47:DB:35:FC:99:D8:0E:03:21
X509v3 Authority Key Identifier:
keyid:80:E0:AB:18:9F:CD:70:1E:EE:42:C9:2B:93:C1:5B:6F:74:24:82:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ab:f4:db:8b:41:af:aa:28:da:b6:b2:6a:5c:dd:5e:07:02:
a5:81:ac:b6:d9:10:59:a3:1e:c7:71:26:0b:17:90:db:26:35:
2e:28:6a:65:0c:de:4e:a5:3a:eb:34:75:05:bb:f4:21:50:ea:
b2:e6:39:ce:9e:69:db:aa:f0:81:6d:ee:8c:19:42:df:94:39:
9c:bb:1c:3d:97:d9:6d:b7:48:ab:c6:8b:24:0e:b5:42:c8:05:
42:2c:4e:75:e8:ec:d4:d0:b5:18:b2:4e:e6:c9:55:d8:3c:6c:
eb:9f:1d:45:9e:03:26:0a:b9:f2:8b:f9:19:86:e8:4a:3d:d7:
0f:b8:b7:bd:b4:9e:7f:57:f8:06:0a:af:95:52:c2:fc:46:76:
66:e1:83:a0:fd:04:88:50:e6:9d:26:ce:a4:c3:75:bf:24:4e:
7f:7a:58:f5:08:cd:16:cf:2a:5c:0e:f7:dd:75:5f:d0:9a:6e:
f1:07:21:90:cf:cf:b2:8b:29:3d:33:38:54:cd:42:e3:f0:80:
97:49:49:de:d4:41:d0:9b:92:16:09:33:1f:0d:d8:ce:b3:4f:
d3:6a:d5:f1:73:35:61:1a:07:96:a3:be:bb:9f:69:18:14:df:
5b:88:cc:13:62:c6:34:48:30:31:93:2b:d5:9a:60:39:c6:30:
a5:71:7e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:31:03 2026 by rpki-client