
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft
File: gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft (raw, json)
Hash identifier: XhuoYd627x92Vy/AQQE2wUeB19VjSOSYiSFGR/LFdyc=
Subject key identifier: BD:50:B3:F0:B8:D4:8B:32:C6:87:3F:9D:AB:E1:38:A7:47:86:D4:EE
Authority key identifier: 80:E0:AB:18:9F:CD:70:1E:EE:42:C9:2B:93:C1:5B:6F:74:24:82:6A
Certificate issuer: /CN=A9143A67/serialNumber=80E0AB189FCD701EEE42C92B93C15B6F7424826A
Certificate serial: 0317
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft
Manifest number: 0312
Signing time: Wed 25 Mar 2026 00:49:51 +0000
Manifest this update: Wed 25 Mar 2026 00:49:51 +0000
Manifest next update: Wed 01 Apr 2026 00:49:51 +0000
Files and hashes: 1: gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.crl (hash: oqidXjpQdfJBAVUNYsvom9YNPLzaSIFD2HX9ssae3rQ=)
2: DE7835E0162A11F1B1AE06BC373D8C67.roa (hash: VrM8pfNcP99DuwnwC9hNDMdgumgio5P0sGAcdBWvDyk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.crl
rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 791 (0x317)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143A67, serialNumber=80E0AB189FCD701EEE42C92B93C15B6F7424826A
Validity
Not Before: Mar 25 00:49:51 2026 GMT
Not After : Apr 1 00:49:51 2026 GMT
Subject: CN=69c3312f-2dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:09:69:c9:6c:d9:63:da:3f:43:1e:d8:ba:93:
d3:5e:e5:38:4a:d3:a7:12:ee:df:19:ff:78:ff:e9:
31:8f:ec:a7:6d:de:61:0b:09:86:4c:b5:49:c6:04:
37:1c:6a:d1:bd:ae:a4:b6:e1:b3:8e:bd:b7:13:66:
35:12:25:0a:3f:16:8a:1f:b5:be:ba:6f:82:5d:ae:
ce:d2:76:70:c9:d8:76:df:80:74:8c:ee:e3:9e:aa:
5f:9b:88:f6:c4:31:f8:4c:e9:4d:f4:aa:a9:86:1a:
37:3e:22:df:90:b7:4e:44:45:d6:77:51:e7:fc:85:
67:90:06:fd:28:12:93:75:66:a5:40:0c:6f:74:df:
9b:7c:df:98:a0:89:5f:2e:bc:f0:53:0c:4a:f4:88:
73:d8:5e:8c:43:04:3f:cb:81:c0:ae:73:93:55:66:
44:42:1c:ee:dc:ed:74:ed:8e:f9:e6:73:0a:e4:d6:
6d:0d:bf:3c:f4:85:b5:68:40:51:9a:01:7f:ea:43:
fe:83:97:c5:e8:be:f0:18:bd:0a:c2:97:9b:ed:43:
78:31:4d:bc:5c:29:9a:41:d5:a6:90:ba:c5:3e:8d:
ec:66:fa:81:41:89:2a:39:55:ec:cf:32:cb:ff:8d:
42:95:f9:a7:39:56:1c:a4:6d:0d:ba:38:f5:4e:a5:
cf:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:50:B3:F0:B8:D4:8B:32:C6:87:3F:9D:AB:E1:38:A7:47:86:D4:EE
X509v3 Authority Key Identifier:
keyid:80:E0:AB:18:9F:CD:70:1E:EE:42:C9:2B:93:C1:5B:6F:74:24:82:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:f5:22:ca:95:59:7e:ec:38:75:43:1c:9c:2c:b1:0c:c0:62:
67:88:d1:32:9c:0a:ce:d0:0d:a7:0f:fc:0d:f5:f5:08:08:d7:
8c:58:0a:b7:fb:43:9c:89:cc:ca:92:ff:de:d3:d2:cf:40:db:
1e:66:73:f1:21:f6:30:6c:1e:dd:64:d7:19:1f:17:98:6e:68:
be:5a:4c:03:1e:05:3e:18:91:1c:d9:55:a6:4c:80:4b:80:11:
df:90:1b:29:e5:ce:55:10:22:74:f7:84:f9:b1:3a:9d:42:91:
dc:ea:09:85:38:91:5b:05:ae:ce:81:02:5a:01:20:b0:c8:36:
d5:34:b8:f0:fb:7b:6c:43:29:8b:92:18:e8:b0:66:a8:54:20:
53:7c:35:48:02:d9:92:86:8a:56:8e:40:2c:71:b2:53:90:5f:
3a:c3:27:a0:74:a6:68:be:ef:8b:d1:f5:91:49:96:16:af:48:
f3:a8:c6:44:57:67:53:d8:bb:8d:1b:b1:94:75:57:96:7e:dc:
5d:f4:06:67:e5:f3:72:f8:7a:73:52:ba:f1:8b:d7:08:1e:96:
6b:cd:70:54:4e:ca:4a:3e:d1:ce:56:41:c3:22:6f:62:7d:ba:
1a:2c:ce:4a:5b:de:7d:0e:a0:a7:f5:79:1f:1a:9a:3c:d4:98:
3b:98:d2:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:45:49 2026 by rpki-client