
$ rpki-client -vvf rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft
File: gOPDrlGaTxg3WsakP1N6hf96KoI.mft (raw, json)
Hash identifier: BRmvcSdO4FXolRQF0f8avEW1H8Ro2sYAeBQptpn7Nrs=
Subject key identifier: D9:CD:14:9E:EE:E1:5F:BC:66:4E:72:D0:FD:EE:AF:4E:6E:F5:B5:F9
Authority key identifier: 80:E3:C3:AE:51:9A:4F:18:37:5A:C6:A4:3F:53:7A:85:FF:7A:2A:82
Certificate issuer: /CN=A9177358/serialNumber=80E3C3AE519A4F18375AC6A43F537A85FF7A2A82
Certificate serial: 12EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft
Manifest number: 12D5
Signing time: Tue 24 Mar 2026 16:56:58 +0000
Manifest this update: Tue 24 Mar 2026 16:56:57 +0000
Manifest next update: Tue 31 Mar 2026 16:56:57 +0000
Files and hashes: 1: gOPDrlGaTxg3WsakP1N6hf96KoI.crl (hash: 1SzPKhW0irMeWvsDExLEV6+4eeqP3F8RzWYjN/OcaFY=)
2: 54EA0F76D36B11EBADF6AD2CC4F9AE02.roa (hash: 67lyQNjbiYHBIBW9WpGHspfkkZM/Tc9EOPndYw2IyM0=)
3: FCE4373ECAA011F0BE834809C4F9AE02.roa (hash: tZukN75APhSScUoC/I4H/NT8GRXX5KYKrXgWcXFLnoo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.crl
rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:56:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4846 (0x12ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9177358, serialNumber=80E3C3AE519A4F18375AC6A43F537A85FF7A2A82
Validity
Not Before: Mar 24 16:56:57 2026 GMT
Not After : Mar 31 16:56:57 2026 GMT
Subject: CN=69c2c25a-8843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b9:14:85:7b:d3:aa:7b:68:ad:95:bf:ff:49:
87:ae:4c:44:59:aa:3f:c0:e4:db:ee:b2:79:bb:31:
8e:a5:a5:16:8a:35:35:38:70:9b:e6:6a:2d:6e:40:
ce:e5:a3:63:27:f4:ee:bb:db:82:ee:50:d8:95:34:
73:23:bb:8c:f0:15:45:06:05:30:c9:df:49:83:c9:
7a:50:08:9f:73:88:b4:a6:27:14:73:8e:9c:37:24:
cf:c6:41:bc:f4:ab:03:05:1e:ba:29:46:cc:cf:4a:
70:e1:29:9f:bf:2f:11:b2:f5:fd:9d:24:eb:dd:58:
d2:b9:bf:e5:9c:fe:6d:1b:02:0f:7d:0d:77:f0:61:
70:59:04:b6:46:9e:9a:50:f8:b2:b5:52:c5:26:f3:
86:fc:0c:45:f1:5b:aa:40:a6:82:7d:40:9b:0b:4c:
f2:9a:4a:70:40:6e:4b:97:76:9c:82:35:ad:10:87:
02:5b:6b:90:09:4c:fa:f2:db:9b:b1:59:72:43:ca:
42:5c:fb:bf:d7:9d:29:0f:78:39:61:c6:be:3a:fb:
87:2f:93:51:bf:c2:b1:f2:4f:00:ce:e5:10:f4:76:
cf:02:df:05:e8:e7:f1:38:c2:cf:ed:a9:24:ae:67:
52:dc:92:b9:72:71:98:37:d7:59:33:17:b9:bf:36:
16:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:CD:14:9E:EE:E1:5F:BC:66:4E:72:D0:FD:EE:AF:4E:6E:F5:B5:F9
X509v3 Authority Key Identifier:
keyid:80:E3:C3:AE:51:9A:4F:18:37:5A:C6:A4:3F:53:7A:85:FF:7A:2A:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:50:be:f1:0e:08:5f:d4:4a:69:66:d7:24:b5:ea:83:bc:ca:
19:ea:f7:fc:04:c8:5d:e9:91:5e:f3:f8:2b:66:11:a9:6a:ab:
42:31:e2:ee:04:d4:da:8c:1a:b8:22:f6:50:e0:dd:81:96:9c:
66:03:eb:86:13:ef:de:db:7f:c5:aa:0e:e4:40:b9:0c:a6:27:
33:dc:ba:c2:b3:b3:57:73:cb:1a:b3:c1:87:3b:a8:f7:a3:57:
46:62:8d:28:f0:bf:b9:29:14:8c:42:d6:df:e1:d7:ec:20:ce:
93:9b:f8:b3:90:e6:19:c3:d5:14:d4:6c:0e:8b:4c:84:ea:9b:
7d:d4:4b:fa:a5:1d:15:e1:9c:85:f0:f3:ca:74:e9:31:81:c4:
a8:2c:dc:bd:e8:cb:ed:61:4c:cb:e7:40:93:73:24:78:ea:46:
f3:95:0f:28:8e:67:e8:44:2c:9f:29:b4:d4:f7:dc:da:f8:84:
ae:0a:e9:49:59:9e:43:8a:ad:4a:19:91:a2:c4:80:e6:03:8b:
25:63:33:c6:3a:6f:b2:9c:d1:e1:e0:16:69:a7:f2:c5:f6:53:
b6:7a:76:d0:39:f3:74:62:d0:b3:d4:a5:55:d1:81:80:a1:eb:
40:74:d8:c9:7b:58:01:9f:68:95:3e:59:ad:db:1f:2e:b1:0d:
20:da:01:89
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzczNTgxMTAvBgNVBAUTKDgwRTNDM0FFNTE5QTRGMTgzNzVBQzZBNDNGNTM3QTg1
RkY3QTJBODIwHhcNMjYwMzI0MTY1NjU3WhcNMjYwMzMxMTY1NjU3WjAYMRYwFAYD
VQQDEw02OWMyYzI1YS04ODQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAubkUhXvTqntorZW//0mHrkxEWao/wOTb7rJ5uzGOpaUWijU1OHCb5motbkDO
5aNjJ/Tuu9uC7lDYlTRzI7uM8BVFBgUwyd9Jg8l6UAifc4i0picUc46cNyTPxkG8
9KsDBR66KUbMz0pw4Smfvy8RsvX9nSTr3VjSub/lnP5tGwIPfQ138GFwWQS2Rp6a
UPiytVLFJvOG/AxF8VuqQKaCfUCbC0zymkpwQG5Ll3acgjWtEIcCW2uQCUz68tub
sVlyQ8pCXPu/150pD3g5Yca+OvuHL5NRv8Kx8k8AzuUQ9HbPAt8F6OfxOMLP7akk
rmdS3JK5cnGYN9dZMxe5vzYWvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNnNFJ7u
4V+8Zk5y0P3ur05u9bX5MB8GA1UdIwQYMBaAFIDjw65Rmk8YN1rGpD9TeoX/eiqC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzM1OC9CRTg0RjA5NERE
MEIxMUU4ODU0NDlBNDBDNEY5QUUwMi9nT1BEcmxHYVR4ZzNXc2FrUDFONmhmOTZL
b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dPUERybEdhVHhnM1dzYWtQMU42aGY5NktvSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NzM1OC9CRTg0RjA5NEREMEIxMUU4ODU0NDlBNDBDNEY5QUUwMi9nT1BEcmxHYVR4
ZzNXc2FrUDFONmhmOTZLb0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnlC+8Q4IX9RKaWbXJLXqg7zKGer3/ATIXemRXvP4K2YRqWqrQjHi7gTU2owa
uCL2UODdgZacZgPrhhPv3tt/xaoO5EC5DKYnM9y6wrOzV3PLGrPBhzuo96NXRmKN
KPC/uSkUjELW3+HX7CDOk5v4s5DmGcPVFNRsDotMhOqbfdRL+qUdFeGchfDzynTp
MYHEqCzcvejL7WFMy+dAk3MkeOpG85UPKI5n6EQsnym01Pfc2viErgrpSVmeQ4qt
ShmRosSA5gOLJWMzxjpvspzR4eAWaafyxfZTtnp20DnzdGLQs9SlVdGBgKHrQHTY
yXtYAZ9olT5ZrdsfLrENINoBiQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:10:23 2026 by rpki-client