
$ rpki-client -vvf rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft
File: gOPDrlGaTxg3WsakP1N6hf96KoI.mft (raw, json)
Hash identifier: SGGeG81OoKfeJ8uWktsWTLmjRAosfmmEWB+pG1aISno=
Subject key identifier: E5:76:43:4E:44:5B:6E:B8:85:09:C3:B4:6C:0D:B0:86:3C:4B:4E:48
Authority key identifier: 80:E3:C3:AE:51:9A:4F:18:37:5A:C6:A4:3F:53:7A:85:FF:7A:2A:82
Certificate issuer: /CN=A9177358/serialNumber=80E3C3AE519A4F18375AC6A43F537A85FF7A2A82
Certificate serial: 130D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft
Manifest number: 12F1
Signing time: Tue 12 May 2026 17:03:35 +0000
Manifest this update: Tue 12 May 2026 17:03:35 +0000
Manifest next update: Tue 19 May 2026 17:03:35 +0000
Files and hashes: 1: gOPDrlGaTxg3WsakP1N6hf96KoI.crl (hash: PQn5M0KKuGA+B/rfK+JBkdi9oINyqK8VQ1TCoQOruZw=)
2: FCE4373ECAA011F0BE834809C4F9AE02.roa (hash: tZukN75APhSScUoC/I4H/NT8GRXX5KYKrXgWcXFLnoo=)
3: 0E7E95E63C8B11F186364B569C833773.roa (hash: 5t+Odc3kzlHJOT49HQha5G542XKsnZRtShbX2b003G0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.crl
rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4877 (0x130d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9177358, serialNumber=80E3C3AE519A4F18375AC6A43F537A85FF7A2A82
Validity
Not Before: May 12 17:03:35 2026 GMT
Not After : May 19 17:03:35 2026 GMT
Subject: CN=6a035d67-5d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:27:9f:bd:7f:87:7a:b8:e4:e2:98:38:dd:a8:
9f:ec:be:5e:b5:3e:82:ef:e3:b3:cb:cc:51:a4:81:
ac:c1:0d:d8:6f:e0:d0:66:f5:aa:f4:6d:3f:02:5d:
e2:b3:55:64:9e:a8:a5:b8:1b:f2:5a:03:04:09:e9:
40:e3:5a:6c:df:b3:40:59:7f:ca:56:87:54:2a:5a:
85:bd:af:df:87:66:63:17:25:5e:59:dc:03:53:2b:
60:46:52:6d:aa:ff:b4:3c:f8:82:8e:97:ea:40:0f:
2b:bf:b9:74:8b:98:be:f4:f2:d9:2a:f2:8f:2c:8f:
73:11:d7:12:97:45:ad:18:42:ea:ec:63:d8:f6:9f:
35:58:8c:6d:15:0a:5b:66:67:15:fe:2d:f1:e0:b8:
2b:e4:75:02:9b:c3:c4:4d:00:d2:3d:5d:00:a4:c2:
f4:61:02:8b:67:e5:63:64:6d:a9:d5:91:23:ff:5a:
54:fb:01:c5:6d:96:f9:2a:f1:c6:ee:16:d4:cc:66:
81:bc:df:54:5b:fc:5c:15:ac:c4:92:55:9c:58:b0:
e5:56:43:be:09:3f:6c:da:3f:6e:60:cf:f2:d5:fe:
88:db:d5:38:af:af:45:18:89:8e:fb:ef:5b:31:8e:
ad:b9:68:48:a7:3d:6f:56:bd:e9:32:56:ed:fb:5e:
5a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:76:43:4E:44:5B:6E:B8:85:09:C3:B4:6C:0D:B0:86:3C:4B:4E:48
X509v3 Authority Key Identifier:
keyid:80:E3:C3:AE:51:9A:4F:18:37:5A:C6:A4:3F:53:7A:85:FF:7A:2A:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:df:d1:e8:a0:c6:e2:b6:f8:5e:d7:b2:9b:62:22:6d:bf:c5:
79:2b:20:0f:7b:c5:09:1d:17:a2:23:29:de:87:61:4d:0e:4a:
76:76:cd:4c:39:b1:d8:86:92:5f:ff:f2:94:5f:4d:85:b3:ad:
1e:3e:45:e0:f0:ed:e2:39:9b:35:9d:d4:e1:78:ac:10:6c:2e:
1b:22:4f:6c:29:cd:7d:e3:75:fc:54:3d:60:4c:85:14:0d:9c:
72:ae:c4:55:bb:59:92:ca:fb:24:06:08:6e:07:03:ca:f0:0a:
3f:79:2c:dc:08:94:77:1e:6e:a5:30:60:7a:d0:c4:35:bc:c4:
3e:e5:d3:11:60:b9:a9:bd:80:9c:1b:0a:b9:e9:1d:7b:d8:36:
ee:f5:f5:fb:17:4b:82:33:7c:c2:1c:e2:4f:35:a7:63:19:b8:
17:d3:99:1e:b2:6d:6e:60:8b:2e:36:6a:c0:a1:e0:ce:23:1c:
00:49:fb:f3:a8:3a:b1:5d:16:18:11:26:5b:e0:05:51:dc:ee:
d2:ed:37:5d:27:1a:7b:61:04:de:8e:21:e5:34:a2:eb:f1:8f:
8b:9f:0e:50:71:94:6b:98:2a:87:5d:b6:c3:98:50:e7:56:d9:
b5:00:c9:e6:ce:88:58:73:2d:be:84:6b:e3:80:b9:ed:f8:0b:
80:ed:b7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:35:03 2026 by rpki-client